OpenSSL "Verification failure" with jsrsasign Signature

[fgsalomon]

OpenSSL "Verification failure" with jsrsasign Signature

[kjur]

To sign a binary data, signHex shall be used instead of signString like this:

var rs = require('jsrsasign');
var rsu = require('jsrsasign-util');

var binFile = "filetosign.bin";
var prvFile = "public-key.pem";
var outFile = "signature.blob";
var hashAlg = "SHA256withRSA";

var prvPEM = rsu.readFile(prvFile);
var prv = rs.KEYUTIL.getKey(prvPEM);

var hexFile = rsu.readFileHexByBin(binFile);

var sig = new rs.KJUR.crypto.Signature({alg: hashAlg});
sig.init(prv);
var sigHex = sig.signHex(hexFile);
rsu.saveFileBinByHex(outFile, sigHex);

This will work fine for your data.

Here is my result:

$ od -c bbb.bin
0000000  001 002 003 004 005                                            
0000005
$ openssl dgst -verify a.pub -keyform PEM -sha256 -signature bbb.sig --binary bbb.bin
Verified OK