Hi Frank, You mean to say there is no pre-defined library API's are available in the Openssl (my understanding is right?). You told that you already did it , So can I know in which language you have done?. and do we need to implement it separatly , or is there any source already avilable in the net?... if so can you please give me some example programs ...
and Openssl supports PKCS#7 means it also support the CMS ?.. if that is the case can we use the PKCS#7 for the CMS envelope.. -- Best regrads Shankar On 4/1/08, Wockenfuß, Frank <[EMAIL PROTECTED]> wrote: > > Hi, > > As far as I know OpenSSL does not support CMS in the way you need it. > We had to use a self developed library to create a CMS file. The main > problem is, that there was no private key for input when creating > PKCS#7-files (a.k.a. CMS-files). > Parsing this file is possible with OpenSSL. > > Maybe I'm wrong a someone can tell me the right version, but this is how > we did it. > > Best regards > > Frank > > ------------------------------ > *Von:* [EMAIL PROTECTED] [mailto: > [EMAIL PROTECTED] *Im Auftrag von *shankar ks > *Gesendet:* Dienstag, 1. April 2008 11:36 > *An:* openssl-users@openssl.org > *Betreff:* CMS usage with OpenSSl > > > Hi all/ > > I am shiva, working on security issues using Openssl Api's. Our > requirement is we need to Sign the file, compress the file , encrypt the > file as a CMS(crypto graphic message syntax) package. > I am able to do the signing, compression, encryption using the OpenSSl > Api's in C language. But our requirement is we need to envelope the signed , > compressed and encrypted files as a CMS package. > > Basically we are using > RSA_sign > EVP_EncryptUpdate > RSA_public_encrypt for signing and encryption of the data. > > > But we did not understand how to implement those as a CMS package. I am > thinking Implementing the above functions it self implementation of CMS, but > I am not sure about it, can you please conform whether I am correct or not ? > if I am wrong, is there any functions that I need to implement for the CMS. > And one more doubt is does using of openssl Api's will implement the CMS > or not ? > > If all my understating is wrong please let me know what are the > implementations for the CMS using the openssl. > Please help me in this regard… > Thanks in advance > >