Messages in this thread | | | From | David Howells <> | Subject | Re: sign-file and detached PKCS#7 firmware signatures | Date | Tue, 19 May 2015 10:25:24 +0100 |
| |
Luis R. Rodriguez <mcgrof@suse.com> wrote:
> There's a missing -binary argument here, other than that this works fine.
Good point.
> > >$PKCS7_MESSAGE_FILE_IN_DER_FORM > > I however cannot figure out how to use openssl to verify this signature.
Something like:
openssl smime -verify \ -in $PKCS7_MESSAGE_FILE_IN_DER_FORM \ -inform DER \ -content $FIRMWARE_BLOB_NAME \ -inkey $PRIVATE_KEY_FILE_IN_PEM_FORM \ -signer $X509_CERT_FILE_IN_PEM_FORM
I would guess.
David
| |