On Thu, Apr 06, 2000 at 02:51:04AM +0200, Ivo MACHULDA wrote:
> I tray signing simple text file over openssl tool with thi comand:
> 
> /usr/local/ssl/bin/openssl smime -sign -in mail.txt -text -out mail.msg \
> -signer user.pem
  ^^^^^^^^^^^^^^^^

Signing requires both the certificate and the private key.
 
You specified just "-signer", so it is expected that "user.pem" contains
both the cert and the key, i.e., it should look like this:

    -----BEGIN CERTIFICATE-----
    [ PEM encoding of the cert. ]
    -----END CERTIFICATE-----

    -----BEGIN RSA PRIVATE KEY-----
    [ PEM encoding of the private key. ]
    -----END RSA PRIVATE KEY-----

If user.pem contains just the cert and your private key is in another 
file, say, userkey.pem, then add the option "-inkey userkey.pem".

-- 
Ng Pheng Siong <[EMAIL PROTECTED]> * http://www.post1.com/home/ngps

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to