CheckPKCSSignature (open)

Checks signatures on decoded PKCS stuff (certificates and certificate requests)

Syntax

LOADLIB "wh::filetypes/pkcs.whlib";

RECORD FUNCTION CheckPKCSSignature(RECORD decoded, RECORD options)

Parameters

RECORD decoded

Decoded PKCS file

RECORD options
signingcert

Decoded singing certificate (mandatory for certificates)

Return value

RECORD
code

One of the following codes: NOTISSUER: Certificate issuer does not match the signing certificate subject KEYIDENTMISMATCH: AuthorityKeyIdentifier of the certificate does not match the signing certificate SubjectKeyIdentifier SIGNFAILURE: Signature value does not match UNSUPPORTEDALGORITHM: Unsupported signature algorithm

success