Hi,

What's the reason for having in openssl both a PKCS7_* and a CMS_* API
that are this similar ?

Obviously the CMS_* API can handle some CMS mechanims the PKCS7 one
can't, but is there anything the PKCS7 API can handle that the CMS API
doesn't ?

In a program that currently uses calls the PKCS7_* functions, can they
be replaced by CMS_* with no loss of functionality, still handling
100% of old PKCS#7 messages, only gaining support for the new CMS
options ?

If no special option is selected (no CMS_USE_KEYID for example), will
CMS_sign generate the same format as PKCS7_sign ?

Thanks in advance for the precision you can give me.

Regards
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to