Commit 20c36721 authored by Paul Kehrer's avatar Paul Kehrer Committed by Dr. Matthias St. Pierre
Browse files

add getter for tbsResponseData and signatureAlgorithm on OCSP_BASICRESP 



fixes #7081

Reviewed-by: default avatarPaul Dale <paul.dale@oracle.com>
Reviewed-by: default avatarMatthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/7082)
parent 6bcfcf16

crypto/ocsp/ocsp_cl.c

+10 −0
Original line number Diff line number Diff line
@@ -167,6 +167,16 @@ const ASN1_OCTET_STRING *OCSP_resp_get0_signature(const OCSP_BASICRESP *bs) 
    return bs->signature;

}



const X509_ALGOR *OCSP_resp_get0_tbs_sigalg(const OCSP_BASICRESP *bs)

{

    return &bs->signatureAlgorithm;

}



const OCSP_RESPDATA *OCSP_resp_get0_respdata(const OCSP_BASICRESP *bs)

{

    return &bs->tbsResponseData;

}



/*

 * Return number of OCSP_SINGLERESP responses present in a basic response.

 */

doc/man3/OCSP_resp_find_status.pod

+8 −0
Original line number Diff line number Diff line
@@ -7,6 +7,8 @@ OCSP_resp_get0_signer, 
OCSP_resp_get0_id,

OCSP_resp_get1_id,

OCSP_resp_get0_produced_at,

OCSP_resp_get0_tbs_sigalg,

OCSP_resp_get0_respdata,

OCSP_resp_find_status, OCSP_resp_count, OCSP_resp_get0, OCSP_resp_find,

OCSP_single_get0_status, OCSP_check_validity,

OCSP_basic_verify
@@ -33,6 +35,8 @@ OCSP_basic_verify 
 const ASN1_GENERALIZEDTIME *OCSP_resp_get0_produced_at(

                             const OCSP_BASICRESP* single);



 const X509_ALGOR *OCSP_resp_get0_tbs_sigalg(const OCSP_BASICRESP *bs);

 const OCSP_RESPDATA *OCSP_resp_get0_respdata(const OCSP_BASICRESP *bs);

 const STACK_OF(X509) *OCSP_resp_get0_certs(const OCSP_BASICRESP *bs);



 int OCSP_resp_get0_signer(OCSP_BASICRESP *bs, X509 **signer,
@@ -82,6 +86,10 @@ B<*revtime>, B<*thisupd> and B<*nextupd>. 
OCSP_resp_get0_produced_at() extracts the B<producedAt> field from the

single response B<bs>.



OCSP_resp_get0_tbs_sigalg() returns the B<signatureAlgorithm> from B<bs>.



OCSP_resp_get0_respdata() returns the B<tbsResponseData> from B<bs>.



OCSP_resp_get0_certs() returns any certificates included in B<bs>.



OCSP_resp_get0_signer() attempts to retrieve the certificate that directly

include/openssl/ocsp.h

+2 −0
Original line number Diff line number Diff line
@@ -197,6 +197,8 @@ int OCSP_response_status(OCSP_RESPONSE *resp); 
OCSP_BASICRESP *OCSP_response_get1_basic(OCSP_RESPONSE *resp);



const ASN1_OCTET_STRING *OCSP_resp_get0_signature(const OCSP_BASICRESP *bs);

const X509_ALGOR *OCSP_resp_get0_tbs_sigalg(const OCSP_BASICRESP *bs);

const OCSP_RESPDATA *OCSP_resp_get0_respdata(const OCSP_BASICRESP *bs);

int OCSP_resp_get0_signer(OCSP_BASICRESP *bs, X509 **signer,

                          STACK_OF(X509) *extra_certs);

util/libcrypto.num

+2 −0
Original line number Diff line number Diff line
@@ -4572,3 +4572,5 @@ EC_POINT_set_affine_coordinates 4525 1_1_1 EXIST::FUNCTION:EC 
EC_POINT_get_affine_coordinates         4526	1_1_1	EXIST::FUNCTION:EC

EC_GROUP_set_curve                      4527	1_1_1	EXIST::FUNCTION:EC

EC_GROUP_get_curve                      4528	1_1_1	EXIST::FUNCTION:EC

OCSP_resp_get0_tbs_sigalg               4529	1_1_0j	EXIST::FUNCTION:OCSP

OCSP_resp_get0_respdata                 4530	1_1_0j	EXIST::FUNCTION:OCSP