RSA BSAFE Cert-C

OCSP_EVIDENCE Struct Reference

It is one type of evidence that can be returned in the evidence field of a CERT_REVOCATION structure. (When you deallocate memory associated with OCSP_EVIDENCE and its components, call the C_DestroyOCSPEvidence() function.)

Data Fields

flags

An unsigned int value that contains a flag indicating whether additional evidence or query information is available. Currently, the only possible value is as follows:

Flag	Description
`OCSP_EVIFLAG_NONCE_IGNORED`	The client provided the optional nonce extension in the request, however, no nonce was returned by the OCSP responder.

producedAt A GENERALIZED_TIME structure that indicates the time when the OCSP response was signed.

thisUpdate A GENERALIZED_TIME structure that indicates the time when the revocation status information is known to be correct.

pNextUpdate A pointer to a GENERALIZED_TIME structure that indicates the time when the next revocation status information will be available. This member is optional. If this value is (GENERALIZED_TIME *)0, then the value was not specified by the OCSP responder.

singleExtensions An EXTENSIONS_OBJ object of type OCSP_SINGLE_EXTENSIONS_OBJ that contains additional information about the certificate that has been checked. For example, it can indicate the CRL from which the status information was taken.

revocationInfo A pointer to an OCSP_REVOCATION_INFO structure that contains additional revocation information if it is not set to (OCSP_REVOCATION_INFO*)0.

00146 typedef struct {
00147   unsigned int          flags;             /* one of OCSP_EVIFLAG_*                    */
00148   GENERALIZED_TIME      producedAt;        /* production time of this response         */
00149   GENERALIZED_TIME      thisUpdate;        /* time at which status known to be correct */
00150   GENERALIZED_TIME     *pNextUpdate;       /* (optional) time at which newer           */
00151                                            /*   info will be available                 */
00152   EXTENSIONS_OBJ        singleExtensions;  /* additional info about checked cert       */
00153   OCSP_REVOCATION_INFO *revocationInfo;    /* (optional) additional revocation info    */
00154 } OCSP_EVIDENCE;