CODEWITHSUNDEEP
opensslcryptographyx509certificatex509x509certificatevalidator
Kaustubh
Kaustubh

Reputation: 27

What can potentially cause CMS routines:CMS_SIGNERINFO_VERIFY_CERT:certificate verify error?

I am trying to verify the signer cert based on its issuer CA cert. I am using following OpenSSL API to verify the certs.

int CMS_verify(CMS_ContentInfo *cms, STACK_OF(X509) *certs, X509_STORE *store, BIO *indata, BIO *out, unsigned int flags);

The first parameter contains the base 64 encoded message. The second parameter is the Stack of both CA and signer certs, The third parameter is the pointer to the cert store, The fourth and fifth parameter is BIO pointers. The last parameter is set to 0.

When I try to verify signer certificate based on the CA certificate I get 

CMS routines:CMS_SIGNERINFO_VERIFY_CERT:certificate verify error

The issuer certificate for the signer cert is the CA cert and both CA and signer cert is valid.

Does anyone know what could be causing this verification failure? And any ways of getting around it?

Upvotes: 1

Views: 271

Answers (0)

Related Questions