Could you please also post the signature which openssl can verify?
-Kyle H On Sat, May 28, 2011 at 11:31 AM, Victor Sterpu <vic...@casnt.ro> wrote:
I posted the signature here http://www.casnt.ro/FARMD_16611264_20110524_1153.smime The signature is the only signature accepted by a server and I don't know how to reproduce it. It seems is not valid. I tried to verify it like this: openssl smime -inform DER -verify -in FARMD_16611264_20110524_1153.smime -CAfile tot.crt but the error is : Error reading S/MIME message 25276:error:0D06B08E:asn1 encoding routines:ASN1_D2I_READ_BIO:not enough data:a_d2i_fp.c:238: I also posted the tot.crt file here www.casnt.ro/tot.crt. The file completes the verification chain. The strange thing is that the server accepts this kind of unknown signature and no other. I try to reproduce this for a week. I created my own S/MIME signature that I can verify succesfuly with the command: openssl smime -inform SMIME -verify -in FARMD_16611264_20110524_1154.smime -CAfile tot.crt but the server doesn't accepts it. Thank you.
smime.p7s
Description: S/MIME cryptographic signature