Ryutaroh Matsumoto wrote:
> 
> Hello,
> 
> let me report a problem in OpenSSL 0.96 and 0.96a-beta1.
> "openssl smime -sign" fails if the input is a pipe. For example
> 
>    echo test | openssl smime -sign -text -signer id.pem
> 
> does not include the string "test".
> 
> The reason for this problem is that we cannot fseek() a pipe.
> fseek() is called from BIO_reset() at line 416 in apps/smime.c in
> OpenSSL 0.96a-beta1.
> 

This is a known issue and can't be readily solved because the input data
has to be read twice with the current technique used for S/MIME signing.
You can however get round this by using the -nodetach option which ends
up storing the content temporarily in memory.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to