RE: RE: PKCS7_sign & PKCS7_verify

2014-05-28 Thread Dikarev Evgeniy
Thank you very much, it worked Dikarev Evgeniy 28.5.2014 2:47:12 пользователь Dave Thompson (dthomp...@prinpay.com) написал: The third arg of PKCS7_verify (indata) should only be used for an ‘external’ or ‘detached’ signature where

Re: PKCS7_sign & PKCS7_verify

2014-05-27 Thread Vladimir Zatsepin
Dave, As I know the PKCS7_BINARY flag is used to prevent a binary data from translation to MIME format. It always leads to data corruption. I advise to use this flag when a binary data is to be signed. 2014-05-28 2:39 GMT+04:00 Dave Thompson : > The third arg of PKCS7_verify (indata) should onl

RE: PKCS7_sign & PKCS7_verify

2014-05-27 Thread Dave Thompson
The third arg of PKCS7_verify (indata) should only be used for an ‘external’ or ‘detached’ signature where the PKCS#7 does not contain the data. In your case it should be null. Also note that the _BINARY flag isn’t actually used for “plain” PKCS#7, only for SMIME. And I don’t think it reall