6 okt 2010 kl. 02:49 skrev Michael Wood: >> hx509_cms_create_signed function and >> make sigctx.cmsidflag always equal CMS_ID_NAME) I think this failed because you are looking at enveloped data and not signed data. try patching fill_CMSIdentifier() in hx509_cms_envelope_1() instead. Love