Detachable PKCS7 signature - how to do it in Cryptopro?

Question

PHP

Hello, I have a site written by myself in PHP. You need to sign the XML with a detached PKCS7 signature and send it via the API. Now I have reached such a command, but still the file is considered not to meet the criteria for a detached PKCS7 signature (without details from the API and its developers).

sudo /opt/cprocsp/bin/amd64/cryptcp -sign -detached -dn <пользователь>  ~/config.xml ~/config.sgn -pin 312

Google can't help.
Maybe someone knows - how to sign the document correctly in this case?

Answer 1

I sign like this:
But I have a signature attached. You probably need to add the -detached option.
And look at this topic: https://www.cryptopro.ru/forum2/default.aspx?g=pos...
Perhaps there is something useful there too.