<HTML ><HEAD ><TITLE >Securing Files</TITLE ><META NAME="GENERATOR" CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+ "><LINK REL="HOME" TITLE="SSL Certificates HOWTO" HREF="index.html"><LINK REL="UP" TITLE="Using Certificates in Applications" HREF="c244.html"><LINK REL="PREVIOUS" TITLE="Securing E-mails." HREF="x282.html"><LINK REL="NEXT" TITLE="Securing Code" HREF="x330.html"></HEAD ><BODY CLASS="SECT1" BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#0000FF" VLINK="#840084" ALINK="#0000FF" ><DIV CLASS="NAVHEADER" ><TABLE SUMMARY="Header navigation table" WIDTH="100%" BORDER="0" CELLPADDING="0" CELLSPACING="0" ><TR ><TH COLSPAN="3" ALIGN="center" >SSL Certificates HOWTO</TH ></TR ><TR ><TD WIDTH="10%" ALIGN="left" VALIGN="bottom" ><A HREF="x282.html" ACCESSKEY="P" >Prev</A ></TD ><TD WIDTH="80%" ALIGN="center" VALIGN="bottom" >Chapter 3. Using Certificates in Applications</TD ><TD WIDTH="10%" ALIGN="right" VALIGN="bottom" ><A HREF="x330.html" ACCESSKEY="N" >Next</A ></TD ></TR ></TABLE ><HR ALIGN="LEFT" WIDTH="100%"></DIV ><DIV CLASS="SECT1" ><H1 CLASS="SECT1" ><A NAME="AEN317">3.3. Securing Files</H1 ><DIV CLASS="SECT2" ><H2 CLASS="SECT2" ><A NAME="AEN319">3.3.1. WinCrypt</H2 ><P ><A HREF="http://www.wincrypt.de/" TARGET="_top" >WinCrypt</A > uses the Microsoft crypto API to encrypt and /or sign files. It will optionnaly create a zip archive of the selected files/folders before signing. It provides a front end to the certificate store, allowing the user to browse the installed certificate store, install and delete certificates and choose the certificate to use for WinCrypt signing.</P ><P >The procedure for creating a certificate is the same as for Microsoft Outlook. Indeed it uses the same certificate store, you can point WinCrypt to a certificate previously installed for Outlook and vice-versa.</P ><P >It is possible to verify a WinCrypt signed file filename.sgn using:</P ><TABLE BORDER="0" BGCOLOR="#E0E0E0" WIDTH="100%" ><TR ><TD ><FONT COLOR="#000000" ><PRE CLASS="PROGRAMLISTING" >openssl smime -verify -inform der -in filename.sgn -CAfile cacert.crt</PRE ></FONT ></TD ></TR ></TABLE ><P >To sign a file with openSSL in a compatible format use:</P ><TABLE BORDER="0" BGCOLOR="#E0E0E0" WIDTH="100%" ><TR ><TD ><FONT COLOR="#000000" ><PRE CLASS="PROGRAMLISTING" >openssl smime -sign -outform der -nodetach -out filename.sgn \ -signer certificate.pem -in filename.txt</PRE ></FONT ></TD ></TR ></TABLE ><P >To view the structure of a signed file:</P ><TABLE BORDER="0" BGCOLOR="#E0E0E0" WIDTH="100%" ><TR ><TD ><FONT COLOR="#000000" ><PRE CLASS="PROGRAMLISTING" >openssl asn1parse -inform der -in filename.sgn</PRE ></FONT ></TD ></TR ></TABLE ></DIV ></DIV ><DIV CLASS="NAVFOOTER" ><HR ALIGN="LEFT" WIDTH="100%"><TABLE SUMMARY="Footer navigation table" WIDTH="100%" BORDER="0" CELLPADDING="0" CELLSPACING="0" ><TR ><TD WIDTH="33%" ALIGN="left" VALIGN="top" ><A HREF="x282.html" ACCESSKEY="P" >Prev</A ></TD ><TD WIDTH="34%" ALIGN="center" VALIGN="top" ><A HREF="index.html" ACCESSKEY="H" >Home</A ></TD ><TD WIDTH="33%" ALIGN="right" VALIGN="top" ><A HREF="x330.html" ACCESSKEY="N" >Next</A ></TD ></TR ><TR ><TD WIDTH="33%" ALIGN="left" VALIGN="top" >Securing E-mails.</TD ><TD WIDTH="34%" ALIGN="center" VALIGN="top" ><A HREF="c244.html" ACCESSKEY="U" >Up</A ></TD ><TD WIDTH="33%" ALIGN="right" VALIGN="top" >Securing Code</TD ></TR ></TABLE ></DIV ></BODY ></HTML >