|PKCS7_FINAL(3)||Library Functions Manual||PKCS7_FINAL(3)|
PKCS7_final — read
data from a BIO into a ContentInfo object
BIO *data, int flags);
reads data and puts it into the appropriate content
field of p7 itself or of its appropriate substructure,
which can be of type SignedData,
DigestedData, or arbitrary data. The
explains which field exactly the data is put into.
The following flags are recognized:
PKCS7_BINARYis also set.
is most commonly used to finalize a p7 object returned
from a call to PKCS7_sign(3) that
used flags including
PKCS7_STREAM. With these flags,
PKCS7_sign(3) ignores its
data argument. The partial p7
object returned can then be customized, for example setting up multiple
signers or non-default digest algorithms with
starts by calling
using it to finalize a p7 object containing
DigestedData, or arbitrary data requires the setup
described in the
PKCS7_dataInit(3) manual. For
SignedData and EnvelopedData,
such manual setup is also feasible, but it is more easily performed with
PKCS7_final() returns 1 on success or 0 on
Possible reasons for failure include:
Signers lacking private keys do not cause failure but are silently skipped.
PKCS7_final() first appeared in OpenSSL
1.0.0 and has been available since OpenBSD 4.9.
This function does not support EncryptedData.
|June 4, 2020||OpenBSD-current|