> The command-line argument "-md" to "openssl cms -sign_receipt" is > apparently ignored, and the default digest algorithm (SHA-1 in my > tests) is used instead. In addition, the "-noattr" argument has the > same effect as "-nosmimecap", apparently leaving some unnecessary > attributes (like signing time) - contrary to the manual.
Maybe it wasn't clear from my post, but this issue is a bug, not a missing feature. The CMS structure for -sign_receipt is very similar to one for -sign, and both have a field for the selected message digest algorithm (visible with openssl cms -cmsout -noout -print -in receipt.sig). Not so sure about -noattr/-nosmimecap, though. Maxim ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
