On Wed, Aug 04, 2010, Giacomo Boccardo wrote: > When I try to inspect the file in the attachment (PKCS#7, DER format) I > have the following error: > > $ openssl pkcs7 -inform DER -in cadesBES_singleCounterSignatureWithDate.p7m > unable to load PKCS7 object > 2491:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong > tag:tasn_dec.c:1316: > 2491:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 > error:tasn_dec.c:380:Type=PKCS7_ISSUER_AND_SERIAL > 2491:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested > asn1 error:tasn_dec.c:748:Field=issuer_and_serial, Type=PKCS7_SIGNER_INFO > 2491:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested > asn1 error:tasn_dec.c:709:Field=signer_info, Type=PKCS7_SIGNED > 2491:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested > asn1 error:tasn_dec.c:748: > 2491:error:0D08403A:asn1 encoding routines:ASN1_TEMPLATE_EX_D2I:nested asn1 > error:tasn_dec.c:578:Field=d.sign, Type=PKCS7 > > Is it possible that it's trying to look for an IssuerAndSerialNumber > structure, even if I'm using a SubjectKeyIdentifier one? >
The smime command uses PKCS#7 which doesn't include the SKID option. Use the cms command instead. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
