Lua

openssl smime -encrypt -des3 -in <file> <pem file>

See more OpenSSL Examples

OpenSSL SMIME encrypt file using PEM containing a certificate. Lua

local chilkat = require("chilkat")

-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

-- Load the cert from a PEM file.

local pem = chilkat.Pem.new()
-- Our particular PEM was not encrypted, so we pass an empty password.
-- Also, a private key is not needed for encryption.  The PEM used to test this example
-- happens to have a private key, but it's not actually used.
local success = pem:load_pem_file("qa_data/openssl/rsaCertAndKey.pem", "")
if not success then
    print(pem.last_error_text)
    return
end

if pem.num_certs == 0 then
    print("PEM does not contain any certificates.")
    return
end

local cert = ERROR: Method not in Chilkat for Lua: Pem.GetCert
pem:ERROR()
if not pem.last_method_success then
    print(pem.last_error_text)
    return
end

-- -------------------------------------------------------------------------------------
-- Duplicate this OpenSSL command:   openssl smime -encrypt -des3 -in <file> <pem file>
-- -------------------------------------------------------------------------------------
local crypt = chilkat.Crypt2.new()
success = crypt:set_encrypt_cert(cert)
if not success then
    print(crypt.last_error_text)

    return
end

crypt.crypt_algorithm = "PKI"
crypt.pkcs7_crypt_alg = "3des"
crypt.key_length = 168

-- Load the file to be encrypted.
local bd = chilkat.BinData.new()
success = bd:load_file("qa_data/openssl/hello.txt")
if not success then
    print("Failed to load the input file.")
    return
end

-- Encrypt.
success = crypt:encrypt_bd(bd)
if not success then
    print(crypt.last_error_text)
    return
end

-- The openssl smime -encrypt command produces encrypte MIME such as this:

-- MIME-Version: 1.0
-- Content-Disposition: attachment; filename="smime.p7m"
-- Content-Type: application/x-pkcs7-mime; smime-type=enveloped-data; name="smime.p7m"
-- Content-Transfer-Encoding: base64
--
-- MIICzwYJKoZIhvcNAQcDoIICwDCCArwCAQAxggF8MIIBeAIBADBgMEoxCzAJBgNVBAYTAlVTMRYw
-- FAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQDExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBY
-- MwISA9Nqgb1dH/XTDNeKzN1nR85iMA0GCSqGSIb3DQEBAQUABIIBAIQqPexjxWovgxwKV/r3HL/U
-- EP9Yozvz5hBeX5VvRZjKSi4FRw5wapElPK+4FB82hiAR9Mi3c16PvPSVkJv3l78Mv5uaaOs/OmUz
-- mIHFB6Z+l2E52BDmUVWJZTQ09vdWy6+NIRlg2R9Z1NkmZ4BZCJk6mHB/Yx03IaOxK8LnwieDMthM
-- SvxbhJnIOISN7k7ofs+/0vTXUpdQ+tlmwyVySMGQ6VMk+z4sqZJ2stacqCPtt/aiSwJ9p0OKmihf
-- 3KDJceXJtavIQeA97yz1LqPvle35mmd5sBhV9qQYdTV/KJ+YM5uEZ9BHYbvMJbADFHwKzhcEY3qA
-- 7T9acmEsb7NycOIwggE1BgkqhkiG9w0BBwEwFAYIKoZIhvcNAwcECERX/ZoHweSkgIIBEMmCMx49
-- zjVAnGqRaBbvzQT1hg0uQSxIJjxMxC+HSuM+eY9oSOsbrw4uIijHKH9NdOpeDsdRzg2z5EBM7AlP
-- Ht9DyPW5C2deV6RPX4F8gyExz+JUXrd+3Yb3AKTdpDkTWDmNCeO0r/YSqp518+mfU5hG8e336u51
-- HAM44FeknA8oThWsD/wUB1e8vzsatK4UXW/KSu/166V7z+VT86kd+IHa7t60U9Yp0ZXgcM5Pb5Ni
-- 69Qc5MKPzom2801H5UR/WjCgsxOIjOj49sKisjRy79skrJzxY5ZG05T0dKn6KC3TjRpIEEeOyhCd
-- Nm2Y7dcW8GLMepdhWay5vePmQxmvmhbAtBprIem14NcrYeG6D5wP

-- We have the body in bd
-- Construct the header and base64 body...
local sbEncryptedMime = chilkat.StringBuilder.new()

sbEncryptedMime:append_line("MIME-Version: 1.0", true)
sbEncryptedMime:append_line("Content-Disposition: attachment; filename=\"smime.p7m\"", true)
sbEncryptedMime:append_line("Content-Type: application/x-pkcs7-mime; smime-type=enveloped-data; name=\"smime.p7m\"", true)
sbEncryptedMime:append_line("Content-Transfer-Encoding: base64", true)
sbEncryptedMime:append_line("", true)
sbEncryptedMime:append_line(bd:get_encoded("base64_mime"), true)

-- Show the result.
print(sbEncryptedMime:get_as_string())

-- or save to a file..
success = sbEncryptedMime:write_file("qa_output/encryptedMime.txt", "utf-8", false)