From 26ad31d454fa12cc12f744c206f2e04440ce56bd Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Tue, 9 Oct 2007 21:33:53 +0000 Subject: Need to specify -binary to OpenSSL CLI, at least for signing manifests svn path=/scripts/rpki/cms.py; revision=1143 --- scripts/rpki/cms.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'scripts/rpki/cms.py') diff --git a/scripts/rpki/cms.py b/scripts/rpki/cms.py index 604a9ca1..5b27a97f 100644 --- a/scripts/rpki/cms.py +++ b/scripts/rpki/cms.py @@ -36,7 +36,7 @@ def sign(plaintext, keypair, certs): f.write(plaintext) f.close() - i,o = os.popen2(("openssl", "smime", "-sign", "-nodetach", "-outform", "DER", "-signer", signer_filename, + i,o = os.popen2(("openssl", "smime", "-sign", "-nodetach", "-outform", "DER", "-binary", "-signer", signer_filename, "-certfile", certfile_filename, "-inkey", "/dev/stdin", "-in", plaintext_filename)) i.write(keypair.get_PEM()) i.close() @@ -64,7 +64,7 @@ def verify(cms, ta): f.write(ta.get_PEM()) f.close() - i,o,e = os.popen3(("openssl", "smime", "-verify", "-inform", "DER", "-CAfile", ta_filename)) + i,o,e = os.popen3(("openssl", "smime", "-verify", "-inform", "DER", "-binary", "-CAfile", ta_filename)) i.write(cms) i.close() plaintext = o.read() -- cgit v1.2.3