RE: Encrypted Private Keys

Hello Bob, All,

I am using OpenSSL to get pkcs8 structured private keys. That
allows me to sign, using an address book (the SFL test environment).
However, when I smtp the mime encoded (multipart/signed) message, Outlook
2000 recognises this as a signed message, can positively verify the
integrity,
but cannot show the subject and cannot access the certificate (although it
is included).
Has anyone done a similar test (with sm_free3) ?
Below you can find a code extract :
	pCSMIME = new CSMIME;
	char pwd[] = "test";
	char addressbook[] = "free_ab.dat";
	SMFree3Init(pCSMIME,pwd,addressbook,"FREE");
    	p_GAddressBook = new MAB_AB_def(addressbook);

	// CREATE MESSAGE - WITH TEST ENVIRONMENT
	msgToSign = new CL_MsgToSign(CfgFile, pCSMIME, output_flag, verify_flag);
	if (msgToSign->Check() != SM_NO_ERROR) exit(-1);

Does anyone know a good SMimev3 client tool to test the messages ? (Entrust
Autoresponder
doesn't help in this case)

Many Thanks,
Maarten


-----Original Message-----
From: [email protected] [mailto:[email protected]]On
Behalf Of Bob Smith
Sent: Tuesday, August 22, 2000 1:40 AM
To: [email protected]
Subject: Encrypted Private Keys



I'm using a private key / certificate pair extracted from a PKCS 12 file
using Open SSL. The problem is that the private key I'm passing to sm_free3
is not encrypted and the SMTI_Sign function is failing when it tries to
decrypt the private key. How should the private key be encrypted so that the
sign function can use it?

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com