Using OpenSSL to Sign and Encrypt the File (Windows)

1. Create a text file message.txt under C:\localCA directory and enter any value in it

Welcome to Utimaco !!!

2. Sign the message.txt file using the sender’s private key

C:\openssl cms -engine pkcs11 -sign -in C:\localCA\message.txt -signer C:\localCA\newcerts\sender\SenderSignedCertificate.cer -inkey "pkcs11:token=SSLCert;object=SenderKey" -keyform engine -out C:\localCA\signedmessage.txt

Figure 50: Openssl sign command output

Here SSLCert is the token label and SenderKey is the key on the HSM. Provide Cryptouser PIN when prompted.

3. Encrypt the signedmessage.txt using the receiver’s public key, supplied with the receiver’s certificate

C:\OpenSSL-Win64\bin>openssl cms -engine pkcs11 -encrypt -in C:\localCA\signedmessage.txt -out C:\localCA\encryptedsignedmessage.txt C:\localCA\newcerts\receiver\receiverNew.cer

Figure 51: Openssl encrypt command output