openssl_cms_decrypt

It took me a while to find out the correct way how to decrypt and verify data with these functions.I needed that to communicate with German Health Insurance Providers as part of a DiGA. Maybe someone finds that useful.<?phpfunction decryptAndVerify($signedAndEncryptedRawData): string{    $tempDir = __DIR__ . '/tmp';    $originalFile = tempnam($tempDir, 'original');    $decryptedFile = tempnam($tempDir, 'decrypted');    $verifiedFile = tempnam($tempDir, 'verified');    file_put_contents($originalFile, $signedAndEncryptedRawData);        // One file with all possible certificates one after the other    // -----BEGIN CERTIFICATE----- ...-----END CERTIFICATE-----    $allPossibleSenderCertificates = __DIR__ . '/untrusted.pem';    // Certificate:    //    Data:    //        Version: 3 (0x2)...    $myCertificate = file_get_contents(__DIR__ . '/my.crt');    $myPrivateKey = openssl_pkey_get_private(    // -----BEGIN RSA PRIVATE KEY----- ... -----END RSA PRIVATE KEY-----        file_get_contents(__DIR__ . '/my.prv.key.pem')    );        openssl_cms_decrypt(        input_filename: $originalFile,        output_filename: $decryptedFile,        certificate: $myCertificate,        private_key: $myPrivateKey,        encoding: OPENSSL_ENCODING_DER    );    openssl_cms_verify(        input_filename: $decryptedFile,        flags: OPENSSL_CMS_BINARY | OPENSSL_CMS_NOSIGS | OPENSSL_CMS_NOVERIFY,        ca_info: [],        untrusted_certificates_filename: $allPossibleSenderCertificates,        content: $verifiedFile,        encoding: OPENSSL_ENCODING_DER    );    return file_get_contents($verifiedFile);}