Messages in this thread | | | Date | Tue, 19 May 2015 18:19:02 +0200 | From | "Luis R. Rodriguez" <> | Subject | Re: sign-file and detached PKCS#7 firmware signatures |
| |
On Tue, May 19, 2015 at 10:25:24AM +0100, David Howells wrote: > Luis R. Rodriguez <mcgrof@suse.com> wrote: > > > There's a missing -binary argument here, other than that this works fine. > > Good point. > > > > >$PKCS7_MESSAGE_FILE_IN_DER_FORM > > > > I however cannot figure out how to use openssl to verify this signature. > > Something like: > > openssl smime -verify \ > -in $PKCS7_MESSAGE_FILE_IN_DER_FORM \ > -inform DER \ > -content $FIRMWARE_BLOB_NAME \ > -inkey $PRIVATE_KEY_FILE_IN_PEM_FORM \ > -signer $X509_CERT_FILE_IN_PEM_FORM > > I would guess.
I tried a few things and no luck with that.
Luis
| |