PKCS12_PACK_P7ENCDATA(3SSL)

📦
version 4.0.3 · 13 versions
, in ubuntu stonking

💖 PKCS12_pack_p7encdata — the OpenSSL glow-up ✨

okay bestie, we're doing PKCS12_pack_p7encdata(3SSL) today and honestly? it's giving "I bundle your lil' safeBags into a shiny encrypted ✨ PKCS#7 ✨ object" and we're obsessed. it lives in the OpenSSL family, so you already know it's iconic. periodt.

🎀 NAME 🎀

PKCS12_pack_p7encdata, PKCS12_pack_p7encdata_ex — packing a whole set of PKCS#12 safeBags into a PKCS#7 encrypted data object 💅

like... you hand it bags, it hands you back encrypted data. that's the whole vibe. no cap.

🦋 SYNOPSIS 🦋

#include <openssl/pkcs12.h>

PKCS7 *PKCS12_pack_p7encdata(int pbe_nid, const char *pass, int passlen,
                             unsigned char *salt, int saltlen, int iter,
                             STACK_OF(PKCS12_SAFEBAG) *bags);
PKCS7 *PKCS12_pack_p7encdata_ex(int pbe_nid, const char *pass, int passlen,
                                unsigned char *salt, int saltlen, int iter,
                                STACK_OF(PKCS12_SAFEBAG) *bags,
                                OSSL_LIB_CTX *ctx, const char *propq);

don't panic at the signature, it's literally just "algorithm, password, salt, iterations, bags" and for the _ex one you also get ctx + propq at the end. slay. 🔥

🌸 DESCRIPTION 🌸

so PKCS12_pack_p7encdata() generates a PKCS#7 ContentInfo object of encrypted-data type, built from the set of safeBags in bags. lowkey magic.

now the tea on pbe_nid ☕ — that algorithm ID can be either:

  • a PKCS#12 password based encryption algorithm,
  • a PKCS#5 password based encryption algorithm,
  • or a cipher algorithm 🗝️

and if you pass in a cipher algorithm, then the PKCS#5 PBES2 algorithm gets used, with that cipher as a parameter. iykyk.

the inputs into the encryption operation are:

  • the password pass, with length passlen 🔑
  • the salt salt, with length saltlen 🧂
  • the iteration count iter 🔁

and then PKCS12_pack_p7encdata_ex() operates similar to the above, but it's the upgraded version — it lets a library context ctx and a property query propq be used to select the algorithm implementation. it's giving "let me pick my own implementation, thanks" 👑

✨ RETURN VALUES ✨

you get a PKCS7 object if it succeeds 💖 … or NULL if an error occurred 😭 (yes bestie, always check the return, fr fr).

🌈 CONFORMING TO 🌈

IETF RFC 2315 (https://tools.ietf.org/html/rfc2315) 📜 — she's certified, she's official, she follows the spec.

🫶 SEE ALSO 🫶

go read that one too, bestie, they're a matched set 🎀

⭐ HISTORY ⭐

PKCS12_pack_p7encdata_ex() was added in OpenSSL 3.0. so if you're on the old stuff, that one's just not gonna be there 🙈

Copyright 2021 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at https://www.openssl.org/source/license.html.

okay legal bestie moment: this is real, please actually read the License before you do anything wild with it 💜

and that's the whole page, diva 💅 this was OpenSSL 4.0.3, dated 2026-09-29, PKCS12_PACK_P7ENCDATA(3SSL) — go forth and pack those p7encdata objects, you absolute main character 🦋✨

📦 where this page comes from