Skip to content

Commit

Permalink
Add and move OCSP no-op flags to own section
Browse files Browse the repository at this point in the history
  • Loading branch information
samuel40791765 committed Oct 2, 2024
1 parent ff56e55 commit abf9444
Showing 1 changed file with 19 additions and 3 deletions.
22 changes: 19 additions & 3 deletions include/openssl/ocsp.h
Original file line number Diff line number Diff line change
Expand Up @@ -62,9 +62,6 @@ extern "C" {
// Certificates included within |bs| or |req| will be included in the
// search for the signing certificate by default, unless |OCSP_NOINTERN| is set.
#define OCSP_NOINTERN 0x2
// OCSP_NOSIGS does nothing. In OpenSSL, this skips signature verification in
// |OCSP_basic_verify| and |OCSP_request_verify|.
#define OCSP_NOSIGS
// OCSP_NOCHAIN is for |OCSP_basic_verify| and |OCSP_request_verify|.
// For |OCSP_basic_verify|, certificates in both |certs| and in |bs| are
// considered as certificates for the construction of the validation path for
Expand Down Expand Up @@ -552,6 +549,25 @@ OPENSSL_EXPORT X509_EXTENSION *OCSP_SINGLERESP_get_ext(OCSP_SINGLERESP *sresp,
int loc);


// OCSP no-op flags [Deprecated].

// OCSP_NOSIGS does nothing. In OpenSSL, this skips signature verification in
// |OCSP_basic_verify| and |OCSP_request_verify|.
#define OCSP_NOSIGS 0

// OCSP_NOCASIGN does nothing. It's a legacy OCSP flag deprecated since OpenSSL
// 1.0.1g.
#define OCSP_NOCASIGN 0

// OCSP_NODELEGATED does nothing. It's a legacy OCSP flag deprecated since
// OpenSSL 1.0.1g.
#define OCSP_NODELEGATED 0

// OCSP_NOCHECKS does nothing. In OpenSSL, this disables verifying that the
// signer certificate has met the OCSP issuer criteria or any potential
// delegation in |OCSP_basic_verify|.
#define OCSP_NOCHECKS 0

#if defined(__cplusplus)
} // extern C
#endif
Expand Down

0 comments on commit abf9444

Please sign in to comment.