You need to sign some short message and send the result to the GET request. Signing with the command
smime -sign -binary -otform PEM
The problem is that smime includes certificates for verification, with the result that the outgoing message itself is too long. IE cuts the GET string to 2048 characters, and the mechanism does not work in IE. What can be used other than smime to get a shorter string? PKCS # 7 format

    1 answer 1

    You can not include certificates in the same context, it has a parameter:

     smime -sign -nocerts -binary -outform PEM

    For even greater efficiency, I would have squeezed the whole thing somewhere like this:

     smime -sign -nocerts -binary -outform DER | xz | base64 | tr '+/' '-_' | tr -d '\n'

    (we get a usable string in the query)

    • with -nocerts string is shorter, but still longer than 2048 characters. In any case, thanks for the response, for all this time I have already managed to score a problem =) - user200141