NAME

CMS_verify_receipt — verify a CMS signed receipt

SYNOPSIS

#include <openssl/cms.h>

int
CMS_verify_receipt(CMS_ContentInfo *rcms, CMS_ContentInfo *ocms, STACK_OF(X509) *certs, X509_STORE *store, unsigned int flags);

DESCRIPTION

CMS_verify_receipt() verifies a CMS signed receipt. rcms is the signed receipt to verify. ocms is the original SignedData structure containing the receipt request. certs is a set of certificates in which to search for the signing certificate. store is a trusted certificate store (used for chain verification).

This functions behaves in a similar way to CMS_verify(3) except that the flags values CMS_DETACHED, CMS_BINARY, CMS_TEXT, and CMS_STREAM are not supported since they do not make sense in the context of signed receipts.

RETURN VALUES

CMS_verify_receipt() returns 1 for a successful verification or 0 if an error occurred.

The error can be obtained from ERR_get_error(3).

SEE ALSO

CMS_ContentInfo_new(3), CMS_get1_ReceiptRequest(3), CMS_sign_receipt(3), CMS_verify(3)

STANDARDS

RFC 2634: Enhanced Security Services for S/MIME, section 2.8: Receipt Syntax

HISTORY

CMS_verify_receipt() first appeared in OpenSSL 0.9.8h and has been available since OpenBSD 6.7.