Add an API to get the signer of an OCSP response
authorBenjamin Kaduk <bkaduk@akamai.com>
Wed, 18 Oct 2017 20:29:18 +0000 (15:29 -0500)
committerBen Kaduk <kaduk@mit.edu>
Wed, 13 Dec 2017 01:08:22 +0000 (19:08 -0600)
commit1f0067ec9a8d2ab71132604b4a1a5dd9ffab4f23
tree5d068ed26444260d345a1f76feb302bf01c266f4
parente1e59ecada5092fdb71cb20ec3a944733c96bf01
Add an API to get the signer of an OCSP response

Add a new function OCSP_resp_get0_signer() that looks in the
certs bundled with the response as well as in additional certificates
provided as a function argument, returning the certificate that signed
the given response (if present).

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(cherry picked from commit ce5886dda80b6f60fb30762381506d5c6f2d995c)

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4723)
crypto/ocsp/ocsp_vfy.c
doc/crypto/OCSP_resp_find_status.pod
include/openssl/ocsp.h