在Objective-c中使用OpenSSL的CMS_encrypt（）

Question

我想使用OpenSSL的cms庫使用CMS_encrypt（）方法來加密具有特定證書的文件。 （我想這應該是正確的） 有沒有人有關於使用CMS_encrypt（）的小樣本？

感謝

Answer 1

我發現在C演示中OpenSSL的OpenSSL的下載文件夾... /演示/ CMS/cms_enc.c

用下面的代碼（OpenSSL的財產）：

/* Simple S/MIME encrypt example */ 
#include <openssl/pem.h> 
#include <openssl/cms.h> 
#include <openssl/err.h> 

int main(int argc, char **argv) 
    { 
    BIO *in = NULL, *out = NULL, *tbio = NULL; 
    X509 *rcert = NULL; 
    STACK_OF(X509) *recips = NULL; 
    CMS_ContentInfo *cms = NULL; 
    int ret = 1; 

    /* 
    * On OpenSSL 1.0.0 and later only: 
    * for streaming set CMS_STREAM 
    */ 
    int flags = CMS_STREAM; 

    OpenSSL_add_all_algorithms(); 
    ERR_load_crypto_strings(); 

    /* Read in recipient certificate */ 
    tbio = BIO_new_file("signer.pem", "r"); 

    if (!tbio) 
     goto err; 

    rcert = PEM_read_bio_X509(tbio, NULL, 0, NULL); 

    if (!rcert) 
     goto err; 

    /* Create recipient STACK and add recipient cert to it */ 
    recips = sk_X509_new_null(); 

    if (!recips || !sk_X509_push(recips, rcert)) 
     goto err; 

    /* sk_X509_pop_free will free up recipient STACK and its contents 
    * so set rcert to NULL so it isn't freed up twice. 
    */ 
    rcert = NULL; 

    /* Open content being encrypted */ 

    in = BIO_new_file("encr.txt", "r"); 

    if (!in) 
     goto err; 

    /* encrypt content */ 
    cms = CMS_encrypt(recips, in, EVP_des_ede3_cbc(), flags); 

    if (!cms) 
     goto err; 

    out = BIO_new_file("smencr.txt", "w"); 
    if (!out) 
     goto err; 

    /* Write out S/MIME message */ 
    if (!SMIME_write_CMS(out, cms, in, flags)) 
     goto err; 

    ret = 0; 

    err: 

    if (ret) 
     { 
     fprintf(stderr, "Error Encrypting Data\n"); 
     ERR_print_errors_fp(stderr); 
     } 

    if (cms) 
     CMS_ContentInfo_free(cms); 
    if (rcert) 
     X509_free(rcert); 
    if (recips) 
     sk_X509_pop_free(recips, X509_free); 

    if (in) 
     BIO_free(in); 
    if (out) 
     BIO_free(out); 
    if (tbio) 
     BIO_free(tbio); 

    return ret; 

    }