Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932246AbbESSV2 (ORCPT ); Tue, 19 May 2015 14:21:28 -0400 Received: from cantor2.suse.de ([195.135.220.15]:48170 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751132AbbESSV0 (ORCPT ); Tue, 19 May 2015 14:21:26 -0400 Date: Tue, 19 May 2015 20:21:24 +0200 From: "Luis R. Rodriguez" To: David Howells Cc: rusty@rustcorp.com.au, mmarek@suse.cz, mjg59@srcf.ucam.org, keyrings@linux-nfs.org, dmitry.kasatkin@gmail.com, linux-kernel@vger.kernel.org, seth.forshee@canonical.com, linux-security-module@vger.kernel.org, dwmw2@infradead.org Subject: Re: sign-file and detached PKCS#7 firmware signatures Message-ID: <20150519182124.GK23057@wotan.suse.de> References: <20150519161902.GC23057@wotan.suse.de> <20150518231304.GZ23057@wotan.suse.de> <20150515123610.16723.61913.stgit@warthog.procyon.org.uk> <20150515123513.16723.96340.stgit@warthog.procyon.org.uk> <21177.1431716875@warthog.procyon.org.uk> <8931.1432027524@warthog.procyon.org.uk> <3811.1432054137@warthog.procyon.org.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3811.1432054137@warthog.procyon.org.uk> User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1038 Lines: 36 On Tue, May 19, 2015 at 05:48:57PM +0100, David Howells wrote: > Luis R. Rodriguez wrote: > > > > Something like: > > > > > > openssl smime -verify \ > > > -in $PKCS7_MESSAGE_FILE_IN_DER_FORM \ > > > -inform DER \ > > > -content $FIRMWARE_BLOB_NAME \ > > > -inkey $PRIVATE_KEY_FILE_IN_PEM_FORM \ > > > -signer $X509_CERT_FILE_IN_PEM_FORM > > > > > > I would guess. > > > > I tried a few things and no luck with that. > > Try this: > > openssl smime -verify \ > -in $PKCS7_MESSAGE_FILE_IN_DER_FORM \ > -inform DER \ > -certfile $X509_CERT_FILE_IN_PEM_FORM \ > -content $FIRMWARE_BLOB_NAME \ > -binary \ > -noverify \ > >/dev/null Neat ok yeah this works thanks, I'll throw this in the docs too with the change to use -out /dev/null. Luis -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/