gnutls\_certificate\_set\_ocsp\_status\_request\_function2(3) gnutls gnutls\_certificate\_set\_ocsp\_status\_request\_function2(3)

# [NAME](#NAME)

gnutls\_certificate\_set\_ocsp\_status\_request\_function2 - API function

# [SYNOPSIS](#SYNOPSIS)

**#include <gnutls/gnutls.h>**

**int gnutls\_certificate\_set\_ocsp\_status\_request\_function2(gnutls\_certificate\_credentials\_t sc, unsigned idx, gnutls\_status\_request\_ocsp\_func ocsp\_func, void * ptr);**

# [ARGUMENTS](#ARGUMENTS)

[gnutls\_certificate\_credentials\_t sc](#gnutls_certificate_credentials_t)

is a **gnutls\_certificate\_credentials\_t** type.

[unsigned idx](#unsigned)

is a certificate index as returned by **gnutls\_certificate\_set\_key()** and friends

[gnutls\_status\_request\_ocsp\_func ocsp\_func](#gnutls_status_request_ocsp_func)

function pointer to OCSP status request callback.

[void * ptr](#void)

opaque pointer passed to callback function

# [DESCRIPTION](#DESCRIPTION)

This function is to be used by server to register a callback to provide OCSP status requests that correspond to the indexed certificate chain from the client. The callback will be invoked if the client supplied a status-request OCSP extension.

The callback function prototype is:

typedef int (\*gnutls\_status\_request\_ocsp\_func) (gnutls\_session\_t session, void \*ptr, gnutls\_datum\_t \*ocsp\_response);

The callback will be invoked if the client requests an OCSP certificate status. The callback may return **GNUTLS\_E\_NO\_CERTIFICATE\_STATUS**, if there is no recent OCSP response. If the callback returns **GNUTLS\_E\_SUCCESS**, it is expected to have the *ocsp\_response* field set with a valid (DER-encoded) OCSP response. The response must be a value allocated using **gnutls\_malloc()**, and will be deinitialized by the caller.

# [NOTE](#NOTE)

the ability to set multiple OCSP responses per credential structure via the index *idx* was added in version 3.5.6. To keep backwards compatibility, it requires using **gnutls\_certificate\_set\_flags()** with the **GNUTLS\_CERTIFICATE\_API\_V2** flag to make the set certificate functions return an index usable by this function.

# [RETURNS](#RETURNS)

On success, **GNUTLS\_E\_SUCCESS** (0) is returned, otherwise a negative error code is returned.

# [SINCE](#SINCE)

3.5.5

# [REPORTING BUGS](#REPORTING_BUGS)

Report bugs to <bugs@gnutls.org>.  
Home page: https://www.gnutls.org

# [COPYRIGHT](#COPYRIGHT)

Copyright © 2001-2023 Free Software Foundation, Inc., and others.  
Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.

# [SEE ALSO](#SEE_ALSO)

The full documentation for **gnutls** is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form visit

[https://www.gnutls.org/manual/](https://www.gnutls.org/manual/)

3.8.13 gnutls

---

Document: gnutls_certificate_set_ocsp_status_request_function2(3) from gnutls 3.8.13-r3 (Chainguard OS)
Source: https://gitlab.com/gnutls/gnutls