RE: SignedData Example

Jim,

Your SignedData sample message does not include the signer's cert.  It is
possible to obtain the signer's cert by other means, but it would simplify
the testing if you could re-generate the sample to include the signer's
cert.

===========================================
John Pawling, [email protected]
Getronics Government Solutions, LLC
===========================================

-----Original Message-----
From: Jim Schaad [mailto:[email protected]]
Sent: Friday, November 30, 2001 1:57 AM
To: [email protected]
Cc: Russ Housley; [email protected]
Subject: SignedData Example


I have a new SignedData example that I would like to get some opinions
of.  I have tried it againist the Microsoft CAPI 2.0 system and it
failed to verify, but I know how that code is implemented and it would
fail this case.

I encoded the sequence of authenticated attributes using the DER rules
and hashed it.  Then I encoded the entire message, including the
autenticated attributes, using BER encoding rules - that is the SET OF
is not sorted.  I believe that this constitutes a legal SignedData
message but would like some verification.

Jim