Verify a CMS SignedData structure and return a BIO of the signed content on success.

Synopsis

Declared in <openssl/cms.h>

BIO*
CMS_SignedData_verify(
    CMS_SignedData* sd,
    BIO* detached_data,
    stack_st_X509* scerts,
    X509_STORE* store,
    stack_st_X509* extra,
    stack_st_X509_CRL* crls,
    unsigned int flags,
    OSSL_LIB_CTX* libctx,
    char const* propq);

Return Value

Memory BIO containing the content on success, or NULL on failure.

Parameters

Name

Description

sd

SignedData to verify (not freed by this call).

detached_data

Detached content BIO, or NULL if content is encapsulated.

scerts

Optional stack of signer certificates, or NULL.

store

Trusted certificate store for chain verification, or NULL if not required by flags.

extra

Optional extra certificates to add for chain building, or NULL.

crls

Optional CRLs to add for verification, or NULL.

flags

CMS verify flags (same meaning as CMS_verify()).

libctx

Library context for algorithm fetches, or NULL for the default.

propq

Property query string, or NULL.

Created with MrDocs