Function answer_ocsp_request 

pub fn answer_ocsp_request(
    issuer: &X509Ref,
    issuer_key: &PKeyRef<Private>,
    request_der: &[u8],
    validity: Duration,
    status_for: impl FnOnce(&[u8]) -> OcspCertStatus,
) -> Result<Vec<u8>, Box<dyn Error + Sync + Send>>

Available on crate feature boring only.

Answer an OCSP request_der for a leaf issued by issuer, echoing the request’s CertID and nonce so the client binds the response to its request. status_for maps the requested serial to its status, so the same revocation state that drives the CRL also drives OCSP. Only the first requested CertID is answered (TLS clients query a single leaf).