How to Sign a pre-filled CMS structure

2010-11-15 Thread Patrick Patterson
Hi All: While taking a look at RFC5272 and other things, I got to playing with the CMS functions in 1.0.0, and I had a couple of questions. Given the attached C program: 1: Why is not the SID value filled in - it looks like it SHOULD be with a SKID value. 2: How would I go about signing this

Re: How to Sign a pre-filled CMS structure

2010-11-15 Thread Dr. Stephen Henson
On Mon, Nov 15, 2010, Patrick Patterson wrote: 2: How would I go about signing this structure - I already have the data I need in eContent, so I don't think that it would be THAT interesting to dump it out into a BIO just to use a higher level function? I understand the utility of using

Using EVP_SignFinal with tokens

2010-11-15 Thread Valery Blazhnov
I need an advice on usind EVP_SignFinal function with two private key objects stored on two different tokens. I can use two PKCS11 engine instances to access these objects in low-level functions. But EVP_SignFinal implementation uses EVP_PKEY_CTX_new(pkey, NULL) call internally to create

Re: Using EVP_SignFinal with tokens

2010-11-15 Thread Dr. Stephen Henson
On Mon, Nov 15, 2010, Valery Blazhnov wrote: I need an advice on usind EVP_SignFinal function with two private key objects stored on two different tokens. I can use two PKCS11 engine instances to access these objects in low-level functions. But EVP_SignFinal implementation uses

Re: How to Sign a pre-filled CMS structure

2010-11-15 Thread Patrick Patterson
Hi Steve: On 2010-11-15, at 11:43 AM, Dr. Stephen Henson wrote: On Mon, Nov 15, 2010, Patrick Patterson wrote: If you call CMS_dataInit() with a NULL BIO it should make use of any content already in the CMS structure. It does create a read only BIO internally for that purpose. Ok -

Re: How to Sign a pre-filled CMS structure

2010-11-15 Thread Dr. Stephen Henson
On Mon, Nov 15, 2010, Patrick Patterson wrote: Hi Steve: On 2010-11-15, at 11:43 AM, Dr. Stephen Henson wrote: On Mon, Nov 15, 2010, Patrick Patterson wrote: If you call CMS_dataInit() with a NULL BIO it should make use of any content already in the CMS structure. It does create a

Re: How to Sign a pre-filled CMS structure

2010-11-15 Thread Patrick Patterson
Hi Steve: On 2010-11-15, at 11:43 AM, Dr. Stephen Henson wrote: On Mon, Nov 15, 2010, Patrick Patterson wrote: If you call CMS_dataInit() with a NULL BIO it should make use of any content already in the CMS structure. It does create a read only BIO internally for that purpose. Ok -

Re: How to Sign a pre-filled CMS structure

2010-11-15 Thread Patrick Patterson
Hi Steve: On 2010-11-15, at 1:29 PM, Dr. Stephen Henson wrote: On Mon, Nov 15, 2010, Patrick Patterson wrote: 1: Why SID isn't getting set. Not sure haven't had a chance to check in more detail yet. It appears rather strange, because as I step through it, it LOOKS like the

[openssl.org #2369] mail/rfc822Mailbox should be encoded as IA5String, not DirectoryString

2010-11-15 Thread Sean Leonard via RT
Bug Report OpenSSL 1.0.0 encodes the DN attribute rfc822Mailbox, also known as mail, MAIL, or 0.9.2342.19200300.100.1.3, as a DirectoryString (specifically, a TeletexString/T61String) when it contains characters such as the @ symbol. However, the RFCs on the topic (1274, 4524) are

Re: Using EVP_SignFinal with tokens

2010-11-15 Thread Valery Blazhnov
15.11.2010 19:55, Dr. Stephen Henson пишет: On Mon, Nov 15, 2010, Valery Blazhnov wrote: I need an advice on usind EVP_SignFinal function with two private key objects stored on two different tokens. I can use two PKCS11 engine instances to access these objects in low-level functions. But