On Mon, Aug 21, 2006, Harakiri wrote: > Nice advertising here by john.. > > i think there are more products =) - try bouncycastle > API they can do it too ... for free >
OpenSSL has been able to do this for a very long time but the APIs weren't very friendly and it couldn't be done from the command line. The latest dev version 0.9.9 fixes that so that now the smime utility supports multiple signers and the high level PKCS7 API. To do that with previous versions check out the bit that sets keys and certificates in the PKCS7_sign function source and call them with each key and certificate pair. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]