NAME

d2i_X509_SIG, i2d_X509_SIG, d2i_PKCS8_bio, i2d_PKCS8_bio, d2i_PKCS8_fp, i2d_PKCS8_fp — decode and encode PKCS#7 digest information

SYNOPSIS

#include <openssl/x509.h> X509_SIG *
d2i_X509_SIG(X509_SIG **val_out, unsigned char **der_in, long length); int
i2d_X509_SIG(X509_SIG *val_in, unsigned char **der_out); X509_SIG *
d2i_PKCS8_bio(BIO *in_bio, X509_SIG **val_out); int
i2d_PKCS8_bio(BIO *out_bio, X509_SIG *val_in); X509_SIG *
d2i_PKCS8_fp(FILE *in_fp, X509_SIG **val_out); int
i2d_PKCS8_fp(FILE *out_fp, X509_SIG *val_in);

DESCRIPTION

d2i_X509_SIG() and i2d_X509_SIG() decode and encode an ASN.1 DigestInfo structure defined in RFC 2315 section 9.4 and equivalently in RFC 8017 section 9.2. For details about the semantics, examples, caveats, and bugs, see ASN1_item_d2i(3). d2i_PKCS8_bio() and d2i_PKCS8_fp() are similar to d2i_X509_SIG() except that they read from a BIO or FILE pointer. i2d_PKCS8_bio() and i2d_PKCS8_fp() are similar to i2d_X509_SIG() except that they write to a BIO or FILE pointer.

RETURN VALUES

d2i_X509_SIG(), d2i_PKCS8_bio(), and d2i_PKCS8_fp() return a X509_SIG object or NULL if an error occurs. i2d_X509_SIG() returns the number of bytes successfully encoded or a negative value if an error occurs. i2d_PKCS8_bio() and i2d_PKCS8_fp() return 1 for success or 0 if an error occurs.

SEE ALSO

ASN1_item_d2i(3), PKCS7_new(3), RSA_sign(3), X509_SIG_new(3)

STANDARDS

RFC 2315: PKCS #7: Cryptographic Message Syntax, section 9: Signed-data content type RFC 8017: PKCS #1: RSA Cryptography Specifications, section 9: Encoding Methods for Signatures

HISTORY

d2i_X509_SIG() and i2d_X509_SIG() first appeared in SSLeay 0.5.1 and have been available since OpenBSD 2.4. d2i_PKCS8_bio(), i2d_PKCS8_bio(), d2i_PKCS8_fp(), and i2d_PKCS8_fp() first appeared in OpenSSL 0.9.4 and have been available since OpenBSD 2.6.

BUGS

d2i_PKCS8_bio(), i2d_PKCS8_bio(), d2i_PKCS8_fp(), and i2d_PKCS8_fp() are severely misnamed and should have been called “d2i_X509_SIG_bio” and so on. Or arguably, the X509_SIG object is misnamed itself, considering that it represents DigestInfo from PKCS#7 and PKCS#1. Then again, calling it “PKCS8” instead clearly isn't an improvement. Either way, these names just don't fit.