Thanks to all who replied. I ended up implementing my own ASN1
encoding/decoding layer, just the bare minimum for the subset of PKCS7
that I needed. I piggybacked on OpenSSL for some of it, but didn't use
any other third party libraries.

If anyone else should need to go this route, this was a useful resource
for me:

__________________________________________________ ____________________
OpenSSL Project
Development Mailing List
Automated List Manager