RE: how to know a DN

tuzi:

You are using the test configuration files provided with the SFL.  The login
identification mechanism used in these configuration files is too primitave
for most applications.  It is not intended as a general login ID mechanism.
There are methods in CSM_SignBuf::SetApplicableInstances(...) that assist
with looping through the list of logins and setting signers.  You can use
this method as an example for your application to loop through each login
(or simply set all valid logins, regardless of ID) and set the appropriate
flags (UseThis and Applicable).  I suspect most applications will have only
1 valid login with a private key, so setting all logins is acceptable.

    m_pCsmime->ClearFlag(SM_INST_USE_THIS);   // CLEAR ALL UseThis FLAGS.
    m_pCsmime->ClearFlag(SM_INST_APPLICABLE);
    m_pCsmime->UseAll();     // DOES NOT SET Applicable flag for signing.
   for (CSM_CSInst *tmpInst = pCSMIME->m_pCSInsts->SetCurrToFirst(); 
        tmpInst;  tmpInst = pCSMIME->m_pCSInsts->GoNext())
	if (tmpInst->AccessCertificates())	// CHECK that private key
present.
							//  (IGNORE verify
only logins).
         tmpInst->SetApplicable();


Originally we had intended to force applications to set the appropriate
signer, since the choice of private key and certificate details were very
important for security.  At this point, in view of most customer's usage of
the login list (that being only 1 login usually), I can add a method to the
CSMIME container class to set all signers/encryptors in the next release if
you are interested.  (Basically, I would add the above code in a CSMIME
method).


Bob Colestock
VDA
-----Original Message-----
From: tuzi [mailto:[email protected]]
Sent: Wednesday, May 23, 2001 12:01 PM
To: [email protected]
Subject: how to know a DN


hi all锛

      I am new to this list. I have some questions about using SFL.
I compiled the mimetest tool and successfully generated a signed
file (.eml) with the settings in the test enviroment. Then I added 
some entries in the config files, and managed to generate a new signed mail
using my own .pfx file. I am glad that outlook express can read this mail. 

	To use my .pfx file, I have to login with it and add a Login1=<DN>
entry
in the config file (similiar to the one in
test\hilevel\SignedData\SignedMIME.cfg).
My question is that how can I obtain the <DN> string of a certain .pfx file,
(in my example, I get it by debugging and tracing the program.) or do I have
other easier method to indicate which login to use.

Thank you very much.

sincerely

            tuzi
            [email protected]