OPENSSL-SMIME(1ssl) OpenSSL OPENSSL-SMIME(1ssl) openssl-smime - S/MIME openssl smime [-help] [-encrypt] [-decrypt] [-sign] [-resign] [-verify] [-pk7out] [-binary] [-crlfeol] [-cipher] [-in ] [-certfile ] [-signer ] [-nointern] [-noverify] [-nochain] [-nosigs] [-nocerts] [-noattr] [-nodetach] [-nosmimecap] [-recip ] [-inform DER|PEM|SMIME] [-outform DER|PEM|SMIME] [-keyform DER|PEM|P12|ENGINE] [-passin ] [-inkey _|uri] [-out ] [-content ] [-to ] [-from ] [-subject ] [-text] [-indef] [-noindef] [-stream] [-md ] [-CAfile ] [-no-CAfile] [-CApath ] [-no-CApath] [-CAstore uri] [-no-CAstore] [-engine ] [-rand ] [-writerand ] [-allow_proxy_certs] [-attime _] [-no_check_time] [-check_ss_sig] [-crl_check] [-crl_check_all] [-explicit_policy] [-extended_crl] [-ignore_critical] [-inhibit_any] [-inhibit_map] [-partial_chain] [-policy ] [-policy_check] [-policy_print] [-purpose ] [-suiteB_128] [-suiteB_128_only] [-suiteB_192] [-trusted_first] [-no_alt_chains] [-use_deltas] [-auth_level ] [-verify_depth ] [-verify_email ] [-verify_hostname _] [-verify_ip ip] [-verify_name ] [-x509_strict] [-issuer_checks] [-provider ] [-provider-path ] [-provparam [:]=] [-propquery propq] [-config _] _ ... S/MIME. S/MIME. : -encrypt -decrypt -sign -resign -verify -pk7out. . . -help . -encrypt . . MIME. . -decrypt . MIME . . -sign . . MIME . -resign : . -verify . . . -pk7out PKCS#7 PEM. -in _ MIME . -out _ MIME . -inform DER|PEM|SMIME PKCS#7 (S/MIME) ( ) SMIME. openssl-format-options(1) . -outform DER|PEM|SMIME PKCS#7 (S/MIME) ( ) SMIME. openssl-format-options(1) . -keyform DER|PEM|P12|ENGINE . openssl-format-options(1) . -stream -indef -stream -indef / . . S/MIME SMIME . -noindef / . . . -content _ -verify. PKCS#7 . S/MIME MIME /. -text MIME (text/plain) . : MIME text/plain . -md digest . ( SHA1). - . DES (56 ) - -des triple DES (168 ) - -des3 AES (256 ) - -aes256. ( EVP_get_cipherbyname()) -aes-128-cbc. openssl-enc(1) OpenSSL . AES-256-CBC . -encrypt. -nointern ( ) . -certfile . (CAs) . -noverify . -nochain . -nosigs . -nocerts . . ( -certfile ). -noattr . . -nodetach . S/MIME. MIME multipart/signed. -nosmimecap SMIMECapabilities. -binary "" CR LF : S/MIME. . MIME. -crlfeol LF . CRLF . -certfile . . . PEM DER PKCS#12. -signer . . -recip . . -inkey _|_ . . -recip -signer. . -passin . arg openssl-passphrase-options(1). -to -from -subject . . S/MIME From:. -allow_proxy_certs -attime -no_check_time -check_ss_sig -crl_check -crl_check_all -explicit_policy -extended_crl -ignore_critical -inhibit_any -inhibit_map -no_alt_chains -partial_chain -policy -policy_check -policy_print -purpose -suiteB_128 -suiteB_128_only -suiteB_192 -trusted_first -use_deltas -auth_level -verify_depth -verify_email -verify_hostname -verify_ip -verify_name -x509_strict -issuer_checks . " " openssl-verification-options(1) . . -CAfile -no-CAfile -CApath -no-CApath -CAstore _ -no-CAstore "Trusted Certificate Options" openssl-verification-options(1) . -engine id " " openssl(1). . -rand -writerand " " openssl(1) . -provider -provider-path -provparam [:]= -propquery propq " " openssl(1) provider(7) property(7). -config _ "Configuration Option" openssl(1). recipcert ... . MIME . . sendmail . MIME S/MIME ( ). -text . " " . : . . S/MIME . "" . -encrypt -decrypt S/MIME. PKCS#7 : PKCS#7 . -resign . . -stream -indef / . BER DER. -encrypt -sign . -sign PKCS#7 DER. 0 . 1 . 2 . 3 PKCS#7 MIME. 4 . 5 . : openssl smime -sign -in message.txt -text -out mail.msg \ -signer mycert.pem : openssl smime -sign -in message.txt -text -out mail.msg -nodetach \ -signer mycert.pem : openssl smime -sign -in in.txt -text -out mail.msg \ -signer mycert.pem -inkey mykey.pem -certfile mycerts.pem : openssl smime -sign -in message.txt -text -out mail.msg \ -signer mycert.pem -signer othercert.pem sendmail : openssl smime -sign -in in.txt -text -signer mycert.pem \ -from steve@openssl.org -to someone@somewhere \ -subject "Signed message" | sendmail someone@somewhere : openssl smime -verify -in mail.msg -signer user.pem -out signedtext.txt triple DES: openssl smime -encrypt -in in.txt -out mail.msg -from steve@openssl.org \ -to someone@somewhere -subject "Encrypted message" \ -des3 user.pem : openssl smime -sign -in ml.txt -signer my.pem -text \ | openssl smime -encrypt -out mail.msg \ -from steve@openssl.org -to someone@somewhere \ -subject "Signed and Encrypted message" -des3 user.pem : -text MIME. : openssl smime -decrypt -in mail.msg -recip mycert.pem -inkey key.pem (Netscape) PKCS#7 . base64 : -----BEGIN PKCS7----- -----END PKCS7----- : openssl smime -verify -inform PEM -in signature.pem -content content.txt base64 : openssl smime -verify -inform DER -in signature.der -content content.txt Camellia 128 : openssl smime -encrypt -in plain.txt -camellia128 -out mail.msg cert.pem : openssl smime -resign -in mail.msg -signer newsign.pem -out mail2.msg MIME : . : . . . SMIMECapabilities. . . . S/MIME v2 S/MIME v3 . ossl_store-file(7) 3DES AES-256 OpenSSL 3.5. -signer -resign OpenSSL 1.0.0 -no_alt_chains OpenSSL 1.1.0. -engine OpenSSL 3.0. 2000-2025 OpenSSL. . Apache 2.0 ( ""). . LICENSE . 3 . . : . 3.6.2 7 2026 OPENSSL-SMIME(1ssl)