gnutls_ocsp_resp_verify_direct(3)

💖 gnutls_ocsp_resp_verify_direct(3) 💖

okay bestie, so this is a page from the gnutls manual, and it's all about the function gnutls_ocsp_resp_verify_direct. it's giving ✨cryptographic vibes✨ and honestly? kind of iconic. let's get into it 🫶

---

✨ NAME ✨

gnutls_ocsp_resp_verify_direct — an API function, no cap 💅

---

🦋 SYNOPSIS 🦋

#include <gnutls/ocsp.h>

int gnutls_ocsp_resp_verify_direct(gnutls_ocsp_resp_const_t resp,
gnutls_x509_crt_t issuer, unsigned int * verify, unsigned int flags);

---

🌸 ARGUMENTS 🌸

• gnutls_ocsp_resp_const_t resp — this one should contain a gnutls_ocsp_resp_t type. it's the response, bestie, the whole reason we're here 🎀
• gnutls_x509_crt_t issuer — the certificate that we believe signed the response. believed, okay? we're trusting here 🙈
• unsigned int * verify — an output variable holding the verification status, and it's an gnutls_ocsp_verify_reason_t. so it's not just a yes/no, it's a whole reason situation 👑
• unsigned int flags — verification flags coming from gnutls_certificate_verify_flags 🚩

---

💫 DESCRIPTION 💫

so the actual job here is: verify the signature of the Basic OCSP Response against the public key inside the issuer certificate. that's it. that's the whole function. periodt 💅

the verify output variable is gonna hold verification status codes — like GNUTLS_OCSP_VERIFY_SIGNER_NOT_FOUND or GNUTLS_OCSP_VERIFY_INSECURE_ALGORITHM — and here's the thing, those codes are only valid if the function returned GNUTLS_E_SUCCESS. so don't be out here reading them when it didn't, fr fr 😭

⚠️ bestie, listen. the function returns GNUTLS_E_SUCCESS even when verification failed. i know. i KNOW. the way that this works is genuinely wild but it's true. the caller must always inspect the verify variable to find out the actual verification status. always. no skipping. 🫶

and the flags variable? should be 0 for now. that's it. zero. nada. 🌈

---

⭐ RETURNS ⭐

on success, GNUTLS_E_SUCCESS (0) is returned. otherwise you get a negative error value. simple as that 🍓

---

🧚 REPORTING BUGS 🧚

found a bug? spill the tea, report it to <bugs@gnutls.org> 💌

home page: https://www.gnutls.org 🌐

---

👑 COPYRIGHT 👑

Copyright © 2001-2023 Free Software Foundation, Inc., and others.

copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. slay, legally speaking ✨

---

💜 SEE ALSO 💜

the full documentation for gnutls is maintained as a Texinfo manual. if the /usr/share/doc/gnutls/ directory does not contain the HTML form, go visit:

https://www.gnutls.org/manual/

---

and that's the whole page, bestie!! this one came to you from the gnutls manual, version 3.8.13, and honestly it ate 🎀💖✨ thanks for reading, mwah 🫶💅