PKCS7_verify

Verify a PKCS#7 signedData structure and optionally write the content.

Synopsis

Declared in <openssl/pkcs7.h>

int
PKCS7_verify(
    PKCS7* p7,
    stack_st_X509* certs,
    X509_STORE* store,
    BIO* indata,
    BIO* out,
    int flags);

Return Value

1 on success, or 0 on failure.

Parameters

NameDescription
p7Signed PKCS#7 object to verify.
certsOptional untrusted certificates that may complete signer chains.
storeTrusted certificate store used for chain verification.
indataBIO supplying detached content when the signature does not embed it.
outOptional BIO that receives the verified content.
flagsPKCS7_* verification flags (for example PKCS7_NOVERIFY, PKCS7_DETACHED).