Verify the Signature (Linux)

1. Verify the signature of decryptedsignedmessage.txt using the sender’s certificate for RSA

# openssl cms -engine pkcs11 -verify -in decryptedsignedmessage.txt - CAfile /localCA/newcerts/ca.cer -out originalmessage.txt

/localCA/newcerts/sender/SenderSignCertificate.cert

Figure 33: Openssl verify command output

2. Verify the signature of signedmessage.txt using the sender’s certificate for ECC

[root@Openssl-RHEL9 bin]# openssl cms -engine pkcs11 -verify -in signedmessage.txt -CAfile /localCA/newcerts/ca.cer -out originalmessage.txt /localCA/newcerts/sender/SenderSignCertificate.cert

Figure 34: Openssl verify command output

3. Open the originalmessage.txt and verify the message which you have typed in the message.txt

Figure 35: Content of original message file