For Programmers: Free Programming Magazines  


Home > Archive > Java Security > November 2005 > Verifying signature on a different host









You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

 

Author Verifying signature on a different host
Reinout van Schouwen

2005-11-22, 8:00 am


Hello all,

In my application I have a packet of information for which I generate a
signature ("SHA1withDSA"). The raw byte data for the signature is
generated from the information using a MessageDigest ("SHA") and a
public/private key pair has been generated previously.

My question is this: at some point I want to verify the signature using
the public key. When I execute the verification on the same host as
where the information was signed, it verifies correctly. However when I
transport my object to a different host using RMI and then try to verify
the signature, it returns false! I have checked that the information on
which the raw byte data is generated by the MessageDigest did not
change.

Does anyone have a clarification for this phenomenon?

regards,

--
Reinout van Schouwen *** student of Artifical Intelligence
email: reinout@cs.vu.nl *** mobile phone: +31-6-44360778
www.vanschouwen.info *** help mee met GNOME vertalen: nl.gnome.org
Sponsored Links







Also available: Server administration forum archive | Web Design forum archive | Software forum archive | Hardware reviews archive

Copyright 2009 codecomments.com