Java

openssl smime -encrypt -des3 -in <file> <pem file>

See more OpenSSL Examples

OpenSSL SMIME encrypt file using PEM containing a certificate. Chilkat2 Java

import com.chilkatsoft.chilkat2.BinData;
import com.chilkatsoft.chilkat2.Cert;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Crypt2;
import com.chilkatsoft.chilkat2.Pem;
import com.chilkatsoft.chilkat2.StringBuilder;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        // Load the cert from a PEM file.

        Pem pem = new Pem();
        // Our particular PEM was not encrypted, so we pass an empty password.
        // Also, a private key is not needed for encryption.  The PEM used to test this example
        // happens to have a private key, but it's not actually used.
        try {
            pem.loadPemFile("qa_data/openssl/rsaCertAndKey.pem", "");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        if (pem.getNumCerts() == 0) {
            System.out.println("PEM does not contain any certificates.");
            return;
        }

ERROR: Method not in Chilkat2 Java: Pem.GetCert
        Cert cert = pem.ERROR();
        if (!pem.getLastMethodSuccess()) {
            System.out.println(pem.getLastErrorText());
            return;
        }

        // -------------------------------------------------------------------------------------
        // Duplicate this OpenSSL command:   openssl smime -encrypt -des3 -in <file> <pem file>
        // -------------------------------------------------------------------------------------
        Crypt2 crypt = new Crypt2();
        try {
            crypt.setEncryptCert(cert);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            cert.close();
            return;
        }

        cert.close();

        crypt.setCryptAlgorithm("PKI");
        crypt.setPkcs7CryptAlg("3des");
        crypt.setKeyLength(168);

        // Load the file to be encrypted.
        BinData bd = new BinData();
        try {
            bd.loadFile("qa_data/openssl/hello.txt");
        } catch (ChilkatException e) {
            System.out.println("Failed to load the input file.");
            return;
        }

        // Encrypt.
        try {
            crypt.encryptBd(bd);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // The openssl smime -encrypt command produces encrypte MIME such as this:

        // MIME-Version: 1.0
        // Content-Disposition: attachment; filename="smime.p7m"
        // Content-Type: application/x-pkcs7-mime; smime-type=enveloped-data; name="smime.p7m"
        // Content-Transfer-Encoding: base64
        //
        // MIICzwYJKoZIhvcNAQcDoIICwDCCArwCAQAxggF8MIIBeAIBADBgMEoxCzAJBgNVBAYTAlVTMRYw
        // FAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQDExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBY
        // MwISA9Nqgb1dH/XTDNeKzN1nR85iMA0GCSqGSIb3DQEBAQUABIIBAIQqPexjxWovgxwKV/r3HL/U
        // EP9Yozvz5hBeX5VvRZjKSi4FRw5wapElPK+4FB82hiAR9Mi3c16PvPSVkJv3l78Mv5uaaOs/OmUz
        // mIHFB6Z+l2E52BDmUVWJZTQ09vdWy6+NIRlg2R9Z1NkmZ4BZCJk6mHB/Yx03IaOxK8LnwieDMthM
        // SvxbhJnIOISN7k7ofs+/0vTXUpdQ+tlmwyVySMGQ6VMk+z4sqZJ2stacqCPtt/aiSwJ9p0OKmihf
        // 3KDJceXJtavIQeA97yz1LqPvle35mmd5sBhV9qQYdTV/KJ+YM5uEZ9BHYbvMJbADFHwKzhcEY3qA
        // 7T9acmEsb7NycOIwggE1BgkqhkiG9w0BBwEwFAYIKoZIhvcNAwcECERX/ZoHweSkgIIBEMmCMx49
        // zjVAnGqRaBbvzQT1hg0uQSxIJjxMxC+HSuM+eY9oSOsbrw4uIijHKH9NdOpeDsdRzg2z5EBM7AlP
        // Ht9DyPW5C2deV6RPX4F8gyExz+JUXrd+3Yb3AKTdpDkTWDmNCeO0r/YSqp518+mfU5hG8e336u51
        // HAM44FeknA8oThWsD/wUB1e8vzsatK4UXW/KSu/166V7z+VT86kd+IHa7t60U9Yp0ZXgcM5Pb5Ni
        // 69Qc5MKPzom2801H5UR/WjCgsxOIjOj49sKisjRy79skrJzxY5ZG05T0dKn6KC3TjRpIEEeOyhCd
        // Nm2Y7dcW8GLMepdhWay5vePmQxmvmhbAtBprIem14NcrYeG6D5wP

        // We have the body in bd
        // Construct the header and base64 body...
        StringBuilder sbEncryptedMime = new StringBuilder();

        sbEncryptedMime.appendLine("MIME-Version: 1.0", true);
        sbEncryptedMime.appendLine("Content-Disposition: attachment; filename=\"smime.p7m\"", true);
        sbEncryptedMime.appendLine("Content-Type: application/x-pkcs7-mime; smime-type=enveloped-data; name=\"smime.p7m\"", true);
        sbEncryptedMime.appendLine("Content-Transfer-Encoding: base64", true);
        sbEncryptedMime.appendLine("", true);
        sbEncryptedMime.appendLine(bd.getEncoded("base64_mime"), true);

        // Show the result.
        System.out.println(sbEncryptedMime.getAsString());

        // or save to a file..
        sbEncryptedMime.writeFile("qa_output/encryptedMime.txt", "utf-8", false);
    }
}