[openssl-users] File signing/encrypting upgrade from 1.0.2 to 1.1.0

Jan Kohnert nospam001-lists at jan-kohnert.de
Thu Apr 26 08:46:17 UTC 2018


Am 2018-03-29 09:07, schrieb Jan Kohnert:
> Next update after clean test on another Win32 maschine: there have to
> be crypt32.lib and ws2_32.lib libs linked, besides that the code is
> unchanged. As the code produces correct asn1 files on Linux (see
> previous mail), it now looks even more like a bug in the
> crypto-library on Windows...
> 
> Following output:

[...]

> C:\Users\Alkes\Downloads\TestCrypt\build>openssl smime -decrypt -inform
> DER -in
> testfile.crypt -inkey local.key -out testfile.sig
> 
> C:\Users\Alkes\Downloads\TestCrypt\build>openssl smime -verify -inform
> DER -in t
> estfile.sig -CAfile local.cert
> Error reading S/MIME message

Damnit! Problem exists between keyboard and chair. Command should have 
been:
openssl smime -verify -inform DER -in t estfile.sig -binary -CAfile 
local.cert
                                                     ^^^^^^^
It was the decrypting messing up the asn1-structure on Win when not 
using the
binary option (-outform DER whould have worked, too).

So the code works in Win and Linux. :) Thread closed.

-- 
Best regards Jan


More information about the openssl-users mailing list