This adds CMS support to the Ruby layer.

The CMS_ContentInfo object can be used.
Access to the CMS_SignedInfo structure exists, but it can not be created or freed,
as it is just a pointer into CMS_ContentInfo stack.
feat: added NOINTERN and NO_SIGNER_CERT_VERIFY flags
feat: look for CMS_sign, and set HAVE_CMS_SIGN if present, enabling CMS support

Author: mcr

ext/openssl/extconf.rb

@@ -143,6 +143,9 @@ def find_openssl_library
 # added in 1.1.0, currently not in LibreSSL
 have_func("EVP_PBE_scrypt(\"\", 0, (unsigned char *)\"\", 0, 0, 0, 0, 0, NULL, 0)", evp_h)
 
+# look for CMS code, normally included, but some variations compile it out
+have_func("CMS_sign", ssl_h)
+
 # added in OpenSSL 1.1.1 and LibreSSL 3.5.0, then removed in LibreSSL 4.0.0
 have_func("EVP_PKEY_check(NULL)", evp_h)
 

ext/openssl/ossl.c

@@ -1035,6 +1035,7 @@ Init_openssl(void)
     Init_ossl_asn1();
     Init_ossl_bn();
     Init_ossl_cipher();
+    Init_ossl_cms();
     Init_ossl_config();
     Init_ossl_digest();
     Init_ossl_engine();

ext/openssl/ossl.h

@@ -25,6 +25,7 @@
 
 #include <openssl/opensslv.h>
 
+#include <openssl/cms.h>
 #include <openssl/err.h>
 #include <openssl/asn1.h>
 #include <openssl/x509v3.h>
@@ -185,6 +186,7 @@ extern VALUE dOSSL;
 #include "ossl_bn.h"
 #include "ossl_cipher.h"
 #include "ossl_config.h"
+#include "ossl_cms.h"
 #include "ossl_digest.h"
 #include "ossl_engine.h"
 #include "ossl_hmac.h"