Re: [openssl-users] CMS questions

2015-05-01 Thread Richard Welty
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 [resending from the correct email address; list moderator, if you see this first, just delete the one in the non-member queue] On 2/24/15 10:10 AM, Dr. Stephen Henson wrote: So the embedded content type will be enveloped data? If so first you

Re: [openssl-users] CMS questions

2015-05-01 Thread Dr. Stephen Henson
On Fri, May 01, 2015, Richard Welty wrote: On 2/24/15 10:10 AM, Dr. Stephen Henson wrote: So the embedded content type will be enveloped data? If so first you can check that type using CMS_get0_eContentType(). Then you can use CMS_get0_content() to retrieve the embedded content as

Re: [openssl-users] CMS questions

2015-04-30 Thread Richard Welty
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 4/30/15 6:32 PM, Richard Welty wrote: 1) the documentation on d2i_CMS_ContentInfo() is a bit light on details about the parameters. what should the first parameter be, a certificate as with d2i_X509? ok, figured this one out for myself,

Re: [openssl-users] CMS questions

2015-04-30 Thread Richard Welty
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 2/24/15 10:10 AM, Dr. Stephen Henson wrote: On Tue, Feb 24, 2015, Richard Welty wrote: On 2/24/15 9:21 AM, Dr. Stephen Henson wrote: Typically you'd write the signed content to a memory BIO and then decrypt that. Precisely how you decrypt

Re: [openssl-users] CMS questions

2015-02-24 Thread Dr. Stephen Henson
On Tue, Feb 24, 2015, Richard Welty wrote: On 2/24/15 9:21 AM, Dr. Stephen Henson wrote: Typically you'd write the signed content to a memory BIO and then decrypt that. Precisely how you decrypt the enveloped data depends on the format. It might be in MIME format in which case you'd pass

Re: [openssl-users] CMS questions

2015-02-24 Thread Richard Welty
On 2/24/15 9:21 AM, Dr. Stephen Henson wrote: Typically you'd write the signed content to a memory BIO and then decrypt that. Precisely how you decrypt the enveloped data depends on the format. It might be in MIME format in which case you'd pass it through the MIME parser. Alternatively it

Re: [openssl-users] CMS questions

2015-02-24 Thread Dr. Stephen Henson
On Mon, Feb 23, 2015, Richard Welty wrote: i'm starting on some work that needs to use CMS in an application, and i'm having trouble getting my head wrapped around how to handle the case of verifying a signature and then decrypting the enveloped data that has been signed. specifically, i'm

[openssl-users] CMS questions

2015-02-23 Thread Richard Welty
i'm starting on some work that needs to use CMS in an application, and i'm having trouble getting my head wrapped around how to handle the case of verifying a signature and then decrypting the enveloped data that has been signed. specifically, i'm not grasping how to extract the encrypted data to