OCSP_check_validity

Check that OCSP thisUpdate/nextUpdate times are acceptable relative to now.

Synopsis

Declared in <openssl/ocsp.h>

int
OCSP_check_validity(
    ASN1_GENERALIZEDTIME* thisupd,
    ASN1_GENERALIZEDTIME* nextupd,
    long sec,
    long maxsec);

Return Value

1 if the times are valid, or 0 otherwise.

Parameters

NameDescription
thisupdthisUpdate time from a SingleResponse (required).
nextupdOptional nextUpdate time, or NULL if absent.
secAllowed skew in seconds comparing thisUpdate to the current time.
maxsecMaximum age of thisUpdate in seconds, or -1 for no maximum.