linux openssl p7b,c – 如何使用openssl从PKCS7.p7b证书文件中读取证书文件？

我使用了以下程序：

#include

#include

#include

#include

#include

int main(int argc, char **argv)

{

PKCS7 *p7 = NULL;

BIO *in = BIO_new(BIO_s_file());

BIO *out = BIO_new(BIO_s_file());

int der = 0; /* Input from DER or PEM ? */

int text = 0; /* Dump text or output PEM ? */

STACK_OF(X509) *certs = NULL;

int i;

CRYPTO_malloc_init(); \

ERR_load_crypto_strings();

OpenSSL_add_all_algorithms();

BIO_set_fp(out, stdout, BIO_NOCLOSE);

BIO_read_filename(in, argv[1]);

p7 = der ?

d2i_PKCS7_bio(in, NULL) :

PEM_read_bio_PKCS7(in, NULL, NULL, NULL);

i = OBJ_obj2nid(p7->type);

if(i == NID_pkcs7_signed) {

certs = p7->d.sign->cert;

} else if(i == NID_pkcs7_signedAndEnveloped) {

certs = p7->d.signed_and_enveloped->cert;

}

for (i = 0; certs && i < sk_X509_num(certs); i++) {

X509 *x = sk_X509_value(certs,i);

if(text) {

X509_print(out, x);

} else {

PEM_write_bio_X509(out,x);

}

}

}

它基于openssl-1.0.0d / apps / pkcs7.c,并且可以轻松编译(在Linux或Mac OS X上)(前提是将其保存为readp7.c)：

gcc -o readp7 readp7.c -lcrypto

您可以使用openssl创建文件并按如下方式读取它们：

openssl crl2pkcs7 -nocrl -certfile a.crt -certfile b.crt -out test.p7b

./readp7 test.p7b