* writer.c (ksba_writer_write_octet_string): Correctly write undefined length octet strings. * cms.c (ct_build_signed_data): Write an end tag for non-detached sigs. (build_enveloped_data_header): Fix doc; it is an explicit octect string. (read_encrypted_cont): Read constructed octet strings.