NAME

ASN1_item_verify — signature verification for ASN.1 values

SYNOPSIS

#include <openssl/x509.h>

int
ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *algor1, ASN1_BIT_STRING *sig_in, void *val_in, EVP_PKEY *pkey);

DESCRIPTION

ASN1_item_verify() assumes that val_in is an ASN1_VALUE of the type specified by it, encodes it into DER format by calling ASN1_item_i2d(3), and verifies in a way similar to EVP_DigestVerify(3) that sig_in contains a valid signature of the resulting byte array, a signature that was created with the signature algorithm algor1 and the private key corresponding to the public key pkey.

RETURN VALUES

ASN1_item_verify() returns 1 if signature verification succeeds, 0 if signature verification fails, or -1 if pkey is NULL, if sig_in contains invalid flags, or if algor1 requests an invalid or unsupported digest algorithm or does not work with the given pkey.

SEE ALSO

ASN1_BIT_STRING_new(3), ASN1_item_i2d(3), ASN1_item_sign(3), EVP_DigestVerify(3), EVP_PKEY_new(3), OBJ_find_sigid_algs(3), X509_ALGOR_new(3)

HISTORY

ASN1_item_verify() first appeared in OpenSSL 0.9.7 and has been available since OpenBSD 3.1.