when i got a signed smime letter signed by PKCS7_sign
suppose the certificate chain is
myca -> mycertificate
so the PKCS7_verify is ok
but if the certificate chain is
myca -> myissueca -> mycertificate
so the pkcs7_verify will fail
even i use
openssl smime -verify -certfile my.cer -CAfile
On Wed, May 17, 2006, camino (sent by Nabble.com) wrote:
>
> when i got a signed smime letter signed by PKCS7_sign
> suppose the certificate chain is
> myca -> mycertificate
> so the PKCS7_verify is ok
>
> but if the certificate chain is
> myca -> myissueca -> mycertificate
> so the pkcs7_
Hi all!
I need to make such stuct:
SEQUENCE{
SEQUENCE{
OCTET STRING
}
OCTET STRING
}
Is it posible to make it with macros like ASN1_SEQUENCE, ASN1_EXP and etc.
And if it posible, then how?
___
On Wed, May 17, 2006, [EMAIL PROTECTED] wrote:
> Hi all!
>
> I need to make such stuct:
>
> SEQUENCE{
> SEQUENCE{
> OCTET STRING
> }
> OCTET STRING
> }
>
> Is it posible to make it with macros like ASN1_SEQUENCE, ASN1_EXP and etc.
> And if it posible, then how?
Hi, I am new to the openssl. I just compiled openssl FIPS version and I found out that other crypto functions are OK, but I couldn't call those RC5 crypto function. Is this due to RC5 disabled in FIPS version or RC5 is not FIPS approved? I highly appreciate for any helps. __
Shicai Hu wrote:
> Hi, I am new to the openssl. I just compiled openssl FIPS version and I
> found out that other crypto functions are OK, but I couldn't call those
> RC5 crypto function. Is this due to RC5 disabled in FIPS version or RC5
> is not FIPS approved? I highly appreciate for any helps.
i have tried
openssl smime -sign -in before.eml -signer 666.pem -inkey 666key.pem -out
signed.eml
-certfile thmid.cer
and then verified it. it works
thank you very much!
--
View this message in context:
http://www.nabble.com/PKCS7_verify-t1634754.html#a4442652
Sent from the OpenSSL - Dev forum
i have an end x509 certificate ,and i hope to get the certificate chain
do openssl has a function like CertGetCertificateChain in windows api?
thanks
--
View this message in context:
http://www.nabble.com/how-can-I-get-the-certificate-chain-from-an-end-certificate--t1640417.html#a4443193
Sen