X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=crypto%2Fpkcs7%2Fsign.c;h=8b59885f7ea1ccae12d3cba05b54cc296febba38;hp=6ad88d468877ce6e6432442861eec2696d7871e1;hb=86a2f966d0099d87dc2e2a05a923a26ebc182dea;hpb=31b8d8684441e6cd5138832bb1b2ddb10acd6ba6 diff --git a/crypto/pkcs7/sign.c b/crypto/pkcs7/sign.c index 6ad88d4688..8b59885f7e 100644 --- a/crypto/pkcs7/sign.c +++ b/crypto/pkcs7/sign.c @@ -56,29 +56,38 @@ * [including the GNU Public Licence.] */ #include -#include "bio.h" -#include "x509.h" -#include "pem.h" +#include +#include +#include +#include +#include -main(argc,argv) +int main(argc,argv) int argc; char *argv[]; { X509 *x509; EVP_PKEY *pkey; PKCS7 *p7; - PKCS7 *p7_data; PKCS7_SIGNER_INFO *si; BIO *in; BIO *data,*p7bio; char buf[1024*4]; - int i,j; + int i; int nodetach=0; +#ifndef OPENSSL_NO_MD2 EVP_add_digest(EVP_md2()); +#endif +#ifndef OPENSSL_NO_MD5 EVP_add_digest(EVP_md5()); +#endif +#ifndef OPENSSL_NO_SHA1 EVP_add_digest(EVP_sha1()); +#endif +#ifndef OPENSSL_NO_MDC2 EVP_add_digest(EVP_mdc2()); +#endif data=BIO_new(BIO_s_file()); again: @@ -97,9 +106,9 @@ again: BIO_set_fp(data,stdin,BIO_NOCLOSE); if ((in=BIO_new_file("server.pem","r")) == NULL) goto err; - if ((x509=PEM_read_bio_X509(in,NULL,NULL)) == NULL) goto err; + if ((x509=PEM_read_bio_X509(in,NULL,NULL,NULL)) == NULL) goto err; BIO_reset(in); - if ((pkey=PEM_read_bio_PrivateKey(in,NULL,NULL)) == NULL) goto err; + if ((pkey=PEM_read_bio_PrivateKey(in,NULL,NULL,NULL)) == NULL) goto err; BIO_free(in); p7=PKCS7_new(); @@ -108,10 +117,9 @@ again: si=PKCS7_add_signature(p7,x509,pkey,EVP_sha1()); if (si == NULL) goto err; - /* Add some extra attributes */ - if (!add_signed_time(si)) goto err; - if (!add_signed_string(si,"SIGNED STRING")) goto err; - if (!add_signed_seq2string(si,"STRING1","STRING2")) goto err; + /* If you do this then you get signing time automatically added */ + PKCS7_add_signed_attribute(si, NID_pkcs9_contentType, V_ASN1_OBJECT, + OBJ_nid2obj(NID_pkcs7_data)); /* we may want to add more */ PKCS7_add_certificate(p7,x509);