Thank you Steve,

I just was doing that. In fact I am doing  a "PKCS7_Cosign" function which have 
a STACK_OF(X509) and  STACK_OF(EVP_PKEY) instead of X509 and EVP_PKEY.

I will watch dev version 0.9.9 fixes too.

Fernando.

-----Mensaje original-----
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nombre de Dr. Stephen Henson
Enviado el: miercoles, 23 de agosto de 2006 14:30
Para: openssl-users@openssl.org
Asunto: Re: multiple signers


On Mon, Aug 21, 2006, Harakiri wrote:

> Nice advertising here by john..
> 
> i think there are more products =) - try bouncycastle
> API they can do it too ... for free
> 

OpenSSL has been able to do this for a very long time but the APIs weren't
very friendly and it couldn't be done from the command line.

The latest dev version 0.9.9 fixes that so that now the smime utility supports
multiple signers and the high level PKCS7 API.

To do that with previous versions check out the bit that sets keys and
certificates in the PKCS7_sign function source and call them with each key and
certificate pair.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to