From 14f47acf235797be4d59eeb07b151c66b5b0179a Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Mon, 2 Jun 2014 14:12:07 +0100 Subject: [PATCH] Allow reordering of certificates when signing. Add certificates if -nocerts and -certfile specified when signing in smime application. This can be used this to specify the order certificates appear in the PKCS#7 structure: some broken applications require a certain ordering. PR#3316 --- apps/smime.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/apps/smime.c b/apps/smime.c index d1fe32d31b..d1ee48937e 100644 --- a/apps/smime.c +++ b/apps/smime.c @@ -704,6 +704,14 @@ int MAIN(int argc, char **argv) p7 = PKCS7_sign(NULL, NULL, other, in, flags); if (!p7) goto end; + if (flags & PKCS7_NOCERTS) + { + for (i = 0; i < sk_X509_num(other); i++) + { + X509 *x = sk_X509_value(other, i); + PKCS7_add_certificate(p7, x); + } + } } else flags |= PKCS7_REUSE_DIGEST; -- GitLab