Open source implementation of the SCEP protocol for VPN certificate enrollment

Vikram Kumar | 20 Jul 2011 04:56

Hi,

I am getting the following error in openscep. Would greatly appreciate if any clues as to how to get around this issue is provided.

decode.c:223: working with signer <at> 505fbf0

decode.c:232: verify against selfsigned cert 505fbf0

decode.c:246: certificate ( <at> 505fbf0) for '/CN=xyz-SCEP-Client' added to store

decode.c:254: verifying signature

decode.c:257: verification failed

decode.c:463: error return from decode

24148:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100:

24148:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:396:

24148:error:21071069:PKCS7 routines:PKCS7_signatureVerify:signature failure:pk7_doit.c:793:

scepd.c:151: decode failed

Thanks,

-Vikram.

P.S I am getting the above error when using Java Scep Client implementation (Jscep).

Vikram Kumar | 20 Jul 2011 10:36

Would really appreciate any help here..

Thanks,

-Vikram.

From: Vikram Kumar <vikrampkumar <at> gmail.com>
Date: Tue, 19 Jul 2011 19:56:09 -0700
To: <openscep <at> lists.othello.ch>
Subject: openscep decode error

Hi,

I am getting the following error in openscep. Would greatly appreciate if any clues as to how to get around this issue is provided.

decode.c:223: working with signer <at> 505fbf0

decode.c:232: verify against selfsigned cert 505fbf0

decode.c:246: certificate ( <at> 505fbf0) for '/CN=xyz-SCEP-Client' added to store

decode.c:254: verifying signature

decode.c:257: verification failed

decode.c:463: error return from decode

24148:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100:

24148:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:396:

24148:error:21071069:PKCS7 routines:PKCS7_signatureVerify:signature failure:pk7_doit.c:793:

scepd.c:151: decode failed

Thanks,

-Vikram.

P.S I am getting the above error when using Java Scep Client implementation (Jscep).