Hi, I wrote a simple openssl pkcs7 command extension to provide a decryption functionality for pkcs7 enveloped encrypted message.
With new functionality the openssl pkcs7 usage becomes: pkcs7 [options] <infile >outfile where options are -inform arg input format - DER or PEM -outform arg output format - DER or PEM -in arg input file -out arg output file -print_certs print any certs or crl in the input -text print full details of certificates -noout don't output encoded data -engine e use engine e, possibly a hardware device. -decrypt decrypt pkcs7 encoded data using private key -K private key Example: openssl pkcs7 -in msg -decrypt -K private.key That's all folks where msg: -----BEGIN PKCS7----- MIAGCSqGSIb3DQEHA6CAMIACAQAxgewwgekCAQAwUjBFMQswCQYDVQQGEwJBVTET MBEGA1UECBMKU29tZS1TdGF0ZTEhMB8GA1UEChMYSW50ZXJuZXQgV2lkZ2l0cyBQ dHkgTHRkAgkAxZ5aqh2ZbeQwDQYJKoZIhvcNAQEBBQAEgYBLC8vMMAgaOj6X0Plh D8TeLWnDwV6UFGQgVPDgewMncJFEaCpDdD23akHe4fjtW3Z1Z7auq5D/ZmfrSm1b sXPsAxLAVWyv7jOpFJe95H39sZHp6XasjyNtkVmqJrodcQepibhb7sKHoxnekYj4 cdxymqh6b2THOL9R0ImzQXXwGDCABgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB/ YclRzDpabyL13NMgOnLhoIAEIDNxHRuaw8By/XzNN9jCUhL+zyqnf+tAwj5JJ3Ko YoEeAAAAAAAAAAAAAA== -----END PKCS7----- private.key: -----BEGIN RSA PRIVATE KEY----- MIICXQIBAAKBgQDAIWy+Di0MdMXIv5c4gZ9DvmfbWLh+CeyK4TtS5RyIwhn+z8Ze W7lSLtOIoajAW8biKhQ4cjE4Hvw3t1fcoVNUIR3Riy2l9FRFHpNNM1pq0dENTI8a vL7nDVgWMzVYtmM8zQJvxlYZD5Guh1dyPIrGzYr9jGQTiPg6/O4di5sNDQIDAQAB AoGAVrn/yx69CQVhDkglq7UfPkYhvWqkBQjXxKz8yWNwaO8tKs+BXLCMy+MlS2Sl twb2lLqn2/735rxd34ycVZRg9y2qMxiGP9JZYEiUgVkUTBPY7pgfKY72c9GxTxOb vUoCiVX9WqDTqiucWcLRkXJZGpHtp6ltYONYbaf/IB5qZAECQQDg2IrPFgdGbjyI fugeHel2NE1yymt3fKqHR/9//zTSCcqJvr6iufYRxAJJdNuzyBDW0a7LR9jOD/jV 0wcux10BAkEA2sByAVXlndGE3HqK9GzGGdg/dNoWey3pNJRKwJU6IBQD7ucpgC8M l+2yV1Cz+XyMR2zxaDPghL3UZ2U7BfdUDQJABg8PvoDTdVxnGS6CRr17mwnRxHQb 7T5Ywgh4pBRWcgp9gLS5Il1sehIUFbKmcPPFMGS6FxQ6jWL0y55CJUqOAQJBALek G5E3dT5aKDmXvpOXxW7o9cy5UWozjrWPUHoATP2lD/A9q79qwB3DdJaMr6pgfrtv n/IkqvWFD42FlFlb2vkCQQCPFjXj9Ug2r3X8TFOEip/++0XHcQ3fFHuX4k+gzpq+ 7yxHuroSWeDtgPmc4aaCygLz9bnLKxr6H7whBQIYTHar -----END RSA PRIVATE KEY----- If that could be useful for anybody I'd be happy to make my contribution to openssl project. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
