Struct OcspStatus

pub struct OcspStatus<'a> {
    pub status: OcspCertStatus,
    pub reason: OcspRevokedStatus,
    pub revocation_time: Option<&'a Asn1GeneralizedTimeRef>,
    pub this_update: &'a Asn1GeneralizedTimeRef,
    pub next_update: &'a Asn1GeneralizedTimeRef,
}

Fields

status: OcspCertStatus

The overall status of the response.

reason: OcspRevokedStatus

If status is CERT_STATUS_REVOKED, the reason for the revocation.

revocation_time: Option<&'a Asn1GeneralizedTimeRef>

If status is CERT_STATUS_REVOKED, the time at which the certificate was revoked.

this_update: &'a Asn1GeneralizedTimeRef

The time that this revocation check was performed.

next_update: &'a Asn1GeneralizedTimeRef

The time at which this revocation check expires.

Implementations

impl OcspStatus<'_>

pub fn check_validity( &self, nsec: u32, maxsec: Option<u32>, ) -> Result<(), ErrorStack>

Checks validity of the this_update and next_update fields.

The nsec parameter specifies an amount of slack time that will be used when comparing those times with the current time to account for delays and clock skew.

The maxsec parameter limits the maximum age of the this_update parameter to prohibit very old responses.

This corresponds to OCSP_check_validity.