<p>Anyone around who signed mails with go?</p>
<p>I tried github.com/fullsailor/pkcs7, but my mail client can't verify the result. Comparing the ASN1 structure of the result with a working output from openssl shows significant differences, like including the signed text.</p>
<p>And github.com/nullboundary/gocertsigner is a cgo lib which won't let me cross compile and also panics [on FreeBSD] (cgo argument has Go pointer to Go pointer).</p>
<hr/>**评论：**<br/><br/>egonelbre: <pre><p><a href="http://play.golang.org/p/TyLE8UFQGc" rel="nofollow">Shelling out to OpenSSL/LibreSSL</a> will be the easiest solution. Getting anything else properly working across platforms will be several magnitudes of more effort.</p></pre>R2A2: <pre><p>[alternative to S/MIME]: have you considered using openpgp to sign mails? </p>
<p>There's a pure-go implementation by google themselves: <a href="https://godoc.org/golang.org/x/crypto/openpgp" rel="nofollow">https://godoc.org/golang.org/x/crypto/openpgp</a> </p>
<p>I haven't tried it, but it looks pretty well supported:</p>
<p><a href="https://godoc.org/golang.org/x/crypto/openpgp#NewEntity" rel="nofollow">https://godoc.org/golang.org/x/crypto/openpgp#NewEntity</a> </p>
<p>then:</p>
<p><a href="https://godoc.org/golang.org/x/crypto/openpgp#Entity.SignIdentity" rel="nofollow">https://godoc.org/golang.org/x/crypto/openpgp#Entity.SignIdentity</a></p>
<p><em>Note that mail clients tend to need a plugin for openpgp</em></p></pre>R2A2: <pre><p>BTW here's the Thunderbird docs for signing/encrypting via PGP <a href="https://support.mozilla.org/en-US/kb/digitally-signing-and-encrypting-messages" rel="nofollow">https://support.mozilla.org/en-US/kb/digitally-signing-and-encrypting-messages</a></p></pre>
