CreatePkcs7SignedDataInput

CreatePkcs7SignedDataInput

Input for createPkcs7SignedData.

interface CreatePkcs7SignedDataInput {
	readonly content: Uint8Array;
	readonly signers: readonly Pkcs7Signer[];
	readonly additionalCertificates?: readonly Pkcs7CertificateSource[];
	readonly encapsulatedContentTypeOid?: string;
	readonly detached?: boolean;
}

Properties

• readonly content: Uint8Array — Content to encapsulate and sign (the eContent).
• readonly signers: readonly Pkcs7Signer[] — One or more signers. Each produces a SignerInfo with signed attributes.
• readonly additionalCertificates?: readonly Pkcs7CertificateSource[] — Additional certificates to embed (e.g. intermediates). Signer certificates are always embedded; duplicate DER is removed.
• readonly encapsulatedContentTypeOid?: string — Encapsulated content type OID.
• readonly detached?: boolean — Omit eContent from encapContentInfo (RFC 5652 Section 5.2 detached form). The signature still covers content via the messageDigest signed attribute, but the bytes are not embedded — the verifier must supply them externally (e.g. git x509 commit signing, S/MIME detached signatures).