<div dir="ltr"><div class="gmail_extra">HI!</div><div class="gmail_extra"><br></div><div class="gmail_extra">Actually there is some support for PKCS-7 in public_key, it is not so well announce as it is consider some what experimental and just tested on a very basic level.</div>
<div class="gmail_extra">But public key can decode/encode a basic PKCS-7.pem file. You should be able to manipulate a PKCS-7 structure in Erlang resign it with public_key functions</div><div class="gmail_extra">and be happy. We recently added support for SCEP (Simple Certificate Enrolment Protocol). PKSCS-7 is a spec that can be extended so you might need some</div>
<div class="gmail_extra">additional own ASN-1 handling!</div><div class="gmail_extra"><br></div><div class="gmail_extra">Regards Ingela Erlang/OTP-team Ericsson AB</div><div class="gmail_extra"><br></div><div class="gmail_extra">
<br><div class="gmail_quote">2013/11/25 Szoboszlay Dániel <span dir="ltr"><<a href="mailto:dszoboszlay@gmail.com" target="_blank">dszoboszlay@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
Hi,<br>
<br>
If it is only a manifest file that (I assume) doesn't change very often I would rather use "openssl smime" to create the signature.<br>
<br>
I was looking into PKCS-7 signing with Erlang recently, but I could avoid doing it after all. My impression was that there is no direct support for it in OTP, so you'd either have to call the openssl routines via e.g. a port driver or use the existing crypto functions to sign your data and put together a SignedData structure according to RFC 2315 using the ASN.1 application. Yet, I might be wrong.<br>
<br>
Daniel<div class=""><div class="h5"><br>
<br>
On Mon, 25 Nov 2013 20:55:04 -0000, James Wheare <<a href="mailto:james@wheare.org" target="_blank">james@wheare.org</a>> wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
Hullo,<br>
<br>
I'm working on implementing Apple's Push Notifications for Websites<br>
system and having some trouble signing the "push package"<br>
<br>
The docs [1] say this:<br>
<br>
"The signature is a PKCS #7 detached signature of the manifest file.<br>
Sign the manifest file with the private key associated with your web<br>
push certificate that you obtained while registering with Apple. In<br>
PHP, you can do this with the openssl_pkcs7_sign function"<br>
<br>
So I'm looking for an equivalent to PHP's openssl_pkcs7_sign [2] in erlang.<br>
<br>
The release notes [3] for the public_key module seem to offer some<br>
hope, with "experimental" PKCS-7 support announced in 0.17, but I<br>
can't find anything about it in the docs [4]<br>
<br>
Any advice on solving this?<br>
<br>
Thanks,<br>
- James<br>
<br>
[1] <a href="https://developer.apple.com/library/mac/documentation/NetworkingInternet/Conceptual/NotificationProgrammingGuideForWebsites/PushNotifications/PushNotifications.html#//apple_ref/doc/uid/TP40013225-CH3-SW10" target="_blank">https://developer.apple.com/<u></u>library/mac/documentation/<u></u>NetworkingInternet/Conceptual/<u></u>NotificationProgrammingGuideFo<u></u>rWebsites/PushNotifications/<u></u>PushNotifications.html#//<u></u>apple_ref/doc/uid/TP40013225-<u></u>CH3-SW10</a><br>
[2] <a href="http://php.net/manual/en/function.openssl-pkcs7-sign.php" target="_blank">http://php.net/manual/en/<u></u>function.openssl-pkcs7-sign.<u></u>php</a><br>
[3] <a href="http://www.erlang.org/doc/apps/public_key/notes.html" target="_blank">http://www.erlang.org/doc/<u></u>apps/public_key/notes.html</a><br>
[4] <a href="http://erlang.org/doc/man/public_key.html" target="_blank">http://erlang.org/doc/man/<u></u>public_key.html</a><br>
______________________________<u></u>_________________<br>
erlang-questions mailing list<br>
<a href="mailto:erlang-questions@erlang.org" target="_blank">erlang-questions@erlang.org</a><br>
<a href="http://erlang.org/mailman/listinfo/erlang-questions" target="_blank">http://erlang.org/mailman/<u></u>listinfo/erlang-questions</a><br>
</blockquote>
______________________________<u></u>_________________<br>
erlang-questions mailing list<br>
<a href="mailto:erlang-questions@erlang.org" target="_blank">erlang-questions@erlang.org</a><br>
<a href="http://erlang.org/mailman/listinfo/erlang-questions" target="_blank">http://erlang.org/mailman/<u></u>listinfo/erlang-questions</a><br>
</div></div></blockquote></div><br></div></div>