Obtaining CA signature from the CRL...

From: akhare1 (akhare1_at_my-deja.com)
Date: 01/30/04 

Date: 29 Jan 2004 16:34:13 -0800

I have been trying to obtain the signature of the CA from the CRL (so
that I can verify the signature by calling
CryptVerifyCerificateSignatureEx). As far as I can tell, there doesn't
seem to be an obvious way of doing it.

The CRL_INFO structure only contains the signing algorithm, but not
the signature itself. Calling CryptoDecodeObject with
X509_CERT_CRL_TO_BE_SIGNED with the raw CRL bytes returns success, but
what's the type of structure that's returned?

Can someone shed light on the matter?

Thanks,
Atul

Relevant Pages

  • Re: The Windows Genuine Advantage Notification
    ... MS expects its paying customers to work for them for free to catch pirates instead of calling the legal authorities to do the job. ... It would probably be more correct to say "MS assumes that pirates and thieves are using illegal software", and is trying to find out whether you are one of those. ... calling in to the Microsoft WGA forum requires a Passport login ... It compares a locally generated and locally stored signature with a newly computed signature, using the same method on what is supposed to be the same computer; if they differ, the computer might be a bad one. ...
    (microsoft.public.windowsupdate)
  • Re: http://www.ms-mvp.org/
    ... when you tell them in your signature not to follow any advice from Leythos? ... it's about 2PM West Coast time and his IP shows as ... Calling an illegal alien an "undocumented worker" is like calling a ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Windows doesnt verify digital signature of CRL files
    ... Microsoft's CryptoAPI does check the CRL's signature. ... > verifying the signature in a CRL. ... For each distribution point in the certificate CRL distribution ... That's almost exactly what Microsoft's CryptoAPI does. ...
    (Bugtraq)
  • Re: Windows doesnt verify digital signature of CRL files
    ... If Windows is not checking the signature, not only can you remove or alter ... For example by creating a CRL revoking all ... it online somewhere and then generating a certificate that lists the location ... of your fake Verisign CRL in the CDP extension and getting people to use that ...
    (Bugtraq)
  • Re: Overloading 101 quesiton
    ... methods that differ only by reference or value, ... "ref" keyword that you can specify when calling the method. ... ByVal are for creating the signature, not calling the method (afaik, I ...
    (microsoft.public.dotnet.languages.csharp)