Hi guys,
I have to create a program following the PKCS#7 standard with
Signed-And-Enveloped-Data datatype:
SignedAndEnvelopedData ::= SEQUENCE {
version Version,
recipientInfos RecipientInfos,
digestAlgorithms DigestAlgorithmIdentifiers,
encryptedContentInfo EncryptedContentInfo,
certificates
[0] IMPLICIT ExtendedCertificatesAndCertificates OPTIONAL,
crls
[1] IMPLICIT CertificateRevocationLists OPTIONAL,
signerInfos SignerInfos
}
DigestAlgorithmIdentifiers ::=SET OF DigestAlgorithmIdentifier
SignerInfos ::= SET OF SignerInfo
and I have to use CMS for enveloping.
Can I do this with a command-line like
openssl cms -sign -in myfile.xml -signer sender.crt -inkey sender.key -binary \
| openssl cms -compress \
| openssl cms -encrypt -des3 -out signed-and-enveloped.data
recipient.crt
Thanks in advance.
FEDERICO BERTON
AREA SVILUPPO
Via Europa, 20
35015 Galliera Veneta (PD)
TEL. 049.9988200 FAX 049.9471337
http://www.trivenet.it
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
