OpenSSL / java / wiki bits

[Martin Atkins]

Ken Horn wrote:
>      Error from demo page:
> *    **Error:* Error in DSA_verify: error:0D07209B:asn1 encoding 
> routines:ASN1_get_object:too long at 
> /usr/share/perl5/Net/OpenID/Consumer.pm line 401.
> /[runtime_error]/
[snip]
>      If I miss out the sha1, I get: *Error:* DSA signature verification 
> failed /[verify_failed]  --  is this any better?/

I think the second error is better -- for some value of "better", at 
least. The first error looks like your key is actually broken in some 
way, while the second error is the standard response you get if the 
signature is structured correctly but doesn't match the expected result 
with the given key.

I don't know enough about Java's stuff to comment any further, but I 
think that in the second case you're closer to the answer. Make sure now 
that you are signing the right string, that the consumer is getting the 
right key, and so forth.

Someone else can probably do better than this, but I hope this helps for 
now. :)