Trying to build CMS signed data message with no content

2012-04-24 Thread Jamil Nimeh
Hi all, I'm stuck on a problem I'm hoping someone can help me out with. I'm trying to create a CMS signed data message with the eContent omitted. When I pass zero-length data into NSS_CMSEncoder_Update() (null pointer, empty string, doesn't seem to matter) I end up getting SEC_ERROR_DIGEST_N

Add other signed attributes in CMS

2012-04-04 Thread Jamil Nimeh
Hello all, I was wondering if folks know the best way to add additional signed attributes to CMS signed data messages. I see in cms.h there's a NSS_CMSSignerInfo_AddAutiAttr function, but it doesn't appear to be exported (at least, I get undefined reference errors when I try to use it). I'm

CMS Message parsing/generation for SCEP

2012-04-03 Thread Jamil Nimeh
mand-line using the "-noverify" option. The cert used to sign the object I'm taking in is pretty unremarkable; no extensions, 1 year validity, RSA/2048 bit key...all pretty standard stuff. Any suggestions are welcome. Thank you, Jamil Nimeh -- dev-tech-crypto mailing list dev-tec