Friday, July 3, 2020

And openssl CMS_sign has similar documentaitons. Not as easy as Win32 CryptoSignMessage() but high quality non-the-less

https://www.openssl.org/docs/manmaster/man3/CMS_sign.html

  1. At line 54355, we invoke CMS_sign() with two flags: CMS_DETACHED | CMS_PARTIAL.

    1. CMS_PARTIAL is required otherwise the manpage for CMS_sign() says SHA1 will be invoked to hash over claim_bio

  2. We invoke cms_add1_signer() (line 74943, col 31 )

    1. Which seems to call, at #146127 (col 62) call “cms_add1_signing_cert_v2()” . This will support CAdES-B format.

  3. Finally we invoke, at #147594: CMS_final()

No comments:

Post a Comment