From owner-ietf-ediint@mail.imc.org Wed Sep 17 09:43:20 2003 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA10977 for ; Wed, 17 Sep 2003 09:43:19 -0400 (EDT) Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h8HDM9eo099509 for ; Wed, 17 Sep 2003 06:22:09 -0700 (PDT) (envelope-from owner-ietf-ediint@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h8HDM9Be099508 for ietf-ediint-bks; Wed, 17 Sep 2003 06:22:09 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ediint@mail.imc.org using -f Received: from student.uci.agh.edu.pl (postfix@student.uci.agh.edu.pl [149.156.98.60]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h8HDM7eo099491 for ; Wed, 17 Sep 2003 06:22:08 -0700 (PDT) (envelope-from corado@student.uci.agh.edu.pl) Received: by student.uci.agh.edu.pl (Postfix, from userid 31348) id F30096463E; Wed, 17 Sep 2003 15:21:54 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by student.uci.agh.edu.pl (Postfix) with ESMTP id EAA906F631 for ; Wed, 17 Sep 2003 15:21:54 +0200 (CEST) Date: Wed, 17 Sep 2003 15:21:54 +0200 (CEST) From: Konrad Jasinski To: ietf-ediint@above.proper.com Subject: problem - veryfing Cyclone signed message In-Reply-To: <20030827152345.26654.qmail@web40910.mail.yahoo.com> Message-ID: References: <20030827152345.26654.qmail@web40910.mail.yahoo.com> MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="-559023410-758783491-1063804914=:6819" Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. ---559023410-758783491-1063804914=:6819 Content-Type: TEXT/PLAIN; charset=US-ASCII Hi, can anyone help me with my problem? I'm testing some self-made software to communicate with CycloneActivator ver 4.2 by using AS2 protocol; To do tests I'm using two Cyclons and my soft is analyzing backup data I'm analyzing signed messages from Cyclone, but I have a problem with verifing them. In rfcs and drafts it's said that multipart/signed message should be created with two parts: - in the first part: source data with some MIME Headers - in the second part: signature computed over the first part the first part sent by Cyclone is OK, but the second part is strange for me , it has much more that 64 bytes (Cyclone is using RSA(512 bits) with SHA-1, so the signature should be 64 bytes long) after a while i realized that in second part is: - something like certificate (several bytes are different, the public key is the same I've imported from Cyclone earlier - .p7c and .cer format) - I don't know why Cyclone is sending it... - after that some data,which loooks similar to some kind of certificate - at the end, just before "----=_Part....": 64 bytes - I thaught that it was a signature, but when Cyclone sends the same data, these 64 bytes are different (however the first part is all the time the same) I've computed hash(sha-1) over the first part and it's equal to the value returned by the second Cyclone in MDN I can't find the proper 64 bytes to verify this message, and i don't know how it's possible since these 64 bytes at the end of the second part are changing perhaps, these 64 bytes are computed over some more data (maybe including current time or sth else) i'm attaching backup files: - 2 different files with the same data sent : a106test1in , a108test1in (differences in time,----=_Part...,and those 64 bytes! ) - certificates created by sending Cyclone: cert.cer, certp7.p7c - MDN for a104test1in, returned by the second Cyclone: mdn Thanks! best regards: Konrad Jasinski ---559023410-758783491-1063804914=:6819 Content-Type: TEXT/PLAIN; charset=US-ASCII; name=mdn Content-ID: Content-Description: Content-Disposition: attachment; filename=mdn Content-Transfer-Encoding: BASE64 UE9TVCAvZXhjaGFuZ2UvdGVzdDIgSFRUUC8xLjENDQpNZXNzYWdlLUlEOiA8 I3Rlc3QxI0JJTkFSWSNhMjQxdGVzdDFvdXQjPg0NCkRhdGU6IFpyLCAxNyB3 cnogMjAwMyAwOToxMjowMiBHTVQNDQpGcm9tOiB0ZXN0MQ0NClN1YmplY3Q6 IHRlc3QyO3Rlc3QxDQ0KTWltZS1WZXJzaW9uOiAxLjANDQpDb250ZW50LVR5 cGU6IG11bHRpcGFydC9yZXBvcnQ7IAlib3VuZGFyeT0iLS0tLT1fUGFydF8y M18yMTg4NzQ2LjEwNjM3ODk5MjI0MzciOyByZXBvcnQtdHlwZT1kaXNwb3Np dGlvbi1ub3RpZmljYXRpb24NDQpSZWNpcGllbnQtQWRkcmVzczogZGFuY2Vy Ly9leGNoYW5nZS90ZXN0Mg0NCkFTMi1Gcm9tOiB0ZXN0MQ0NCkFTMi1Ubzog dGVzdDINDQpBUzItVmVyc2lvbjogMS4xDQ0KSG9zdDogRGFuY2VyOjQwODAN DQpDb25uZWN0aW9uOiBjbG9zZQ0NCkNvbnRlbnQtTGVuZ3RoOiA2MzENDQoN DQotLS0tLS09X1BhcnRfMjNfMjE4ODc0Ni4xMDYzNzg5OTIyNDM3DQ0KQ29u dGVudC1UeXBlOiB0ZXh0L3BsYWluOyBjaGFyc2V0PXVzLWFzY2lpDQ0KDQ0K VGhpcyBNRE4gcmVzcG9uc2UgbWVzc2FnZSBpcyBmb3I6DQ0KDQ0KTWVzc2Fn ZSBpZDogICAgPCN0ZXN0MiNCSU5BUlkjYTI2M3Rlc3Qyb3V0dGVzdDIjPg0N CkZyb206ICAgICAgICAgIHRlc3QyDQ0KRGF0ZSByZWNlaXZlZDogMDMtMDkt MTcgMTE6MTINDQoNDQotLS0tLS09X1BhcnRfMjNfMjE4ODc0Ni4xMDYzNzg5 OTIyNDM3DQ0KQ29udGVudC1UeXBlOiBtZXNzYWdlL2Rpc3Bvc2l0aW9uLW5v dGlmaWNhdGlvbg0NCg0NClJlcG9ydGluZy1VQTogS29ucmFkDQ0KT3JpZ2lu YWwtUmVjaXBpZW50OiByZmM4MjI7IHRlc3QxDQ0KRmluYWwtUmVjaXBpZW50 OiByZmM4MjI7IHRlc3QxDQ0KT3JpZ2luYWwtTWVzc2FnZS1JRDogPCN0ZXN0 MiNCSU5BUlkjYTI2M3Rlc3Qyb3V0dGVzdDIjPg0NCkRpc3Bvc2l0aW9uOiBh dXRvbWF0aWMtYWN0aW9uL01ETi1zZW50LWF1dG9tYXRpY2FsbHk7IHByb2Nl c3NlZA0NClJlY2VpdmVkLUNvbnRlbnQtTUlDOiBjWkgrMkZabHMzWEVrY2tT ZkxVM09uZ2hKMlE9LCBzaGExDQ0KDQ0KDQ0KLS0tLS0tPV9QYXJ0XzIzXzIx ODg3NDYuMTA2Mzc4OTkyMjQzNy0tDQ0K ---559023410-758783491-1063804914=:6819 Content-Type: APPLICATION/octet-stream; name="certp7.p7c" Content-ID: Content-Description: Content-Disposition: attachment; filename="certp7.p7c" Content-Transfer-Encoding: BASE64 MIIBvgYJKoZIhvcNAQcCoIIBrzCCAasCAQExADALBgkqhkiG9w0BBwGgggGT MIIBjzCCATmgAwIBAgIQbesqveI8ggYBa6C1EBS+XTANBgkqhkiG9w0BAQUF ADBAMQswCQYDVQQGEwJwbDEOMAwGA1UEBxMFYWRhc2QxETAPBgNVBAoTCHN0 dWRlbnQyMQ4wDAYDVQQDEwVhZGFzZDAeFw0wMzA4MDcxMTMyNDFaFw0wNTA4 MDcxMTMyNDFaMEAxCzAJBgNVBAYTAnBsMQ4wDAYDVQQHEwVhZGFzZDERMA8G A1UEChMIc3R1ZGVudDIxDjAMBgNVBAMTBWFkYXNkMFwwDQYJKoZIhvcNAQEB BQADSwAwSAJBAMDFW5ecVI8mW7cJuJH3Qpu9CYpOAxOdr5v39eSq8LmvcU+g mvXmpdZ9YQ/XEjYz0x2m8WQFKb5I/guOvvTv450CAwEAAaMPMA0wCwYDVR0P BAQDAgCgMA0GCSqGSIb3DQEBBQUAA0EAhYekOTD9/8Ks4tY12tpg0CgysTjO YGGsmPVHsaF02UPZRVtLFUYZV8dj50zvT3x0vvpvacW3Ep5QrfUffodetTEA ---559023410-758783491-1063804914=:6819 Content-Type: APPLICATION/octet-stream; name="cert.cer" Content-ID: Content-Description: Content-Disposition: attachment; filename="cert.cer" Content-Transfer-Encoding: BASE64 MIIBjzCCATmgAwIBAgIQbesqveI8ggYBa6C1EBS+XTANBgkqhkiG9w0BAQUF ADBAMQswCQYDVQQGEwJwbDEOMAwGA1UEBxMFYWRhc2QxETAPBgNVBAoTCHN0 dWRlbnQyMQ4wDAYDVQQDEwVhZGFzZDAeFw0wMzA4MDcxMTMyNDFaFw0wNTA4 MDcxMTMyNDFaMEAxCzAJBgNVBAYTAnBsMQ4wDAYDVQQHEwVhZGFzZDERMA8G A1UEChMIc3R1ZGVudDIxDjAMBgNVBAMTBWFkYXNkMFwwDQYJKoZIhvcNAQEB BQADSwAwSAJBAMDFW5ecVI8mW7cJuJH3Qpu9CYpOAxOdr5v39eSq8LmvcU+g mvXmpdZ9YQ/XEjYz0x2m8WQFKb5I/guOvvTv450CAwEAAaMPMA0wCwYDVR0P BAQDAgCgMA0GCSqGSIb3DQEBBQUAA0EAhYekOTD9/8Ks4tY12tpg0CgysTjO YGGsmPVHsaF02UPZRVtLFUYZV8dj50zvT3x0vvpvacW3Ep5QrfUffodetQ== ---559023410-758783491-1063804914=:6819 Content-Type: APPLICATION/octet-stream; name=a106test1in Content-ID: Content-Description: Content-Disposition: attachment; filename=a106test1in Content-Transfer-Encoding: BASE64 UE9TVCAvZXhjaGFuZ2UvdGVzdDEgSFRUUC8xLjENCk1lc3NhZ2UtSUQ6IDwj dGVzdDIjQklOQVJZI2EyNjR0ZXN0Mm91dHRlc3QyIz4NCkRhdGU6IFpyLCAx NyB3cnogMjAwMyAwOTozNzo0NyBHTVQNCkZyb206IHRlc3QyDQpTdWJqZWN0 OiB0ZXN0MTt0ZXN0Mg0KTWltZS1WZXJzaW9uOiAxLjANCkNvbnRlbnQtVHlw ZTogbXVsdGlwYXJ0L3NpZ25lZDsgCWJvdW5kYXJ5PSItLS0tPV9QYXJ0Xzhf NzYxMzk1MC4xMDYzNzkxNDY3MjE4IjsgcHJvdG9jb2w9ImFwcGxpY2F0aW9u L3BrY3M3LXNpZ25hdHVyZSI7IG1pY2FsZz0ic2hhMSINClJlY2lwaWVudC1B ZGRyZXNzOiBLb25yYWQvL2V4Y2hhbmdlL3Rlc3QxDQpESVNQT1NJVElPTi1O T1RJRklDQVRJT04tVE86IGh0dHA6Ly9EYW5jZXI6NDA4MC9leGNoYW5nZS90 ZXN0Mg0KUkVDRUlQVC1ERUxJVkVSWS1PUFRJT046IGh0dHA6Ly9EYW5jZXI6 NDA4MC9leGNoYW5nZS90ZXN0Mg0KQVMyLUZyb206IHRlc3QyDQpBUzItVG86 IHRlc3QxDQpBUzItVmVyc2lvbjogMS4xDQpIb3N0OiBLb25yYWQ6NDA4MA0K Q29ubmVjdGlvbjogY2xvc2UNCkNvbnRlbnQtTGVuZ3RoOiAxMDkyDQoNCi0t LS0tLT1fUGFydF84Xzc2MTM5NTAuMTA2Mzc5MTQ2NzIxOA0KQ29udGVudC1U eXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW07IG5hbWU9dGVzdC50eHQN CkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IGJpbmFyeQ0KQ29udGVudC1E aXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9dGVzdC50eHQNCg0K dGVlZWUNCi0tLS0tLT1fUGFydF84Xzc2MTM5NTAuMTA2Mzc5MTQ2NzIxOA0K Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wa2NzNy1zaWduYXR1cmUNCkNv bnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IGJpbmFyeQ0KDQowggLjBgkqhkiG 9w0BBwKgggLUMIIC0AIBATELMAkGBSsOAwIaBQAwCwYJKoZIhvcNAQcBoIIB kzCCAY8wggE5oAMCAQICEG3rKr3iPIIGAWugtRAUvl0wDQYJKoZIhvcNAQEF BQAwQDELMAkGA1UEBhMCcGwxDjAMBgNVBAcTBWFkYXNkMREwDwYDVQQKEwhz dHVkZW50MjEOMAwGA1UEAxMFYWRhc2QwHhcNMDMwODA3MTEzMjQxWhcNMDUw ODA3MTEzMjQxWjBAMQswCQYDVQQGEwJwbDEOMAwGA1UEBxMFYWRhc2QxETAP BgNVBAoTCHN0dWRlbnQyMQ4wDAYDVQQDEwVhZGFzZDBcMA0GCSqGSIb3DQEB AQUAA0sAMEgCQQDAxVuXnFSPJlu3CbiR90KbvQmKTgMTna+b9/XkqvC5r3FP oJr15qXWfWEP1xI2M9MdpvFkBSm+SP4Ljr707+OdAgMBAAGjDzANMAsGA1Ud DwQEAwIAoDANBgkqhkiG9w0BAQUFAANBAIWHpDkw/f/CrOLWNdraYNAoMrE4 zmBhrJj1R7GhdNlD2UVbSxVGGVfHY+dM7098dL76b2nFtxKeUK31H36HXrUx ggEYMIIBFAIBATBUMEAxCzAJBgNVBAYTAnBsMQ4wDAYDVQQHEwVhZGFzZDER MA8GA1UEChMIc3R1ZGVudDIxDjAMBgNVBAMTBWFkYXNkAhBt6yq94jyCBgFr oLUQFL5dMAkGBSsOAwIaBQCgXTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB MBwGCSqGSIb3DQEJBTEPFw0wMzA5MTcwOTM3NDdaMCMGCSqGSIb3DQEJBDEW BBRxkf7YVmWzdcSRyRJ8tTc6eCEnZDANBgkqhkiG9w0BAQEFAARAqOW14q5r 1hqDCoMoHZW5JeQkGXamWHX99xcDy7iVVqrgVmRaP7sHi4hK4gyinhcrGx1N akhtk5ai4j38iIriVA0KLS0tLS0tPV9QYXJ0XzhfNzYxMzk1MC4xMDYzNzkx NDY3MjE4LS0NCg== ---559023410-758783491-1063804914=:6819 Content-Type: APPLICATION/octet-stream; name=a104test1in Content-ID: Content-Description: Content-Disposition: attachment; filename=a104test1in Content-Transfer-Encoding: BASE64 UE9TVCAvZXhjaGFuZ2UvdGVzdDEgSFRUUC8xLjENCk1lc3NhZ2UtSUQ6IDwj dGVzdDIjQklOQVJZI2EyNjN0ZXN0Mm91dHRlc3QyIz4NCkRhdGU6IFpyLCAx NyB3cnogMjAwMyAwOToxMjozOSBHTVQNCkZyb206IHRlc3QyDQpTdWJqZWN0 OiB0ZXN0MTt0ZXN0Mg0KTWltZS1WZXJzaW9uOiAxLjANCkNvbnRlbnQtVHlw ZTogbXVsdGlwYXJ0L3NpZ25lZDsgCWJvdW5kYXJ5PSItLS0tPV9QYXJ0Xzdf MzM4NDczNi4xMDYzNzg5OTU4OTk5IjsgcHJvdG9jb2w9ImFwcGxpY2F0aW9u L3BrY3M3LXNpZ25hdHVyZSI7IG1pY2FsZz0ic2hhMSINClJlY2lwaWVudC1B ZGRyZXNzOiBLb25yYWQvL2V4Y2hhbmdlL3Rlc3QxDQpESVNQT1NJVElPTi1O T1RJRklDQVRJT04tVE86IGh0dHA6Ly9EYW5jZXI6NDA4MC9leGNoYW5nZS90 ZXN0Mg0KUkVDRUlQVC1ERUxJVkVSWS1PUFRJT046IGh0dHA6Ly9EYW5jZXI6 NDA4MC9leGNoYW5nZS90ZXN0Mg0KQVMyLUZyb206IHRlc3QyDQpBUzItVG86 IHRlc3QxDQpBUzItVmVyc2lvbjogMS4xDQpIb3N0OiBLb25yYWQ6NDA4MA0K Q29ubmVjdGlvbjogY2xvc2UNCkNvbnRlbnQtTGVuZ3RoOiAxMDkyDQoNCi0t LS0tLT1fUGFydF83XzMzODQ3MzYuMTA2Mzc4OTk1ODk5OQ0KQ29udGVudC1U eXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW07IG5hbWU9dGVzdC50eHQN CkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IGJpbmFyeQ0KQ29udGVudC1E aXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9dGVzdC50eHQNCg0K dGVlZWUNCi0tLS0tLT1fUGFydF83XzMzODQ3MzYuMTA2Mzc4OTk1ODk5OQ0K Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wa2NzNy1zaWduYXR1cmUNCkNv bnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IGJpbmFyeQ0KDQowggLjBgkqhkiG 9w0BBwKgggLUMIIC0AIBATELMAkGBSsOAwIaBQAwCwYJKoZIhvcNAQcBoIIB kzCCAY8wggE5oAMCAQICEG3rKr3iPIIGAWugtRAUvl0wDQYJKoZIhvcNAQEF BQAwQDELMAkGA1UEBhMCcGwxDjAMBgNVBAcTBWFkYXNkMREwDwYDVQQKEwhz dHVkZW50MjEOMAwGA1UEAxMFYWRhc2QwHhcNMDMwODA3MTEzMjQxWhcNMDUw ODA3MTEzMjQxWjBAMQswCQYDVQQGEwJwbDEOMAwGA1UEBxMFYWRhc2QxETAP BgNVBAoTCHN0dWRlbnQyMQ4wDAYDVQQDEwVhZGFzZDBcMA0GCSqGSIb3DQEB AQUAA0sAMEgCQQDAxVuXnFSPJlu3CbiR90KbvQmKTgMTna+b9/XkqvC5r3FP oJr15qXWfWEP1xI2M9MdpvFkBSm+SP4Ljr707+OdAgMBAAGjDzANMAsGA1Ud DwQEAwIAoDANBgkqhkiG9w0BAQUFAANBAIWHpDkw/f/CrOLWNdraYNAoMrE4 zmBhrJj1R7GhdNlD2UVbSxVGGVfHY+dM7098dL76b2nFtxKeUK31H36HXrUx ggEYMIIBFAIBATBUMEAxCzAJBgNVBAYTAnBsMQ4wDAYDVQQHEwVhZGFzZDER MA8GA1UEChMIc3R1ZGVudDIxDjAMBgNVBAMTBWFkYXNkAhBt6yq94jyCBgFr oLUQFL5dMAkGBSsOAwIaBQCgXTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB MBwGCSqGSIb3DQEJBTEPFw0wMzA5MTcwOTEyMzlaMCMGCSqGSIb3DQEJBDEW BBRxkf7YVmWzdcSRyRJ8tTc6eCEnZDANBgkqhkiG9w0BAQEFAARAblK7m+Dm vnbHFhbzKR6wzqBlwD1SbxOm838Wjhhi6LCZvbxur09ujbZRZpZ72XMN0u2H YFfLXKtORSY2Jgd0Vg0KLS0tLS0tPV9QYXJ0XzdfMzM4NDczNi4xMDYzNzg5 OTU4OTk5LS0NCg== ---559023410-758783491-1063804914=:6819-- From owner-ietf-ediint@mail.imc.org Wed Sep 17 13:07:14 2003 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA20356 for ; Wed, 17 Sep 2003 13:07:14 -0400 (EDT) Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h8HGghej007693 for ; Wed, 17 Sep 2003 09:42:43 -0700 (PDT) (envelope-from owner-ietf-ediint@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h8HGghxP007692 for ietf-ediint-bks; Wed, 17 Sep 2003 09:42:43 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ediint@mail.imc.org using -f Received: from spyglass.cyclonecommerce.com (spyglass.cyclonecommerce.com [12.34.72.100]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h8HGgdej007684 for ; Wed, 17 Sep 2003 09:42:42 -0700 (PDT) (envelope-from dmoberg@cyclonecommerce.com) Received: from usazscsmh1.cyclonecommerce.com [10.1.0.24] by spyglass.cyclonecommerce.com with XWall v3.27 ; Wed, 17 Sep 2003 09:42:35 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.0.6470.0 content-class: urn:content-classes:message Subject: RE: problem - veryfing Cyclone signed message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Date: Wed, 17 Sep 2003 09:42:34 -0700 Message-ID: Thread-Topic: problem - veryfing Cyclone signed message Thread-Index: AcN9IHzBszPMssQCQpSnIqzmjQwDUAAGRiuQ From: "Dale Moberg" To: "Konrad Jasinski" , Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by above.proper.com id h8HGggej007688 Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Content-Transfer-Encoding: 8bit Hi Konrad, This list is primarily for discussions of the drafts from the EDIINT IETF group. Nevertheless, here is a suggestion that may help you. The "second part" is really a PKCS7 detached signature, which is a structure originally defined by the Public Key Cryptography Specifcation 7. Basically it omits the "content data part" of the signature which is usually present in a pkcs7. PKCS7 is defined using ASN.1, and encoded in BER (the certificates or CRLS that may be included will be DER encoded). Use your favorite search engine to find copies of these or just read the IETF CMS specification instead (and postpone the extensive history of readings.) I think following up on these references will eventually (and it will be a while) lead to a solution to your difficulties! Cordially, Dale Moberg -----Original Message----- From: owner-ietf-ediint@mail.imc.org [mailto:owner-ietf-ediint@mail.imc.org] On Behalf Of Konrad Jasinski Sent: Wednesday, September 17, 2003 6:22 AM To: ietf-ediint@above.proper.com Subject: problem - veryfing Cyclone signed message Importance: Low Hi, can anyone help me with my problem? I'm testing some self-made software to communicate with CycloneActivator ver 4.2 by using AS2 protocol; To do tests I'm using two Cyclons and my soft is analyzing backup data I'm analyzing signed messages from Cyclone, but I have a problem with verifing them. In rfcs and drafts it's said that multipart/signed message should be created with two parts: - in the first part: source data with some MIME Headers - in the second part: signature computed over the first part the first part sent by Cyclone is OK, but the second part is strange for me , it has much more that 64 bytes (Cyclone is using RSA(512 bits) with SHA-1, so the signature should be 64 bytes long) after a while i realized that in second part is: - something like certificate (several bytes are different, the public key is the same I've imported from Cyclone earlier - .p7c and .cer format) - I don't know why Cyclone is sending it... - after that some data,which loooks similar to some kind of certificate - at the end, just before "----=_Part....": 64 bytes - I thaught that it was a signature, but when Cyclone sends the same data, these 64 bytes are different (however the first part is all the time the same) I've computed hash(sha-1) over the first part and it's equal to the value returned by the second Cyclone in MDN I can't find the proper 64 bytes to verify this message, and i don't know how it's possible since these 64 bytes at the end of the second part are changing perhaps, these 64 bytes are computed over some more data (maybe including current time or sth else) i'm attaching backup files: - 2 different files with the same data sent : a106test1in , a108test1in (differences in time,----=_Part...,and those 64 bytes! ) - certificates created by sending Cyclone: cert.cer, certp7.p7c - MDN for a104test1in, returned by the second Cyclone: mdn Thanks! best regards: Konrad Jasinski