Problem verifying a signed message

<[email protected]> Mon, 18 Mar 2002 14:40:01 +0100

Newsgroups	gmane.ietf.sfl
Organization	http://freemail.web.de/
Message-ID	<[email protected]>

I have a problem during signature verification of the attached message.

In the function "CSM_MsgSignerInfo::Verify", the authenticatedAttributes are encoded via snacc and then
SMTI_Verify is called for signatur verification.

The problem is that snacc produces an different order for the attributes than the original signer of
the message, so the verification fails.

The question now is, which encoding is correct?

I have observed the same problem with messages signed by Mozilla 0.9.8.

Any help would be greatly appreciated.

Thanks,

Manfred Klug


________________________________________________________________
Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr! 
Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13

Signed.txt (text/plain, 2.1 KB)

MIME-Version: 1.0
Content-Type: multipart/signed ; protocol="application/x-pkcs7-signature" ; micalg=sha1 ; boundary="----4C9B2E13956E32812B636978BE17A6B7"

This is an S/MIME signed message

------4C9B2E13956E32812B636978BE17A6B7
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dies ist eine einfache Testnachricht.

------4C9B2E13956E32812B636978BE17A6B7
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
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==

------4C9B2E13956E32812B636978BE17A6B7--