NAME
CMS_sign_receipt —
create a CMS signed receipt
SYNOPSIS
#include
<openssl/cms.h>
CMS_ContentInfo *
CMS_sign_receipt(CMS_SignerInfo
*si, X509 *signcert, EVP_PKEY
*pkey, STACK_OF(X509) *certs,
unsigned int flags);
DESCRIPTION
CMS_sign_receipt()
creates a new CMS SignedData structure containing a
signed Receipt as its embedded content.
si is the SignerInfo structure
containing the signed receipt request. signcert is the
certificate to sign with, pkey is the corresponding
private key. certs is an optional additional set of
certificates to include in the CMS structure (for example any intermediate
CAs in the chain).
This functions behaves in a similar way to
CMS_sign(3) except that the flags values
CMS_DETACHED, CMS_BINARY,
CMS_NOATTR, CMS_TEXT, and
CMS_STREAM are not supported since they do not make
sense in the context of signed receipts.
RETURN VALUES
CMS_sign_receipt() returns either a valid
CMS_ContentInfo structure or
NULL if an error occurred. The error can be obtained
from
ERR_get_error(3).
SEE ALSO
CMS_ContentInfo_new(3), CMS_get1_ReceiptRequest(3), CMS_sign(3), CMS_verify_receipt(3)
STANDARDS
RFC 2634: Enhanced Security Services for S/MIME, section 2.8: Receipt Syntax
HISTORY
CMS_sign_receipt() first appeared in
OpenSSL 0.9.8h and has been available since OpenBSD
6.7.