gnutls_ocsp_status_request_is_checked(3) API function


#include <gnutls/gnutls.h>

int gnutls_ocsp_status_request_is_checked(gnutls_session_t session, unsigned int flags);


gnutls_session_t session
is a gnutls session
unsigned int flags
should be zero or GNUTLS_OCSP_SR_IS_AVAIL


Check whether an OCSP status response was included in the handshake and whether it was checked and valid (not too old or superseded). This is a helper function when needing to decide whether to perform an OCSP validity check on the peer's certificate. Should be called after any of gnutls_certificate_verify_peers*() are called.

If the flag GNUTLS_OCSP_SR_IS_AVAIL is specified, the return value of the function indicates whether an OCSP status response have been received (even if invalid). The flag was introduced in GnuTLS 3.4.0.


non zero if the response was valid, or a zero if it wasn't sent, or sent and was invalid.


Report bugs to <[email protected]>.
Home page:


Copyright © 2001-2016 Free Software Foundation, Inc., and others.
Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.