aboutsummaryrefslogtreecommitdiffstats
path: root/sm/certcheck.c
diff options
context:
space:
mode:
authorWerner Koch <[email protected]>2002-09-19 12:59:57 +0000
committerWerner Koch <[email protected]>2002-09-19 12:59:57 +0000
commit8bd507e5a2952d88c09fd3393b93d50960818e50 (patch)
tree2094bc1dbf163716a27c4f667b11c526c06cb508 /sm/certcheck.c
parentFrom stable branch (diff)
downloadgnupg-8bd507e5a2952d88c09fd3393b93d50960818e50.tar.gz
gnupg-8bd507e5a2952d88c09fd3393b93d50960818e50.zip
* certcheck.c (gpgsm_check_cert_sig): Add cert hash debugging.NEWPG-0-9-2
* certchain.c (find_up): Print info when the cert was not found by the autorithyKeyIdentifier.
Diffstat (limited to 'sm/certcheck.c')
-rw-r--r--sm/certcheck.c12
1 files changed, 12 insertions, 0 deletions
diff --git a/sm/certcheck.c b/sm/certcheck.c
index 4700fe723..37d2b00df 100644
--- a/sm/certcheck.c
+++ b/sm/certcheck.c
@@ -123,6 +123,8 @@ gpgsm_check_cert_sig (KsbaCert issuer_cert, KsbaCert cert)
log_error ("md_open failed: %s\n", gcry_strerror (-1));
return GNUPG_General_Error;
}
+ if (DBG_HASHING)
+ gcry_md_start_debug (md, "hash.cert");
rc = ksba_cert_hash (cert, 1, HASH_FNC, md);
if (rc)
@@ -142,6 +144,15 @@ gpgsm_check_cert_sig (KsbaCert issuer_cert, KsbaCert cert)
ksba_free (p);
return GNUPG_Bug;
}
+ if (DBG_X509)
+ {
+ int j;
+ log_debug ("signature value:");
+ for (j=0; j < n; j++)
+ log_printf (" %02X", p[j]);
+ log_printf ("\n");
+ }
+
rc = gcry_sexp_sscan ( &s_sig, NULL, p, n);
ksba_free (p);
if (rc)
@@ -184,6 +195,7 @@ gpgsm_check_cert_sig (KsbaCert issuer_cert, KsbaCert cert)
if ( gcry_sexp_build (&s_hash, NULL, "%m", frame) )
BUG ();
gcry_mpi_release (frame);
+
rc = gcry_pk_verify (s_sig, s_hash, s_pkey);
if (DBG_CRYPTO)