Steve,
the signatures contained in the originator-certificate and
MIC-Info of my last PEM-letter are wrong. I discovered some
problems in our PEM software. Please forget it. Sorry for
that garbage.
While in general the PEM RFCs are easy to understand and to
implement, at this particular point (of generating the signature
through applying the PKCS standards) a detailled example which
shows some intermediate processing steps would be very helpful.
The discussion in pem-dev shows that also other implementors have
problems here. It is very difficult to test this because you
simply get told by your program that the verification of the
signature failed. I would like to encourage the PEM promotors
to provide such a kind of reference example.
Best regards
Wolfgang