Struct OcspRevocationChecker 

pub struct OcspRevocationChecker { /* private fields */ }

OCSP-based certificate revocation checker with caching

Implements the RevocationChecker trait with real OCSP protocol support:

• Builds DER-encoded OCSP requests per RFC 6960
• Sends requests via HTTP/1.1 POST to OCSP responders
• Parses DER-encoded OCSP responses
• Caches results with configurable TTL
• Fail-open: returns Unknown on any error

Implementations

impl OcspRevocationChecker

pub fn new() -> Self

Create a new OCSP revocation checker with default settings

pub fn with_responder_url(self, url: impl Into<String>) -> Self

Set the OCSP responder URL (overrides certificate AIA extension)

pub fn with_cache_ttl(self, ttl: Duration) -> Self

Set cache TTL

pub fn with_timeout(self, timeout: Duration) -> Self

Set request timeout

pub fn get_cached(&self, fingerprint: &str) -> Option<RevocationStatus>

Get cached revocation status for a certificate fingerprint

pub fn cache_status(&self, fingerprint: String, status: RevocationStatus)

Cache a revocation status for a certificate fingerprint

pub fn clear_cache(&self)

Clear the entire cache

pub fn cache_size(&self) -> usize

Get the number of cached entries

pub fn check_revocation( &self, cert: &CertificateDer<'_>, ) -> NetResult<RevocationStatus>

Synchronous check: cache-only, no network I/O

pub fn check_revocation_async<'a>( &'a self, cert: &'a CertificateDer<'_>, ) -> Pin<Box<dyn Future<Output = NetResult<RevocationStatus>> + Send + 'a>>

Asynchronous check: cache first, then network OCSP query

Trait Implementations

impl Debug for OcspRevocationChecker

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OcspRevocationChecker

fn default() -> Self

Returns the “default value” for a type.

impl RevocationChecker for OcspRevocationChecker

fn check_revocation( &self, cert: &CertificateDer<'_>, ) -> NetResult<RevocationStatus>

Check if a certificate has been revoked

fn check_revocation_async( &self, cert: &CertificateDer<'_>, ) -> Pin<Box<dyn Future<Output = NetResult<RevocationStatus>> + Send + '_>>

Check if a certificate has been revoked asynchronously