Module cms
cms module for lua-openssl binding
The Cryptographic Message Syntax (CMS) is the IETF’s standard for cryptographically protected messages.
It can be used to digitally sign, digest, authenticate or encrypt any form of digital data. CMS is based on the syntax of PKCS#7, which in turn is based on the Privacy-Enhanced Mail standard. The newest version of CMS is specified in RFC 5652.
The architecture of CMS is built around certificate-based key management, such as the profile defined by the PKIX working group. CMS is used as the key cryptographic component of many other cryptographic standards, such as S/MIME, PKCS #12 and the RFC 3161 Digital timestamping protocol.
OpenSSL is open source software that can encrypt, decrypt, sign and verify, compress and uncompress CMS documents.
CMS are based on apps/cms.c from the OpenSSL dist, so for more information, you better see the documentation for OpenSSL. cms api need flags, not support “detached”, “nodetached”, “text”, “nointern”, “noverify”, “nochain”, “nocerts”, “noattr”, “binary”, “nosigs”
OpenSSL not give full document about CMS api, so some function will be dangers.
Usage:
cms = require('openssl').cms
Functions
Class cms
| cms:cms () | get type of cms object |
| cms:detached (cmsbio) | get detached state |
| cms:detached (detach) | set detached state |
| cms:content () | get content of cms object |
Functions
- read (input[, format='auto'[, content=nil]])
-
read cms object from input bio or string
Parameters:
- input bio or string
- format string , support ‘auto’,‘smime’,‘der’,‘pem’ auto will only try ‘der’ or ‘pem’ (default 'auto')
- content bio , only used when format is ‘smime’ (default nil)
Returns:
- export (cms[, data[, flags=0[, format='smime']]])
-
write cms object to bio object
Parameters:
Returns:
- string
- nil, and followed by error message
- create ()
-
create empty cms object
Returns:
- create (input[, flags=0])
-
create cms object from string or bio object
Parameters:
- input bio
- flags number (default 0)
Returns:
- compress (input, alg[, flags=0])
-
create compress cms object
Parameters:
- input bio
- alg string , zlib or rle
- flags number (default 0)
Returns:
- uncompress (cms, input[, flags=0])
-
uncompress cms object
Parameters:
- cms cms
- input bio
- flags number (default 0)
Returns:
- sign (signer, pkey, input_data[, certs[, flags=0]])
-
make signed cms object
Parameters:
- signer x509 cert
- pkey evp_pkey
- input_data bio
- certs stack_of_x509 include in the CMS (optional)
- flags number (default 0)
Returns:
-
cms
object
- verify (signed, signers[, store[, message[, flags=0]]])
-
verfiy signed cms object
Parameters:
- signed cms
- signers stack_of_x509
- store x509_store trust certificates store (optional)
- message bio (optional)
- flags number (default 0)
Returns:
- string content
- nil, and followed by error message
- EncryptedData_encrypt (input, key[, cipher_alg='des-ede3-cbc'[, flags=0]])
-
create enryptdata cms
Parameters:
- input bio or string
- key strig
- cipher_alg string or evp_cipher (default 'des-ede3-cbc')
- flags number (default 0)
Returns:
- cms object
- nil, followed by error message
- EncryptedData_decrypt (encrypted, key[, dcont[, flags=0]])
-
decrypt encryptdata cms
Parameters:
Returns:
-
boolean
result
- digest_create (input[, digest_alg='sha256'[, flags=0]])
-
create digest cms
Parameters:
Returns:
- cms object
- nil, followed by error message
- digest_verify (digested[, dcont[, flags=0]])
-
verify digest cms
Parameters:
Returns:
-
boolean
result
- encrypt (recipt, input[, cipher_alg='des-ede3-cbc'[, flags=0[, options=nil]]])
-
encrypt with recipt certs
Parameters:
- recipt stack_of_x509 certs
- input bio or string
- cipher_alg string or evp_cipher (default 'des-ede3-cbc')
- flags number (default 0)
- options table , support key, keyid, password fields, and values must be string type (default nil)
Returns:
- decrypt (message, pkey, recipt[, dcount[, flags=0[, options=nil]]])
-
decrypt cms message
Parameters:
- message cms
- pkey evp_pkey
- recipt x509
- dcount bio output object (optional)
- flags number (default 0)
- options table may have key, keyid, password field, and values must be string type (default nil)
Returns:
- string decrypted message
- nil, and followed by error message
Class cms
- cms:cms ()
-
get type of cms object
Returns:
-
asn1_object
type of cms
- cms:detached (cmsbio)
-
get detached state
Parameters:
- cmsbio bio bio returned by datainit
Returns:
- boolean true for detached
- boolean true for success, others value will followed by error message
- cms:detached (detach)
-
set detached state
Parameters:
- detach boolean
Returns:
-
boolean
for success, others value will followed by error message
- cms:content ()
-
get content of cms object
Returns:
-
string
content, if have no content will return nil