Re: [TLS] TLS1.2 CertificateVerify deocding

[carlyoung at keycomm.co.uk]

>>On Wed 15/07/09 9:37 AM , Akos Vandra axos88 at gmail.com sent:
>>Hello,
>>
>>I have written to half a dozen mailing lists, but never got an answer.
>>This is why I am contacting you, in spite of the fact that I don't
>>think my email is on-topic here.
>>
>>My question is how to interpret this data? From the rfc I understood
>>that this should be a .DER encoded
>>
>>struct {
>>SignatureAndHashAlgorithm algorithm;
>>
>>opaque signature<0..2^16-1>;
>>} DigitallySigned;

Refer to RFC 5246, section 7.4.1.4.1 - this is not DER encoded - SignatureAndHashAlgorithm are just two octets I think. First octet is hash algorithm - second is signature algorithm.