commit 748cab7745186ec6c770fb4d47b0e8c9f213e6df
author Michael Brown <mcb30@ipxe.org> Wed Aug 28 16:09:55 2024 +0100
committer Michael Brown <mcb30@ipxe.org> Wed Aug 28 16:17:14 2024 +0100
tree c2a79df91cc7b69aec6423c3949a02f6262b64b0
parent b053ba19884415794504c1bcffa910f0295598f0

[crypto] Add cmsdetach script for detaching encrypted data from CMS messages

The openssl toolchain does not currently seem to support creating CMS
envelopedData or authEnvelopedData messages with detached encrypted
data.

Add a standalone tool "cmsdetach" that can be used to detach the
encrypted data from a CMS message.  For example:

  openssl cms -encrypt -binary -aes-256-gcm -recip client.crt \
              -in bootfile -outform DER -out bootfile.cms

  cmsdetach bootfile.cms --data bootfile.dat --envelope bootfile.env

Signed-off-by: Michael Brown <mcb30@ipxe.org>