gnutls_ocsp_resp_get_single(3)

NAME
gnutls_ocsp_resp_get_single - API function

SYNOPSIS
#include <gnutls/ocsp.h>

int gnutls_ocsp_resp_get_single(gnutls_ocsp_resp_t resp, unsigned indx, gnutls_digest_algorithm_t * digest, gnutls_datum_t * issuer_name_hash, gnutls_datum_t * issuer_key_hash, gnutls_datum_t * serial_number, unsigned int * cert_status, time_t * this_update, time_t * next_update, time_t * revocation_time, unsigned int * revocation_reason);

ARGUMENTS

gnutls_ocsp_resp_t resp
    should contain a gnutls_ocsp_resp_t structure

unsigned indx
    Specifies which extension OID to get. Use (0) to get the first one.

gnutls_digest_algorithm_t * digest
    output variable with gnutls_digest_algorithm_t hash algorithm

gnutls_datum_t * issuer_name_hash
    output buffer with hash of issuer's DN

gnutls_datum_t * issuer_key_hash
    output buffer with hash of issuer's public key

gnutls_datum_t * serial_number
    output buffer with serial number of certificate to check

unsigned int * cert_status
    a certificate status, a gnutls_ocsp_cert_status_t enum.

time_t * this_update
    time at which the status is known to be correct.

time_t * next_update
    when newer information will be available, or (time_t)-1 if unspecified

time_t * revocation_time
    when cert_status is GNUTLS_OCSP_CERT_REVOKED, holds time of revocation.

unsigned int * revocation_reason
    revocation reason, a gnutls_x509_crl_reason_t enum.

DESCRIPTION
This function will return the certificate information of the
 indx 'ed response in the Basic OCSP Response resp . The information returned corresponds to the SingleResponse structure except the final singleExtensions, reproduced here for illustration: <informalexample><programlisting> SingleResponse ::= SEQUENCE { certID CertID, certStatus CertStatus, thisUpdate GeneralizedTime, nextUpdate [0] EXPLICIT GeneralizedTime OPTIONAL, singleExtensions [1] EXPLICIT Extensions OPTIONAL } CertID ::= SEQUENCE { hashAlgorithm AlgorithmIdentifier, issuerNameHash OCTET STRING, -- Hash of Issuer's DN issuerKeyHash OCTET STRING, -- Hash of Issuers public key serialNumber CertificateSerialNumber } CertStatus ::= CHOICE { good [0] IMPLICIT NULL, revoked [1] IMPLICIT RevokedInfo, unknown [2] IMPLICIT UnknownInfo } RevokedInfo ::= SEQUENCE { revocationTime GeneralizedTime, revocationReason [0] EXPLICIT CRLReason OPTIONAL } </programlisting></informalexample> Each of the pointers to output variables may be NULL to indicate that the caller is not interested in that value.

RETURNS
On success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error code is returned. If you have reached the last CertID available GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE will be returned.

REPORTING BUGS
Report bugs to <bug-gnutls@gnu.org>.
General guidelines for reporting bugs: http://www.gnu.org/gethelp/
GnuTLS home page: http://www.gnu.org/software/gnutls/

COPYRIGHT
Copyright © 2012 Free Software Foundation, Inc..
Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.

SEE ALSO
The full documentation for gnutls is maintained as a Texinfo manual. If the info and gnutls programs are properly installed at your site, the command

    info gnutls

should give you access to the complete manual. As an alternative you may obtain the manual from:

    http://www.gnu.org/software/gnutls/manual/