On Mon, Sep 29, 2003, Dr Stephen Henson wrote: > There isn't a command to do this but the standard OpenSSL S/MIME code does the > search. If you look at around line 401 in pk7_doit.c you'll see a look which > checks each RecipientInfo structure against each certificate and breaks out > when it finds the right one or errors out if it can't. You should be able to > adapt that to your needs.
Yes ! Thanks for your accurate answer Steve, I could get it to work ! Aside from issuer name and serial number, I also have other questions: On Mon, Sep 29, 2003, I wrote: > (I first wanted to encrypt the cleartext file with each of those 20 > certificates files, and then to compare the MD5 checksum against the MD5 sum > of the "mysterious" encrypted file. I guess this doesnt work because it 2 > successive encryptions of a given file with a given key seem to yield > different encrypted files) This is what I actually did : # openssl smime -encrypt -in cleartext -out test1 certificate.crt # openssl smime -encrypt -in cleartext -out test2 certificate.crt # openssl smime -encrypt -in cleartext -out test3 certificate.crt # openssl smime -encrypt -in cleartext -out test4 certificate.crt # openssl smime -encrypt -in cleartext -out test5 certificate.crt # cp test1 copy1 # md5sum * ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]