Try using the asn1parser (an option with openssl). If this doesn't complete without an error then you may have a problem with the way your originator is producing ASN.1 (we did here and I had to solve it by producing a bit of code to act as a 'filter' to correct the problem!).
Peter
Beat Jucker <[EMAIL PROTECTED]> wrote:
Beat Jucker <[EMAIL PROTECTED]> wrote:
I have an intermediate SMIME decrypting problem. I'm using following
commandline interface (little bit outdated openssl 0.9.6b @ HPUX-B.11.11):
cat email | openssl smime -decrypt -inkey mykey -recip mycert
This works usually without problems. But Emails from one particular
address I can decrypt only most of the time. Sometimes I'll get
following error message:
openssl-0.9.6b:
Error reading S/MIME message
27549:error:0D06B078:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:139:
27549:error:21078082:PKCS7 routines:B64_READ_PKCS7:decode error:pk7_mime.c:142:
27549:error:2107A08B:PKCS7 routines:SMIME_read_PKCS7:pkcs7 parse error:pk7_mime.c:299:
same effect with openssl-0.9.7-beta6:
Error reading S/MIME message
13482:error:0D06B08E:asn1 encoding routines:ASN1_d2i_bio:not enough data:a_d2i_fp.c:240:
13482:error:21078082:PKCS7 routines:B64_READ_PKCS7:decode error:pk7_mime.c:142:
13482:error:2107A08B:PKCS7 routines:SMIME_read_PKCS7:pkcs7 parse error:pk7_mime.c:299:
When I'll try the same command later it might or might not get decrypted successful ...
What does "header too long" mean in the context of SMIME decrypt (or "not enough data")?
Thanks,
-- Beat
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
