Messages in this thread | | | Date | Tue, 19 May 2015 20:21:24 +0200 | From | "Luis R. Rodriguez" <> | Subject | Re: sign-file and detached PKCS#7 firmware signatures |
| |
On Tue, May 19, 2015 at 05:48:57PM +0100, David Howells wrote: > Luis R. Rodriguez <mcgrof@suse.com> wrote: > > > > Something like: > > > > > > openssl smime -verify \ > > > -in $PKCS7_MESSAGE_FILE_IN_DER_FORM \ > > > -inform DER \ > > > -content $FIRMWARE_BLOB_NAME \ > > > -inkey $PRIVATE_KEY_FILE_IN_PEM_FORM \ > > > -signer $X509_CERT_FILE_IN_PEM_FORM > > > > > > I would guess. > > > > I tried a few things and no luck with that. > > Try this: > > openssl smime -verify \ > -in $PKCS7_MESSAGE_FILE_IN_DER_FORM \ > -inform DER \ > -certfile $X509_CERT_FILE_IN_PEM_FORM \ > -content $FIRMWARE_BLOB_NAME \ > -binary \ > -noverify \ > >/dev/null
Neat ok yeah this works thanks, I'll throw this in the docs too with the change to use -out /dev/null.
Luis
| |