ates supplied in <i>certs</i> then the verify will fail because the signer cannot be found.</p>

<p>Care should be taken when modifying the default verify behaviour, for example setting <code>PKCS7_NOVERIFY|PKCS7_NOSIGS</code> will totally disable all verification and any signed message will be considered valid. This combination is however useful if one merely wishes to write the content to <i>out</i> and its validity is not considered important.</p>

<p>Chain verification should arguably be performed using