Victor Vrantchan

hmm @bjvetter, I took the request from your http.log and passed it to `pkcs7.Parse`, which is where the ber2der error would come from, and It parses just fine for me....

Note that the `master` branch of https://github.com/groob/pkcs7 is over 3 years old. If you're using this project make sure you're validating the versions of transitive dependencies correctly (TL;DR use `make...

If you dump the request out after reading it for debugging you cannot pass it along to be read a second time. Reading it zeroes it out. You would have...

As I already mentioned the head of this project depends on a branch in the groob/pkcs7 repo. The master version of that branch is 3 years old. Using the makefile...

your call to Parse is under a conditional. What if you remove the conditional, is it still always happy?

Ah I see. Parse is called twice, and we're not looking at DecryptPKIEnvelope, which is where the message is failing. Any chance you could store the `[]byte` which is being...

fwiw asn1parse fails too ``` cat decryptpkienvelope.dat |openssl asn1parse -inform DER Error in encoding 4626351724:error:0DFFF09B:asn1 encoding routines:CRYPTO_internal:too long:/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-22.250.1/libressl-2.6/crypto/asn1/asn1_lib.c:143: ```

And yes, i can reproduce with Go. Now the question is, does the go pkcs7 library fail to cut off the data as needed, or is the client encoding it...

making some progress with the payload. Somehow the full size gets converted to 1000 during a asn1.Unmarshal call.

I tested this patch here, and it appears to work (just the part inside the `if compound.IsCompound` conditional ) https://github.com/innoq/pkcs7/commit/aa5eda5d2b3d6874f6594067f55e2750015d8f16 I would have to incorporate it into my fork before...