[openssl-users] SMIME_read_CMS and binary signature

2018-02-14 Thread e...@coderhacks.com
Hello! I need a little hint for parsing SMIME into a CMS_ContentInfo. Here is an shortend example of my SMIME to make clear the structure of my content. Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="=_Part_abcde" --

[openssl-users] c_hash/ca-certificates.crt

2018-02-23 Thread e...@coderhacks.com
Hello! Normally I put new certificates into /etc/ssl/certs and create the hash-link. That workes for me for many years. Just found out 2 new things agout that. 1. There is c_hash that does the creation of the hash-link for me. Great! 2. ca-certificates.crt is there too. It has any certifica

[openssl-users] Payload-checksum in PEM?

2018-03-08 Thread e...@coderhacks.com
Hi! I have a verification-error in a SMIME-message and I try to check manually the checksums of the payload. Here is my strategy - but I do not know it is even possible. # openssl cms -sign -in myfile.txt -md md5 -signer cer.txt -inkey key.txt -outform PEM > pem.txt # md5sum myfile.txt C

Re: [openssl-users] Payload-checksum in PEM?

2018-03-08 Thread e...@coderhacks.com
wrote: On Mar 8, 2018, at 11:25 AM, e...@coderhacks.com wrote: # openssl cms -sign -in myfile.txt -md md5 -signer cer.txt -inkey key.txt -outform PEM > pem.txt # md5sum myfile.txt Can I expect to find the md5sum checksum somewhere in the ASN1 of pem.txt??? # openssl asn1parse -in pem.txt

[openssl-users] Vanilla OpenSSL uses sytems libs

2018-03-13 Thread e...@coderhacks.com
Hi! I put a vanilla OpenSSL in a local folder and compiled it. ./config no-shared make I will not do a "make install" because I will keep my distros installation. But Iwill use the vanilla for tests. So I need the binary as well as the libs. After a ldd  I see that the apps/openssl as well a

Re: [openssl-users] Vanilla OpenSSL uses sytems libs

2018-03-13 Thread e...@coderhacks.com
Thanks! It works if I export LD_LIBRARY_PATH=/my/openssl/root and recompile it. On 2018-03-14 00:02, Scott Neugroschl wrote: Set LD_LIBRARY_PATH to use your compiled versions. -Original Message- From: openssl-users On Behalf Of e...@coderhacks.com Sent: Tuesday, March 13, 2018 3

[openssl-users] MIME-canonicalization

2018-03-13 Thread e...@coderhacks.com
Hi! I am facing some problems with a SMIME where the content is binary encoded AND a linefeed (LF) (0x0a) is used for line-separator. The CMS_verify failes (CMS routines:CMS_SignerInfo_verify_content:verification failure). It works fine if CRLF (0x0d 0x0a) is line-separator or even if only CR

Re: [openssl-users] MIME-canonicalization

2018-03-14 Thread e...@coderhacks.com
then give it to CMS_verify all is fine. So... can I disable this canonicalization in SMIME_read_CMS?? Thanks for help! On 2018-03-14 07:43, e...@coderhacks.com wrote: Hi! I am facing some problems with a SMIME where the content is binary encoded AND a linefeed (LF) (0x0a) is used for line

Re: [openssl-users] Vanilla OpenSSL uses sytems libs

2018-03-14 Thread e...@coderhacks.com
t's linked with the system shared libraries? In message <323c64fe-c3a7-0b93-a11e-46f743b99...@coderhacks.com> on Tue, 13 Mar 2018 23:46:14 +0100, "e...@coderhacks.com" said: etc> Hi! etc> etc> I put a vanilla OpenSSL in a local folder and compiled it. etc> etc>

Re: [openssl-users] MIME-canonicalization

2018-03-14 Thread e...@coderhacks.com
[mailto:openssl-users-boun...@openssl.org] On Behalf Of e...@coderhacks.com Sent: Wednesday, March 14, 2018 02:33 To: openssl-users@openssl.org Subject: Re: [openssl-users] MIME-canonicalization I think I found the reason for the problem. SMIME_read_CMS does convert any single LF to a CRLF. Have you

Re: [openssl-users] Vanilla OpenSSL uses sytems libs

2018-03-14 Thread e...@coderhacks.com
My systems (debian 10) version is 1.1.0g. The vanilla is 1.1.0f. On 2018-03-14 23:10, Richard Levitte wrote: BTW, which OpenSSL version are we talking about here? In message on Wed, 14 Mar 2018 10:59:20 +0100, "e...@coderhacks.com" said: etc> Yes... thats the same what I thou