Struct OcspRequestBuilder

pub struct OcspRequestBuilder { /* private fields */ }

Available on crate feature builder only.

X509 OCSP Request builder

use der::Decode;
use sha1::Sha1;
use x509_cert::{serial_number::SerialNumber, Certificate};
use x509_ocsp::builder::OcspRequestBuilder;
use x509_ocsp::{ext::Nonce, Request};

let issuer = Certificate::from_der(ISSUER_DER).unwrap();
let cert = Certificate::from_der(CERT_DER).unwrap();

let req = OcspRequestBuilder::default()
    .with_request(Request::from_cert::<Sha1>(&issuer, &cert).unwrap())
    .build();

let mut rng = rand::thread_rng();

let req = OcspRequestBuilder::default()
    .with_request(Request::from_issuer::<Sha1>(&issuer, SerialNumber::from(2usize)).unwrap())
    .with_request(Request::from_issuer::<Sha1>(&issuer, SerialNumber::from(3usize)).unwrap())
    .with_request(Request::from_issuer::<Sha1>(&issuer, SerialNumber::from(4usize)).unwrap())
    .with_extension(Nonce::generate(&mut rng, 32).unwrap())
    .unwrap()
    .build();

let mut signer = rsa_signer();
let signer_cert_chain = vec![cert.clone()];
let req = OcspRequestBuilder::default()
    .with_request(Request::from_cert::<Sha1>(&issuer, &cert).unwrap())
    .with_extension(Nonce::generate(&mut rng, 32).unwrap())
    .unwrap()
    .sign(&mut signer, Some(signer_cert_chain))
    .unwrap();

Implementations

impl OcspRequestBuilder

pub fn new(version: Version) -> Self

Returns an OcspRequestBuilder with the specified Version

pub fn with_requestor_name(self, requestor_name: GeneralName) -> Self

Sets the requestor name as specified in RFC 6960 Section 4.1.1

pub fn with_request(self, request: Request) -> Self

Adds a Request to the builder as defined in RFC 6960 Section 4.1.1.

pub fn with_extension(self, ext: impl AsExtension) -> Result<Self, Error>

Adds a request extension as specified in RFC 6960 Section 4.4. Errors when the extension encoding fails.

pub fn build(self) -> OcspRequest

Consumes the builder and returns an OcspRequest

pub fn sign<S, Sig>( self, signer: &mut S, certificate_chain: Option<Vec<Certificate>>, ) -> Result<OcspRequest, Error>

where S: Signer<Sig> + DynSignatureAlgorithmIdentifier, Sig: SignatureBitStringEncoding,

Consumes the builder and returns a signed OcspRequest. Errors when the algorithm identifier encoding, message encoding, or signature generation fails.

pub fn sign_with_rng<S, Sig>( self, signer: &mut S, rng: &mut impl CryptoRngCore, certificate_chain: Option<Vec<Certificate>>, ) -> Result<OcspRequest, Error>

where S: RandomizedSigner<Sig> + DynSignatureAlgorithmIdentifier, Sig: SignatureBitStringEncoding,

Consumes the builder and returns a signed OcspRequest. Errors when the algorithm identifier encoding, message encoding, or signature generation fails.

Trait Implementations

impl Clone for OcspRequestBuilder

fn clone(&self) -> OcspRequestBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OcspRequestBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OcspRequestBuilder

fn default() -> OcspRequestBuilder

Returns the “default value” for a type.