Signing a file with openssl for CAPICOM?

Question

OpenSSL

Greetings! Please tell me how to sign a binary file using openssl for verification in CAPICOM ?
I do this:
openssl smime -sign -binary -in data.bin -signer demo.pem -inkey demo.key -out sign.txt -outform PEM
When checking CAPICOM, it says "The signature is not correct"

Answer 1

The solution turned out to be this: It was not me who found the solution, but Evgeny Maksin . Unfortunately, he does not yet have a nickname on Habré.
iconv -f utf-8 -t utf-16le data.bin > data-utf16le.bin
openssl smime -sign -binary -noattr -in data-utf16le.bin -signer demo.pem -inkey demo.key -out sign.txt -outform PEM


Answer 2

I’m afraid it’s difficult to give you an exact answer - you need to understand deeply, or skinte an example of how to check it yourself

Answer 3

Do you want to register your crypto-provider? If my sclerosis does not change me, then I need a trusted certificate. And not every codesigning will do. And yet, this check option can somehow be disabled.
But that's about it. Might lead you on a trail.