Re: PKINIT for gsissh

3 okt 2011 kl. 18:07 skrev Ali Gholami:

> Hi Love,
> 
> I noticed there is a two pointer comparison in hx509/crypto.c where the execution point goes and error occurs afterwards: 
> 
>    if (indata.data != data->data)
>        der_free_octet_string(&indata);
>        if (ret <= 0) {
> 
>        ret = HX509_CMS_FAILED_CREATE_SIGATURE;
>        hx509_set_error_string(context, 0, ret,
>                               "RSA private encrypt failed: %d", ret);
>        return ret;
>    }
> 
> The memory traces show there is always two different values for indata.data and data->data and ret is set to -2 before line " ret = HX509_CMS_FAILED_CREATE_SIGATURE".  Do you know the reason for this comparison in the if condition?

if you use hcrypto (not openssl), its that your key is smaller then digest size before or after adding padding.

You have tiny rsa keys ?

Love