[ruby-core:58277] Openssl: included is a method for retrieving signed data

Good day, and lots of thanks for all the work you are doing on Ruby. I
write to this list because Openssl is included in the MRI sources, and
I could not come across any reference to a way to contact the 'OpenSSL
for Ruby' team members that are mentioned in the source.

Let me say at the outset that I have practically no experience on
Openssl. I only have to use it marginally for a project and, having
seen what's inside, I will WANT to keep my involvement as marginal as
I can.

After much sweat I was able to generate keys and certificates the way
I wanted them. I then came to my real need, that of signing arbitrary
blocks of data. I easily found the OpenSSL::PKCS7::sign method,
obtained my nice PEM files, and verified that their size depended on
the size of the original object - that meant that the object was
included in the file. So far so good.

I then found info on the net about how to verify the
signature. Excellent!

My next need was to extract the data that I had orignally passed to
the #sign method.

I spent a good day searching for a ready-made solution. No way. Maybe
I did not search well enough. Nevertheless, this morning I set myself
the irrevocable order to find a solution, no matter how hard it would
be. This resulted in adding a function to the ext/openssl/ossl_pkcs7.c
file. The function is this one:

--8<----8<----8<----8<----8<----8<----8<----8<----8<----8<----8<----8<--
static VALUE get_signed_data(VALUE self)
{
  PKCS7 *p7;
  GetPKCS7(self,p7);

  if(!PKCS7_type_is_signed(p7))
    return Qnil;

  return asn1str_to_str(p7->d.sign->contents->d.data);
}
--8<----8<----8<----8<----8<----8<----8<----8<----8<----8<----8<----8<--

This line is needed later in the source to have my code invoked as
#signed_data from Ruby:

--8<----8<----8<----8<----8<----8<----8<----8<----8<----8<----8<----8<--

rb_define_method(cPKCS7,"signed_data",get_signed_data,0);

--8<----8<----8<----8<----8<----8<----8<----8<----8<----8<----8<----8<--

What I cannot do is adapt to naming conventions, indentations, and
whatnot, or learn how to submit an official path. I try to maintain a
living while keeping as untainted as possible from the 21st century.

If someone who's reading, and who is a knowledgeable patch submitter,
wishes to, s/he is welcome to insert the above code (possibly fixing
it as much as needed). Otherwise, this mail will remain in the many
archives, and whoever has the same problem I had will have at least a
little help.

Best

Carlo

-- 
  *         Se la Strada e la sua Virtu' non fossero state messe da parte,
* K * Carlo E. Prelz - [e-mail]             che bisogno ci sarebbe
  *               di parlare tanto di amore e di rettitudine? (Chuang-Tzu)