CMS_VERIFY_RECEIPT(3ossl)

💖 CMS_VERIFY_RECEIPT 💖

okay bestie, welcome to the CMS_verify_receipt page from the OpenSSL manual, section 3ossl 🎀 she's a little one but she's important, so let's get into it ✨

---

🌸 NAME 🌸

CMS_verify_receipt — verify a CMS signed receipt 🧾✅

---

✨ SYNOPSIS ✨

#include <openssl/cms.h>

int CMS_verify_receipt(CMS_ContentInfo *rcms, CMS_ContentInfo *ocms,
                       STACK_OF(X509) *certs, X509_STORE *store,
                       unsigned int flags);

---

💅 DESCRIPTION 💅

So CMS_verify_receipt() does exactly what it says on the tin: it verifies a CMS signed receipt. Slay. 🫶

Here's the cast of characters, one by one, no skipping:

• rcms — this is the signed receipt we're actually verifying. the main character of this function ngl 👑
• ocms — the original SignedData structure that contains the receipt request. like, the context, the backstory, the lore 🦋
• certs — a set of certificates where we go looking for the signing certificate. think of it as the group chat we search for the right person in 💬
• store — a trusted certificate store. this one's for chain verification, so it's the responsible adult in the room 🧚
• flags — an optional set of flags that you can use to tweak the verify operation however you like ✨

---

📝 NOTES 📝

This function lowkey behaves a lot like CMS_verify(), except — and this is the important part, no cap — these flag values are not supported:

• CMS_DETACHED
• CMS_BINARY
• CMS_TEXT
• CMS_STREAM

Why? because they genuinely don't make sense in the context of signed receipts. it's giving "wrong vibe, wrong era" 💀 don't try to sneak them in.

---

🎯 RETURN VALUES 🎯

CMS_verify_receipt() returns 1 when the verification goes off without a hitch — icon behaviour, we love to see it 💖 — and returns zero if an error happened 😭

You can grab the error from ERR_get_error(3).

---

👀 SEE ALSO 👀

• ERR_get_error(3)
• CMS_sign_receipt(3)
• CMS_verify(3)

---

📜 COPYRIGHT 📜

Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

---

and that's the whole page bestie, we ate and left no crumbs 🍓✨ this was CMS_VERIFY_RECEIPT(3ossl) from version 3.5.9, dated 2026-09-29 — mwah, go verify some receipts 💅🫶