[Mono-bugs] [Bug 75742][Nor] New - MONO PKCS7 signed by RSAManaged cannot be verified by Microsoft components.

bugzilla-daemon at bugzilla.ximian.com bugzilla-daemon at bugzilla.ximian.com
Mon Aug 8 06:09:37 EDT 2005


Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by dgranath at gmail.com.

http://bugzilla.ximian.com/show_bug.cgi?id=75742

--- shadow/75742	2005-08-08 06:09:37.000000000 -0400
+++ shadow/75742.tmp.28310	2005-08-08 06:09:37.000000000 -0400
@@ -0,0 +1,45 @@
+Bug#: 75742
+Product: Mono: Class Libraries
+Version: 1.1
+OS: 
+OS Details: 
+Status: NEW   
+Resolution: 
+Severity: 
+Priority: Normal
+Component: Mono.Security
+AssignedTo: mono-bugs at ximian.com                            
+ReportedBy: dgranath at gmail.com               
+QAContact: mono-bugs at ximian.com
+TargetMilestone: ---
+URL: 
+Cc: 
+Summary: MONO PKCS7 signed by RSAManaged cannot be verified by Microsoft components.
+
+Performing a PKCS7 signature using the Mono RSAManaged class, results in
+a PKCS7 object which cannot be verified by the MS CAPICOM component.
+Furthermore, wrapping the PKCS7 in a S/MIME construct and trying to verify
+using Outlook Express or Outlook also fails. In all these cases it is the
+signature verification which fails. If one uses the MS
+RSACryptoServiceProvider class instead, everything works ok.
+
+Interestingly, trying to verify the same PKCS7 using openssl or Mozilla
+Thunderbird(S/MIME) succeeds.
+
+
+Steps to reproduce the problem:
+  1. You need a RSA key and a corresponding certificate.
+  2. Create an instance of the RSAManaged class.
+  3. Import your RSA key into the RSAManaged instance.
+  4. Create a PKCS7 using your RSAManaged instance for signing,
+     and also adding the certificate..
+  5. Verify the PKCS7 using the CAPICOM.SignedData object.
+
+Actual Results: 
+  CAPICOM throws an exception with message 'Invalid Signature'
+
+Expected Results:
+  Success ie no exception
+
+How often does this happen? 
+  Everytime


More information about the mono-bugs mailing list