Struct SingleResponse

pub struct SingleResponse {
    pub cert_id: CertId,
    pub cert_status: CertStatus,
    pub this_update: OcspGeneralizedTime,
    pub next_update: Option<OcspGeneralizedTime>,
    pub single_extensions: Option<Extensions>,
}

SingleResponse structure as defined in RFC 6960 Section 4.2.1.

SingleResponse ::= SEQUENCE {
   certID                  CertID,
   certStatus              CertStatus,
   thisUpdate              GeneralizedTime,
   nextUpdate              [0] EXPLICIT GeneralizedTime OPTIONAL,
   singleExtensions        [1] EXPLICIT Extensions OPTIONAL }

Fields

cert_id: CertId

cert_status: CertStatus

this_update: OcspGeneralizedTime

next_update: Option<OcspGeneralizedTime>

single_extensions: Option<Extensions>

Implementations

impl SingleResponse

pub fn new( cert_id: CertId, cert_status: CertStatus, this_update: OcspGeneralizedTime, ) -> Self

Available on crate feature builder only.

Returns a SingleResponse given the CertID, CertStatus, and This Update. Next Update is set to None.

pub fn with_this_update(self, this_update: OcspGeneralizedTime) -> Self

Available on crate feature builder only.

Sets thisUpdate in the singleResponse as defined in RFC 6960 Section 4.2.1.

pub fn with_next_update(self, next_update: OcspGeneralizedTime) -> Self

Available on crate feature builder only.

Sets nextUpdate in the singleResponse as defined in RFC 6960 Section 4.2.1.

pub fn with_extension(self, ext: impl AsExtension) -> Result<Self, Error>

Available on crate feature builder only.

Adds a single response extension as specified in RFC 6960 Section 4.4. Errors when the extension encoding fails.

pub fn from_crl<D>( issuer: &Certificate, crl: &CertificateList, serial_number: SerialNumber, ) -> Result<Self, Error>

where D: Digest + AssociatedOid,

Available on crate feature builder only.

Returns a SingleResponse by searching through the CRL to see if serial is revoked. If not, the CertStatus is set to good. The CertID is built from the issuer and serial number. This method does not ensure the CRL is issued by the issuer and only asserts the serial is not revoked in the provided CRL.

thisUpdate and nextUpdate will be pulled from the CRL.

NOTE: this method complies with RFC 2560 Section 2.2 and not RFC 6960 Section 2.2. RFC 6960 limits the good status to only issued certificates. RFC 2560 only asserts the serial was not revoked and makes no assertion the serial was ever issued.

Trait Implementations

impl Clone for SingleResponse

fn clone(&self) -> SingleResponse

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SingleResponse

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'__der_lifetime> DecodeValue<'__der_lifetime> for SingleResponse

fn decode_value<R: Reader<'__der_lifetime>>( reader: &mut R, header: Header, ) -> Result<Self>

Attempt to decode this message using the provided Reader.

impl<'__der_lifetime> EncodeValue for SingleResponse

fn value_len(&self) -> Result<Length>

Compute the length of this value (sans [Tag]+Length header) when encoded as ASN.1 DER.

fn encode_value(&self, writer: &mut impl Writer) -> Result<()>

Encode value (sans [Tag]+Length header) as ASN.1 DER using the provided Writer.

fn header(&self) -> Result<Header, Error>

where Self: Tagged,

Get the Header used to encode this value.

impl PartialEq for SingleResponse

fn eq(&self, other: &SingleResponse) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for SingleResponse

impl<'__der_lifetime> Sequence<'__der_lifetime> for SingleResponse

impl StructuralPartialEq for SingleResponse