views:

9

answers:

1

I receive smime message with content-type 'Application/EDI'. It is non-standard mime type and content should be interpreted as binary. But OpenSSL during verifying signature treats it as text and changes line breaks from '\n' to '\r\n' (as needed by spec for content-type 'text'). So digest becomes wrong and verification fails.

Is there any way to make openssl not chaging anything in original message? Argument '-binary' doesn't work on any version (I tried 0.9.7, 0.9.8, 1.0.0).

+1  A: 

Ok. Answering to my own question. I splitted input data into two separate files with content and signature removing unnecessary metadata. After that I changed mime type of signature to 'application/pkcs7-mime' and verification became successful with this command: openssl.exe smime -verify -inform SMIME -CAfile caCert.pem -certfile cert.pem -in signature.txt -content content.txt

Variant with changing -inform to PEM also works, but signature must be without Content-xxx headers

Donz