RE: Problem with PKCS7 encoding and Capicom

[Bob Kupperstein]

Title: Message

Hi Rohit,   Did you make any progress with this?   I saw your message on the openssl listserv, and the response.   I’m not familiar with the functions that you are using, but I’ll try and help if you need it.  One suggestion is to use the openssl “asn1parse” command to see if it understands the certificate encoding.   -Bob   -----Original Message----- From: Rohit Kumar [mailto:[EMAIL PROTECTED]] Sent: Saturday, October 19, 2002 1:05 AM To: [EMAIL PROTECTED] Subject: Problem with PKCS7 encoding and Capicom   Hi,  I am trying to make pkcs7 encryption work with capicom of Microsoft.  I am facing problem in it. Steps I am taking: i)                     I am getting a DER encoded certificate from a MS client ii)                   I encrypt the data on server with certificate using PHP function openssl_pkcs7_encrypt () whih I believe outputs the data in S/MIME format. iii)                  I generate a PKCS7 structure with the command Openssl smime  -in (S/MIME data generated)  -pk7out –out file.   I send this file to the MS client which is trying to use capicom API to decrypt it. We are having decrypting problems on the client side mostly getting the messages like i) ASN.1 bad tag value or ii) ASN.1 unexpected end of data or iii) Or key not found.   We are not sure what the problem is. If any one can point us in right direction, it will be great. Any help will be greatly appreciated.   Regards Rohit