On Wed, Sep 10, 2003, Spencer Yost wrote: > Thanks to Vadim and others for their posts to me - I appreciate it. You folks have > confirmed the command I am using - SMIME. By the way Vadim - It may qualify as a > SET message but I don't think it is meant to be a SET message. Also: I apologize > for not including the error messages in my last post: end-of -the-day brain fade I > guess. > > Here are those error messages: > > Error reading S/MIME message > 23126:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too > long:asn1_lib.c:138: > 23126:error:21078082:PKCS7 routines:B64_READ_PKCS7:decode error:pk7_mime.c:142: > 23126:error:2107A08B:PKCS7 routines:SMIME_read_PKCS7:pkcs7 parse > error:pk7_mime.c:299: > > There appears to be nothing wrong with the headers that I can just eyeball(again, > the headers are after my signature - I included a few more that I excluded the last > time because of identifying information - I just 'X'-ed that out this time), but the > structure of the file is unusual compared to our other trading partners - it isn't a > multipart file. It is just simple single part message . The file is signed with > the trading partner's certificate, which I have as well. Here is the command I am > using: > > [EMAIL PROTECTED] openssl smime -decrypt -recip MYCERT.pem -signer THEIRCERT.pem -in > posteddata.dat -out clear.txt > >
There are some known bugs in the base64 BIO which can affect S/MIME which are fixed in the current stable snapshots: I suggest you try those. The fixes will appear in the next official release too. Steve. -- Dr Stephen N. Henson. Core developer of the OpenSSL project: http://www.openssl.org/ Freelance consultant see: http://www.drh-consultancy.demon.co.uk/ Email: [EMAIL PROTECTED], PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
