On Mon, Feb 04, 2008 at 09:34:00AM +0100, Peter Van Biesen wrote: > -decrypt does not work without a key. I used an invalid key and I get > following error : > > Error decrypting PKCS#7 structure > 13136:error:21070092:PKCS7 routines:PKCS7_dataDecode:no recipient matches > key:pk7_doit.c:482: > 13136:error:21072077:PKCS7 routines:PKCS7_decrypt:decrypt > error:pk7_smime.c:470: > > Which seems like a good and sensible error message. Using the correct private > key decrypts the message. > > I was looking for a way to get some information from the message ( > like -info ) without trying to decrypt it, but apparently no such option > exists ? It would be nice if I could say to my customer : you did not encrypt > the message with our public key, I can see that you used key XYZ ... > > Does the above error say that the pkcs7 is correct but the key was not found > ?
S/MIME first signs, then encrypts, so you can't check the signature without decrypting. http://world.std.com/~dtd/sign_encrypt/sign_encrypt7.html -- Viktor. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]