On Thu, May 10, 2012, ???? wrote: > Hi, > > > > I meet a "unsupported certificate purpose" when using smime utility??the > signed file is produced by iOS device, the cert is issued by > > MS cert addon. > > > X509v3 Extended Key Usage: > > 1.3.6.1.5.5.8.2.2 >
The EXTKU extension above is the problem it should either be omitted or contain the email protection usage for S/MIME signing. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org