Botan::OCSP::SingleResponse Class Reference

#include <ocsp.h>

Inheritance diagram for Botan::OCSP::SingleResponse:

Public Member Functions
std::vector< uint8_t >	BER_encode () const
size_t	cert_status () const
const CertID &	certid () const
void	decode_from (BER_Decoder &from) override
void	encode_into (DER_Encoder &to) const override
bool	has_unknown_critical_extension () const
const X509_Time &	next_update () const
const X509_Time &	this_update () const

Detailed Description

Definition at line 48 of file ocsp.h.

Member Function Documentation

BER_encode()

std::vector< uint8_t > Botan::ASN1_Object::BER_encode ( ) const

inherited

Return the encoding of this object. This is a convenience method when just one object needs to be serialized. Use DER_Encoder for complicated encodings.

Definition at line 20 of file asn1_obj.cpp.

                                                 {
   std::vector<uint8_t> output;
   DER_Encoder der(output);
   this->encode_into(der);
   return output;
}

References encode_into().

Referenced by decode_from(), Botan::Certificate_Store_In_SQL::find_all_certs(), Botan::Certificate_Store_In_SQL::find_cert(), Botan::X509_Certificate::fingerprint(), Botan::Certificate_Store_In_SQL::insert_cert(), Botan::X509_Object::PEM_encode(), Botan::PSS_Params::PSS_Params(), and Botan::Certificate_Store_In_SQL::revoke_cert().

cert_status()

size_t Botan::OCSP::SingleResponse::cert_status ( ) const

inline

Definition at line 52 of file ocsp.h.

{ return m_cert_status; }

Referenced by decode_from().

certid()

const CertID & Botan::OCSP::SingleResponse::certid ( ) const

inline

Definition at line 50 of file ocsp.h.

{ return m_certid; }

decode_from()

void Botan::OCSP::SingleResponse::decode_from ( BER_Decoder & from )

overridevirtual

Decode whatever this object is from from

Parameters

from	the BER_Decoder that will be read from

Implements Botan::ASN1_Object.

Definition at line 102 of file ocsp.cpp.

                                                  {
   /*
   * RFC 6960 Section 4.2.1
   *
   * SingleResponse ::= SEQUENCE {
   *    certID                       CertID,
   *    certStatus                   CertStatus,
   *    thisUpdate                   GeneralizedTime,
   *    nextUpdate         [0]       EXPLICIT GeneralizedTime OPTIONAL,
   *    singleExtensions   [1]       EXPLICIT Extensions OPTIONAL }
   *
   * CertStatus ::= CHOICE {
   *    good        [0]     IMPLICIT NULL,
   *    revoked     [1]     IMPLICIT RevokedInfo,
   *    unknown     [2]     IMPLICIT UnknownInfo }
   *
   * RevokedInfo ::= SEQUENCE {
   *    revocationTime              GeneralizedTime,
   *    revocationReason    [0]     EXPLICIT CRLReason OPTIONAL }
   */
   BER_Object cert_status;
   Extensions extensions;
 
   from.start_sequence()
      .decode(m_certid)
      .get_next(cert_status)
      .decode(m_thisupdate)
      .decode_optional(m_nextupdate, ASN1_Type(0), ASN1_Class::ContextSpecific | ASN1_Class::Constructed)
      .decode_optional(extensions, ASN1_Type(1), ASN1_Class::ContextSpecific | ASN1_Class::Constructed)
      .end_cons();
 
   const auto cert_status_class = cert_status.get_class();
   if(cert_status_class != ASN1_Class::ContextSpecific &&
      cert_status_class != (ASN1_Class::ContextSpecific | ASN1_Class::Constructed)) {
      throw Decoding_Error("OCSP::SingleResponse: certStatus has unexpected class tag");
   }
 
   // TODO: should verify the cert_status body and decode RevokedInfo
   m_cert_status = static_cast<uint32_t>(cert_status.type());
   if(m_cert_status > 2) {
      throw Decoding_Error("Unknown OCSP CertStatus tag");
   }
 
   // We don't currently recognize any extensions here so if any are critical we should reject
   m_has_unknown_critical_ext = !extensions.critical_extensions().empty();
}

References cert_status(), Botan::Constructed, Botan::ContextSpecific, Botan::Extensions::critical_extensions(), Botan::BER_Decoder::decode(), Botan::BER_Decoder::decode_optional(), Botan::BER_Decoder::end_cons(), Botan::BER_Decoder::get_next(), and Botan::BER_Decoder::start_sequence().

encode_into()

void Botan::OCSP::SingleResponse::encode_into ( DER_Encoder & to ) const

overridevirtual

Encode whatever this object is into to

Parameters

to	the DER_Encoder that will be written to

Implements Botan::ASN1_Object.

Definition at line 98 of file ocsp.cpp.

                                                     {
   throw Not_Implemented("SingleResponse::encode_into");
}

has_unknown_critical_extension()

bool Botan::OCSP::SingleResponse::has_unknown_critical_extension ( ) const

inline

Definition at line 62 of file ocsp.h.

{ return m_has_unknown_critical_ext; }

next_update()

const X509_Time & Botan::OCSP::SingleResponse::next_update ( ) const

inline

Definition at line 56 of file ocsp.h.

{ return m_nextupdate; }

this_update()

const X509_Time & Botan::OCSP::SingleResponse::this_update ( ) const

inline

Definition at line 54 of file ocsp.h.

{ return m_thisupdate; }

---

The documentation for this class was generated from the following files:

• src/lib/x509/ocsp.h
• src/lib/x509/ocsp.cpp