PKCS7_NOCERTS

PKCS7_NOCERTS is one of the accepted parameters for:

• openssl_pkcs7_verify parameter #2 (optionally as a bitmask)
• openssl_pkcs7_sign parameter #6 (optionally as a bitmask)
• openssl_pkcs7_encrypt parameter #5 (optionally as a bitmask)

PKCS7 CONSTANT: PKCS7_NOCERTS — When signing a message the signer's certificate is normally included - with this option it is excluded. This will reduce the size of the signed message but the verifier must have a copy of the signers certificate available locally (passed using the $untrusted_certificates_filename to openssl_pkcs7_verify for example).

PKCS7_NOCERTS = 2;