(Chilkat2-Python) Duplicate openssl smime -encrypt -binary -aes-256-cbc -in some_file.dat -out some_file.dat.enc -outform DER cert.crt

Demonstrates how to encrypt to binary DER using 256-bit AES (CBC mode) as the underlying symmetric encryption algorithm, to produce PKCS7 enveloped data (binary DER).

Duplicates the following openssl command:

openssl smime -encrypt -binary -aes-256-cbc -in some_file.dat -out some_file.dat.enc -outform DER cert.crt

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

cert = chilkat2.Cert()
success = cert.LoadFromFile("qa_data/openssl/EE.cer")
if (success == False):
    print(cert.LastErrorText)
    sys.exit()

bd = chilkat2.BinData()
success = bd.LoadFile("qa_data/openssl/hello.txt")
# Assuming success..

crypt = chilkat2.Crypt2()
success = crypt.SetEncryptCert(cert)
if (success == False):
    print(crypt.LastErrorText)
    sys.exit()

crypt.CryptAlgorithm = "PKI"

# Indicate the underlying symmetric encryption to be used:
crypt.Pkcs7CryptAlg = "aes"
crypt.KeyLength = 256
crypt.CipherMode = "cbc"

success = crypt.CkEncryptFile("qa_data/openssl/hello.txt","qa_output/hello.txt.enc")
if (success == False):
    print(crypt.LastErrorText)
    sys.exit()

print("Success.")