Results for: "slice"

Returns the certificate which caused the error.

See also the man page X509_STORE_CTX_get_current_cert(3).

Adds a nonce to the OCSP request. If no nonce is given a random one will be generated.

The nonce is used to prevent replay attacks but some servers do not support it.

Checks the nonce validity for this request and response.

The return value is one of the following:

-1

nonce in request only.

0

nonces both present and not equal.

1

nonces present and equal.

2

nonces both absent.

3

nonce present in response only.

For most responses, clients can check result > 0. If a responder doesn’t handle nonces result.nonzero? may be necessary. A result of 0 is always an error.

Adds certificate_id to the request.

Copies the nonce from request into this response. Returns 1 on success and 0 on failure.

Adds nonce to this response. If no nonce was provided a random nonce will be added.

Checks the validity of thisUpdate and nextUpdate fields of this SingleResponse. This checks the current time is within the range thisUpdate to nextUpdate.

It is possible that the OCSP request takes a few seconds or the time is not accurate. To avoid rejecting a valid response, this method allows the times to be within nsec seconds of the current time.

Some responders don’t set the nextUpdate field. This may cause a very old response to be considered valid. The maxsec parameter can be used to limit the age of responses.

Returns the status of the certificate identified by the certid. The return value may be one of these constant:

• V_CERTSTATUS_GOOD

• V_CERTSTATUS_REVOKED

• V_CERTSTATUS_UNKNOWN

When the status is V_CERTSTATUS_REVOKED, the time at which the certificate was revoked can be retrieved by revocation_time.

Specify whether the response shall contain the timestamp authority’s certificate or not. The default value is true.

Indicates whether the response shall contain the timestamp authority’s certificate or not.

Adds the OpenSSL::X509::Certificate cert to the certificate store.

See also the man page X509_STORE_add_cert(3).

Create an exception with class klass and message