Chris Nolan wrote:
1. Using a certificate that contains the client's public encryption key,
send a PKCS7 message to the client.
2. Get the client to send me a hash of the decrypted content.

The problem is, wrapping my head around what to call and in what order
on the server side. The man pages are good, but don't really give me
much insight as to the structure of the API.

Can anyone point me in the direction of some examples on how to do this?
The reason I want to use PKCS7 is because the library on the client side
is already setup to do this with a single C function call.

It seems to me that for step 1 you just have to call PKCS7_encrypt and PKCS7_sign in the right order. For step 2 it should be PKCS7_decrypt and PKCS7_verify. For all four functions exists a man page.
If you need examples you can find some in the OpenSSL book from John Viega et al.
Ciao,
Richard
--
Dr. Richard W. Könning
Fujitsu Siemens Computers GmbH


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to