> Cathy Yeh wrote:
>
> Hi all,
>
> I'm working on packing PKCS#7 Signed-data type with latest OpenSSL
> snap-shot. However, if we did not call
> "PKCS7_set_detached(p7s,1)" function to set it as detached type,
> exception would occure after calling BIO_write(..) to write data to
> PKCS7 structure. It seems the function ( PKCS7_set_detached(..) ) is
> required to generate a Signed package. But apparently the followed
> verification would be failed since no detached file was supplied. Did
> anyone meet the same situation? How did you solve this problem? Please
> kindly give your advise or comment. Thanks!
Unless this is the Windows threaded problem (not using the /MD option
for multithreaded DLL) its not clear what your problem is from the
description. Can you give some more info or a code sample?
If you set the data to be detached then the data is not included in the
PKCS#7 structure, this is used in S/MIME multipart/signed for example.
You then have to supply the same data to the verify process as in
crypto/pkcs7/verify.c
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
