Description:
------------
---
From manual page: http://www.php.net/function.openssl-pkcs7-sign
---

Most certs are being issued with sha256WithRSAEncryption but the php openssl_pkcs7_sign() function always uses sha1WithRSAEncryption.  At a minimum there should be a way to specify the signing algorithm with an optional parameter like openssl_sign() does.

Test script:
---------------
                $ret = openssl_pkcs7_sign(
                        $fileTmp,
                        $fileSigned,
                        $signInfo['cert'],
                        array($signInfo['key'], $signInfo['keypass']),
                        $signHeaders,
                        PKCS7_DETACHED,
                        $signInfo['extracerts']
                );

Expected result:
----------------
After extracting smime.p7s from "$fileSigned" in the Test Script, check to see how it was signed using the command-line:

 openssl asn1parse -inform pem -in smime.p7s -dump -i | less -S

Look for ":messageDigest".  You'll see it's 20 bytes long (160bits which is SHA-1).  Plus you'll see a few lines above ":messageDigest" mention of ":sha1".

Actual result:
--------------
After extracting smime.p7s from "$fileSigned" in the Test Script, check to see how it was signed using the command-line:

 openssl asn1parse -inform pem -in smime.p7s -dump -i | less -S

Look for ":messageDigest".  You SHOULD see it's 32 bytes long (160bits which is SHA-256).  Plus you SHOULD see a few lines above ":messageDigest" mention of ":sha256".