diff options
Diffstat (limited to 'src/lib/libcrypto/doc/SMIME_write_PKCS7.pod')
-rw-r--r-- | src/lib/libcrypto/doc/SMIME_write_PKCS7.pod | 14 |
1 files changed, 8 insertions, 6 deletions
diff --git a/src/lib/libcrypto/doc/SMIME_write_PKCS7.pod b/src/lib/libcrypto/doc/SMIME_write_PKCS7.pod index 2cfad2e049..61945b3887 100644 --- a/src/lib/libcrypto/doc/SMIME_write_PKCS7.pod +++ b/src/lib/libcrypto/doc/SMIME_write_PKCS7.pod | |||
@@ -30,18 +30,20 @@ If the B<PKCS7_TEXT> flag is set MIME headers for type B<text/plain> | |||
30 | are added to the content, this only makes sense if B<PKCS7_DETACHED> | 30 | are added to the content, this only makes sense if B<PKCS7_DETACHED> |
31 | is also set. | 31 | is also set. |
32 | 32 | ||
33 | If cleartext signing is being used then the data must be read twice: | 33 | If the B<PKCS7_PARTSIGN> flag is set the signed data is finalized |
34 | once to compute the signature in PKCS7_sign() and once to output the | 34 | and output along with the content. This flag should only be set |
35 | S/MIME message. | 35 | if B<PKCS7_DETACHED> is also set and the previous call to PKCS7_sign() |
36 | also set these flags. | ||
37 | |||
38 | If cleartext signing is being used and B<PKCS7_PARTSIGN> not set then | ||
39 | the data must be read twice: once to compute the signature in PKCS7_sign() | ||
40 | and once to output the S/MIME message. | ||
36 | 41 | ||
37 | =head1 BUGS | 42 | =head1 BUGS |
38 | 43 | ||
39 | SMIME_write_PKCS7() always base64 encodes PKCS#7 structures, there | 44 | SMIME_write_PKCS7() always base64 encodes PKCS#7 structures, there |
40 | should be an option to disable this. | 45 | should be an option to disable this. |
41 | 46 | ||
42 | There should really be a way to produce cleartext signing using only | ||
43 | a single pass of the data. | ||
44 | |||
45 | =head1 RETURN VALUES | 47 | =head1 RETURN VALUES |
46 | 48 | ||
47 | SMIME_write_PKCS7() returns 1 for success or 0 for failure. | 49 | SMIME_write_PKCS7() returns 1 for success or 0 for failure. |