RE: Data and Signature (envelope)

2013-04-26 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of redpath > Sent: Thursday, 25 April, 2013 09:40 > To: openssl-users@openssl.org > Subject: Re: Data and Signature (envelope) > > I looked at the latest smsign.c shown below modified with a > large data item. > The result

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
free(in); if (out) BIO_free(out); if (tbio) BIO_free(tbio); return ret; } -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature-envelope-tp44885p

Re: Data and Signature (envelope)

2013-04-25 Thread Dr. Stephen Henson
On Thu, Apr 25, 2013, Viktor Dukhovni wrote: > On Wed, Apr 24, 2013 at 10:35:04PM -0400, Dave Thompson wrote: > > > > I am assuming RSA though I would like to do ECDSA. > > > > These APIs will use any privatekey for which a signature > > scheme is available; that's RSA DSA ECDSA (or pedantically

Re: Data and Signature (envelope)

2013-04-25 Thread Dr. Stephen Henson
On Thu, Apr 25, 2013, redpath wrote: > I took the sign.c example and modified it slightly to use artifacts I have, > but it seems the result just produces a PKCS7 that has a signature? > I want to have the data (PDF or JPG) in there as I need to use it after > validating > that it is trusted. >

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
Exactly a non-detached, I see the constant detached and thought thats what it meant but that road lead nowhere, so if anyone has pointers how to make a non-detacched or modify below that would be great. -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature

Re: Data and Signature (envelope)

2013-04-25 Thread Jakob Bohm
On 4/25/2013 1:13 PM, redpath wrote: I took the sign.c example and modified it slightly to use artifacts I have, but it seems the result just produces a PKCS7 that has a signature? I want to have the data (PDF or JPG) in there as I need to use it after validating that it is trusted. Basically I

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
quot;%d \n",BIO_write(p7bio,buf,i) ); } if (!PKCS7_dataFinal(p7,p7bio)) goto err; BIO_free(p7bio); PEM_write_PKCS7(stdout,p7); PKCS7_free(p7); exit(0); err: ERR_load_crypto_strings(); ERR_print_errors_fp(stderr); ex

Re: Data and Signature (envelope)

2013-04-25 Thread redpath
message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature-envelope-tp44885p44898.html Sent from the OpenSSL - User mailing list archive at Nabble.com. __ OpenSSL Project http

Re: Data and Signature (envelope)

2013-04-24 Thread Viktor Dukhovni
On Wed, Apr 24, 2013 at 10:35:04PM -0400, Dave Thompson wrote: > > I am assuming RSA though I would like to do ECDSA. > > These APIs will use any privatekey for which a signature > scheme is available; that's RSA DSA ECDSA (or pedantically > EC; openssl uses the same EC_KEY struct for ECDSA and

RE: Data and Signature (envelope)

2013-04-24 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of redpath > Sent: Wednesday, 24 April, 2013 18:10 > I saw the CMS but I did not see how to store raw data which I need to > extract? > Lets assume the data was a JPG and I created signature from > the MD (SHA1) > how can I get the JPG use it and

Re: Data and Signature (envelope)

2013-04-24 Thread redpath
data (JPG) derived MD from it for a signature and I have a private key. I am assuming RSA though I would like to do ECDSA. -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signature-envelope-tp44885p44889.html Sent from the OpenSSL - User mailing list archive at

Re: Data and Signature (envelope)

2013-04-24 Thread Krzysztof Konopko
envelope; any suggestions? > Have a look at CMS: http://www.ietf.org/rfc/rfc5652.txt https://en.wikipedia.org/wiki/Cryptographic_Message_Syntax https://www.openssl.org/docs/apps/openssl.html HTH, Kris > > > > -- > View this message in context: > http://openssl.6102.n7.nabble.com/Dat

Data and Signature (envelope)

2013-04-24 Thread redpath
the signature and that would be? x.509 (that does not make sense or does it) pkcs12 (maybe) so what would it be? Of course I have to figure out how to extract the info out of the new envelope; any suggestions? -- View this message in context: http://openssl.6102.n7.nabble.com/Data-and-Signa