Verify a PKCS#7 signedData structure and optionally write the content.

Synopsis

Declared in <openssl/pkcs7.h>

int
PKCS7_verify(
    PKCS7* p7,
    stack_st_X509* certs,
    X509_STORE* store,
    BIO* indata,
    BIO* out,
    int flags);

Return Value

1 on success, or 0 on failure.

Parameters

Name

Description

p7

Signed PKCS#7 object to verify.

certs

Optional untrusted certificates that may complete signer chains.

store

Trusted certificate store used for chain verification.

indata

BIO supplying detached content when the signature does not embed it.

out

Optional BIO that receives the verified content.

flags

PKCS7_* verification flags (for example PKCS7_NOVERIFY, PKCS7_DETACHED).

Created with MrDocs