Skip to main content

Module utils

Module utils 

Available on crate feature boring only.
Expand description

Server Utilities

Generic certificate generation (self-signed CA/leaf + MITM mirroring) lives in rama_crypto::cert::boring

Enums§

MitmLeafOcspStatus
Status to assert for the certificate.

Functions§

answer_ocsp_request
Answer an OCSP request_der for a leaf issued by issuer, echoing the request’s CertID and nonce so the client binds the response to its request. status_for maps the requested serial to its status, so the same revocation state that drives the CRL also drives OCSP. Only the first requested CertID is answered (TLS clients query a single leaf).
build_mitm_ca_crl
Build a DER CertificateList for the MITM CA (ca_cert + ca_key).
build_mitm_leaf_ocsp_response
Build a DER-encoded OCSP response for leaf, signed by the MITM CA (issuer + issuer_key), ready for SslRef::set_ocsp_status.