On 10 Jan 2002, Aleix Conchillo wrote:

> Hi,
>
>       I am trying to create a PKCS7 SignedAndEnveloped. I get the idea
> from the enc.c and dec.c files in crypto/pkcs7 directory. As it is and
> enveloped pkcs7 i need to add a recepient. And as it is signed, i need to set
> the signers. The problem i have is with the signers, if i use function
> PKCS7_add_signer like this
>
>       PKCS7_SIGNER_INFO* signer = PKCS7_SIGNER_INFO_new();
>       PKCS7_SIGNER_INFO_set(signer, cert, pkey, EVP_sha1());
>       PKCS7_add_signer(p7, signer);
>
> the recipient of the pkcs7 is unable to verify the pkcs7 data. Otherwise, if i use:
>
>       PKCS7_add_signature(p7, cert, pkey, EVP_sha1());
>       PKCS7_add_certificate(p7, cert);
>
> works as supposed. Any one can tell what am i doing wrong with PKCS7_add_signer?
>
>       Any help would be really appreciated.

Recipient may be missing signer' certificate. It would be better
to make it report the reason for verification failure.

yours,
Vadim

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to