On Tue, Mar 30, 2010, Michael Strder wrote: > HI! > > Someone sent me an encrypted S/MIME message which I could not decrypt in > Mozilla's Seamonkey. Trying to determine the cause for that I wanted to look > at the RecipientInfos structure with OpenSSL 0.9.8k shipped with openSUSE > Linux 11.2 and and also tried with OpenSSL 1.0.0 (self-compiled). > > But decoding the PKCS#7 failed (see output below). Any idea what's going > wrong? > > Ciao, Michael. > > $ openssl smime -in test.eml -pk7out > Error reading S/MIME message > 11772:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong > tag:tasn_dec.c:1316: > 11772:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 > error:tasn_dec.c:380:Type=PKCS7_ISSUER_AND_SERIAL > 11772:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested > asn1 error:tasn_dec.c:748:Field=issuer_and_serial, Type=PKCS7_RECIP_INFO > 11772:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested > asn1 error:tasn_dec.c:709:Field=recipientinfo, Type=PKCS7_ENVELOPE > 11772:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested > asn1 error:tasn_dec.c:748: > 11772:error:0D08403A:asn1 encoding routines:ASN1_TEMPLATE_EX_D2I:nested asn1 > error:tasn_dec.c:578:Field=d.enveloped, Type=PKCS7 > 11772:error:21078082:PKCS7 routines:B64_READ_PKCS7:decode > error:pk7_mime.c:140: > 11772:error:2107A08B:PKCS7 routines:SMIME_read_PKCS7:pkcs7 parse > error:pk7_mime.c:373: > > $ /opt/openssl-1.0/bin/openssl smime -in test.eml -pk7out > Error reading S/MIME message > 139763731220120:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong > tag:tasn_dec.c:1320: > 139763731220120:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested > asn1 error:tasn_dec.c:382:Type=PKCS7_ISSUER_AND_SERIAL > 139763731220120:error:0D08303A:asn1 encoding > routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 > error:tasn_dec.c:752:Field=issuer_and_serial, Type=PKCS7_RECIP_INFO > 139763731220120:error:0D08303A:asn1 encoding > routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 > error:tasn_dec.c:712:Field=recipientinfo, Type=PKCS7_ENVELOPE > 139763731220120:error:0D08303A:asn1 encoding > routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error:tasn_dec.c:752: > 139763731220120:error:0D08403A:asn1 encoding > routines:ASN1_TEMPLATE_EX_D2I:nested asn1 > error:tasn_dec.c:580:Field=d.enveloped, Type=PKCS7 > 139763731220120:error:0D0D106E:asn1 encoding routines:B64_READ_ASN1:decode > error:asn_mime.c:193: > 139763731220120:error:0D0D40CB:asn1 encoding routines:SMIME_read_ASN1:asn1 > parse error:asn_mime.c:524: >
Looks like that isn't a PKCS#7 structure but a CMS structure (which is a superset of PKCS#7). Try the cms command in OpenSSL 1.0.0 instead. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
