Yeah, I've read that signed and enveloped is not widely used, but it still surprises me that PKCS7_Decrypt() wouldn't support it since the PKCS7_SIGN_ENVELOPE structure has everything that a PKCS7_ENVELOPE has.
What about NID_pkcs7_encrypted? Is that also widely unused and unsupported? My version of OpenSSL doesn't seem to have any CMS functions (perhaps too old), but my needs are pretty basic so I think I'll be ok without them. Phillip On Thu, Apr 15, 2010 at 4:14 PM, Dr. Stephen Henson <st...@openssl.org>wrote: > On Thu, Apr 15, 2010, Phillip Hellewell wrote: > > > Apparently PKCS7_decrypt() only works on enveloped data. How can I > decrypt > > a PKCS7 of type signedAndEnveloped or encrypted? > > > > Signed and enveloped isn't supported and hardly anyone implements it any > more. > > BTW you are best using the CMS functions and not the PKCS7 ones as they > support more features. > > Steve. > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org >
