Hello !

1/ I've read the FAQs and did not find an answer to my question
2/ thanks for reading this ;)

As I was taking a walk through the "pk7_mime.c" code, 
I stepped against a piece of code I could'nt really understand, 
actually not the code itselfs, but its purpose.

in the PKCS7_verify function: 

        p7bio=PKCS7_dataInit(p7,tmpin);

        (...)

        /* We now have to 'read' from p7bio to calculate digests etc. */
        for (;;)
        {
                i=BIO_read(p7bio,buf,sizeof(buf));
                if (i <= 0) break;
                if (tmpout) BIO_write(tmpout, buf, i);
        }

        (...)

        si=sk_PKCS7_SIGNER_INFO_value(sinfos,i);
        signer = sk_X509_value (signers, i);
        j=PKCS7_signatureVerify(p7bio, p7, si, signer);

"We now have to 'read' from p7bio to calculate digests etc." -> Why so ? 

Why do we have to read the content of BIO *p7bio and write it to BIO *tmpout 
to get PKCS7_signatureVerify to work properly ?

I hope you can understand my question ;)


thanks in advance and have a nice day !
Valéry.
-- 
View this message in context: 
http://www.nabble.com/PKCS7_verify-mystery-%3A%29-tf1999114.html#a5488203
Sent from the OpenSSL - User forum at Nabble.com.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to