PHP Manual
Prev |  | Next

# openssl_pkcs7_sign

(PHP 4 >= 4.0.6)

openssl_pkcs7_sign -- sign an S/MIME message

## Description

bool openssl_pkcs7_sign ( string infilename, string outfilename, mixed signcert, mixed privkey, array headers [, long flags [, string extracertsfilename]])

Warning
This function is EXPERIMENTAL. The behaviour of this function, the name of this function, and anything else documented about this function may change without notice in a future release of PHP. Use this function at your own risk.

openssl_pkcs7_sign() takes the contents of the file named `infilename` and signs them using the certificate and it's matching private key specified by `signcert` and `privkey` parameters.

`headers` is an array of headers that will be prepended to the data after it has been signed (see openssl_pkcs7_encrypt() for more information about the format of this parameter.

`flags` can be used to alter the output - see PKCS7 constants - if not specified, it defaults to PKCS7_DETACHED.

`extracerts` specifies the name of a file containing a bunch of extra certificates to include in the signature which can for example be used to help the recipient to verify the certificate that you used.

Example 1. openssl_pkcs7_sign() example
    // the message you want to sign so that recipient can be sure it was you that
    // sent it
    $data = <<<EOD

    You have my authorization to spend $10,000 on dinner expenses.

    The CEO
    EOD;
    // save message to file
    $fp = fopen("msg.txt", "w");
    fwrite($fp, $data);
    fclose($fp);
    // encrypt it
    if (openssl_pkcs7_sign("msg.txt", "signed.txt", "mycert.pem",
        array("mycert.pem", "mypassphrase"),
        array("To" => "joes@sales.com", // keyed syntax
              "From: HQ <ceo@sales.com>", // indexed syntax
              "Subject" => "Eyes only"))
    {
        // message signed - send it!
        exec(ini_get("sendmail_path") . " < signed.txt");
    }

> Note: This function was added in 4.0.6.

Prev | Home | Next
openssl_pkcs7_encrypt | Up | openssl_pkcs7_verify