Commit 14f47acf authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Allow reordering of certificates when signing. 

Add certificates if -nocerts and -certfile specified when signing
in smime application. This can be used this to specify the
order certificates appear in the PKCS#7 structure: some broken
applications require a certain ordering.

PR#3316
parent 13b78960

apps/smime.c

+8 −0
Original line number Diff line number Diff line
@@ -704,6 +704,14 @@ int MAIN(int argc, char **argv) 
			p7 = PKCS7_sign(NULL, NULL, other, in, flags);

			if (!p7)

				goto end;

			if (flags & PKCS7_NOCERTS)

				{

				for (i = 0; i < sk_X509_num(other); i++)

					{

					X509 *x = sk_X509_value(other, i);

					PKCS7_add_certificate(p7, x);

					}

				}

			}

		else

			flags |= PKCS7_REUSE_DIGEST;