Add OCSP_RESPID_set_by_key_ex() and OCSP_RESPID_match_ex()
authorMatt Caswell <matt@openssl.org>
Fri, 20 Mar 2020 14:54:55 +0000 (14:54 +0000)
committerMatt Caswell <matt@openssl.org>
Fri, 27 Mar 2020 11:20:39 +0000 (11:20 +0000)
commitbe6aeda6474a77e97b344f300334f5fe3612e4b4
tree9a6c33e8298c4dd87e7ec7f2ec8cdb0c99c3b034
parent5fcb97c61e6796b20c8ee1b0daab25151bf65bd0
Add OCSP_RESPID_set_by_key_ex() and OCSP_RESPID_match_ex()

OCSP_RESPID_set_by_key() calculates a SHA1 hash of the supplied
certificate. We need to be able to specify which libctx and property
query string is used to fetch that algorithm so we introduce
OCSP_RESPID_set_by_key_ex() which does the same thing but enables you to
speicfy the library context and propery query string explicitly.

OCSP_RESPID_match() matches with certificates based on the SHA1 hash.
Therefore for the same reason we introduce OCSP_RESPID_match_ex().

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/11407)
crypto/ocsp/ocsp_srv.c
doc/man3/OCSP_response_status.pod
include/openssl/ocsp.h
util/libcrypto.num