x509: Support generation of OCSP responses

This commit is contained in:
Andreas Steffen
2023-11-13 12:40:55 +01:00
committed by Tobias Brunner
parent aa0fe149d6
commit 00ab8d62c0
6 changed files with 362 additions and 56 deletions
+4 -1
View File
@@ -1,6 +1,6 @@
/*
* Copyright (C) 2008 Martin Willi
* Copyright (C) 2016-2022 Andreas Steffen
* Copyright (C) 2016-2023 Andreas Steffen
*
* Copyright (C) secunet Security Networks AG
*
@@ -78,5 +78,8 @@ ENUM(builder_part_names, BUILD_FROM_FILE, BUILD_END,
"BUILD_EDDSA_PUB",
"BUILD_EDDSA_PRIV_ASN1_DER",
"BUILD_CRITICAL_EXTENSION",
"BUILD_NONCE",
"BUILD_OCSP_STATUS",
"BUILD_OCSP_RESPONSES",
"BUILD_END",
);
+6
View File
@@ -165,6 +165,12 @@ enum builder_part_t {
BUILD_EDDSA_PRIV_ASN1_DER,
/** OID of an [unsupported] critical extension */
BUILD_CRITICAL_EXTENSION,
/** nonce needed for some security protocol */
BUILD_NONCE,
/** OCSP response status, ocsp_status_t */
BUILD_OCSP_STATUS,
/** enumerator_t over (ocsp_single_response_t *response) */
BUILD_OCSP_RESPONSES,
/** end of variable argument builder list */
BUILD_END,
};
@@ -88,9 +88,9 @@ struct ocsp_response_t {
enumerator_t* (*create_cert_enumerator)(ocsp_response_t *this);
/**
* Create an enumerator over the contained responses.
* Create an enumerator over the contained single responses.
*
* @return enumerator over major response fields
* @return enumerator over ocsp_single_response_t objects
*/
enumerator_t* (*create_response_enumerator)(ocsp_response_t *this);
};