Index: nss/lib/pkcs7/secpkcs7.h |
=================================================================== |
--- nss/lib/pkcs7/secpkcs7.h (revision 195639) |
+++ nss/lib/pkcs7/secpkcs7.h (working copy) |
@@ -134,6 +134,24 @@ |
PRBool keepcerts); |
/* |
+ * SEC_PKCS7VerifyDetachedSignatureAtTime |
+ * Look at a PKCS7 contentInfo and check if the signature matches |
+ * a passed-in digest (calculated, supposedly, from detached contents). |
+ * The verification checks that the signing cert is valid and trusted |
+ * for the purpose specified by "certusage" at time "atTime". |
+ * |
+ * In addition, if "keepcerts" is true, add any new certificates found |
+ * into our local database. |
+ */ |
+extern PRBool |
+SEC_PKCS7VerifyDetachedSignatureAtTime(SEC_PKCS7ContentInfo *cinfo, |
+ SECCertUsage certusage, |
+ const SECItem *detached_digest, |
+ HASH_HashType digest_type, |
+ PRBool keepcerts, |
+ PRTime atTime); |
+ |
+/* |
* SEC_PKCS7GetSignerCommonName, SEC_PKCS7GetSignerEmailAddress |
* The passed-in contentInfo is espected to be Signed, and these |
* functions return the specified portion of the full signer name. |