Hi, I'd like to know how to proceed (is it doable) to convert a PKCS #7 data (made with PKCS7_sign, flag = PKCS7_BINARY | PKCS7_DETACHED;) with several cert (the one from the signer) and a chain of cert, from BER to DER encoding.
I have another one PKCS #7 data which was made with the same credential, but openssl pkcs7 print the embeded certificates in a different order. Doing a wc -c on the different certificates, what I understand is that with DER the certificates are sorted (lexicographic ?, the smaller one the first, and so on), while with BER (openssl) they are in another order, the signing certificate is always coming first when printing with openssl pkcs7. Is there a way to build a filter to post process my BER to convert it to DER (extracting the ASN.1 datas and sorting them) ? Digging in the code I don't see such hidden features in crypto/pkc7 code ? Or any other method ? Thanks a lot for any help, Benjamin. I am working with version 0.9.8b (latest I think). ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
