RE: SignedData Example

["Pawling, John" <John.Pawling@xxxxxxxxxxxxxxxx>]

Jim,

Your SignedData sample message does not include the signer's cert.  It is
possible to obtain the signer's cert by other means, but it would simplify
the testing if you could re-generate the sample to include the signer's
cert.

===========================================
John Pawling, John.Pawling@xxxxxxxxxxxxxxxx
Getronics Government Solutions, LLC
===========================================

-----Original Message-----
From: Jim Schaad [mailto:jimsch@xxxxxxxxxx]
Sent: Friday, November 30, 2001 1:57 AM
To: ietf-smime-examples@xxxxxxx
Cc: Russ Housley; trevorf@xxxxxxxxxxxxxxxxxxxxx
Subject: SignedData Example


I have a new SignedData example that I would like to get some opinions
of.  I have tried it againist the Microsoft CAPI 2.0 system and it
failed to verify, but I know how that code is implemented and it would
fail this case.

I encoded the sequence of authenticated attributes using the DER rules
and hashed it.  Then I encoded the entire message, including the
autenticated attributes, using BER encoding rules - that is the SET OF
is not sorted.  I believe that this constitutes a legal SignedData
message but would like some verification.

Jim