PKCS#7 and CMS Signed-And-Enveloped-Data command line

[Federico Berton]

Hi guys,

I have to create a program following the PKCS#7 standard with 
Signed-And-Enveloped-Data datatype:


SignedAndEnvelopedData ::= SEQUENCE {
version Version,
recipientInfos RecipientInfos,
digestAlgorithms DigestAlgorithmIdentifiers,
encryptedContentInfo EncryptedContentInfo,
certificates
[0] IMPLICIT ExtendedCertificatesAndCertificates OPTIONAL,
crls
[1] IMPLICIT CertificateRevocationLists OPTIONAL,
signerInfos SignerInfos
}
DigestAlgorithmIdentifiers ::=SET OF DigestAlgorithmIdentifier
SignerInfos ::= SET OF SignerInfo


and I have to use CMS for enveloping.

Can I do this with a command-line like

openssl cms -sign -in myfile.xml -signer sender.crt -inkey sender.key -binary \
        | openssl cms -compress \
        | openssl cms -encrypt -des3 -out signed-and-enveloped.data 
recipient.crt


Thanks in advance.


FEDERICO BERTON
AREA SVILUPPO

Via Europa, 20
35015 Galliera Veneta (PD)
TEL. 049.9988200 FAX 049.9471337
http://www.trivenet.it
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org