- - -

Constants

GRANTED -: Indicates a successful response. Equal to 0.
- -
GRANTED_WITH_MODS -: Indicates a successful response that probably contains modifications from the initial request. Equal to 1.
- -
REJECTION -: Indicates a failure. No timestamp token was created. Equal to 2.
- -
REVOCATION_NOTIFICATION -: Indicates a failure. No timestamp token was created. A certificate has been revoked. Equal to 5.
- -
REVOCATION_WARNING -: Indicates a failure. No timestamp token was created. Revocation of a certificate is imminent. Equal to 4.
- -
WAITING -: Indicates a failure. No timestamp token was created. Equal to 3.
- -

- - - +

Public Class Methods

- -

OpenSSL::Timestamp::Response.new(file) → response - click to toggle source -

OpenSSL::Timestamp::Response.new(string) → response -

- -

Creates a Response from a File or string parameter, the corresponding File or string must be DER-encoded. Please note that Response is an immutable read-only class. If you'd like to create timestamps please refer to Factory instead.

- - +

Creates a Response from a File or string parameter, the corresponding File or string must be DER-encoded. Please note that Response is an immutable read-only class. If you’d like to create timestamps please refer to Factory instead.

static VALUE
 ossl_ts_resp_initialize(VALUE self, VALUE der)
@@ -205,46 +155,36 @@ ossl_ts_resp_initialize(VALUE self, VALUE der)
     in  = ossl_obj2bio(&der);
     ts_resp = d2i_TS_RESP_bio(in, &ts_resp);
     BIO_free(in);
-    if (!ts_resp)
+    if (!ts_resp) {
+        DATA_PTR(self) = NULL;
         ossl_raise(eTimestampError, "Error when decoding the timestamp response");
+    }
     DATA_PTR(self) = ts_resp;
 
     return self;
 }

- -

- +

Public Instance Methods

- -

failure_info → nil or symbol - click to toggle source -

- -

In cases no timestamp token has been created, this field contains further info about the reason why response creation failed. The method returns either nil (the request was successful and a timestamp token was created) or one of the following:

:BAD_ALG - Indicates that the timestamp server rejects the message imprint algorithm used in the Request
@@ -263,10 +203,7 @@ ossl_ts_resp_initialize(VALUE self, VALUE der)
:SYSTEM_FAILURE - Timestamp creation failed due to an internal error that occurred on the timestamp server

- - -

static VALUE
 ossl_ts_resp_get_failure_info(VALUE self)
@@ -307,36 +244,22 @@ ossl_ts_resp_get_failure_info(VALUE self)
     ossl_raise(eTimestampError, "Unrecognized failure info.");
 }

- -

status → BN (never nil) - click to toggle source -

- -

Returns one of GRANTED, GRANTED_WITH_MODS, REJECTION, WAITING, REVOCATION_WARNING or REVOCATION_NOTIFICATION. A timestamp token has been created only in case status is equal to GRANTED or GRANTED_WITH_MODS.

- - -

static VALUE
 ossl_ts_resp_get_status(VALUE self)
@@ -352,36 +275,22 @@ ossl_ts_resp_get_status(VALUE self)
     return asn1integer_to_num(st);
 }

- -

status_text → Array of strings or nil - click to toggle source -

- -

In cases of failure this field may contain an array of strings further describing the origin of the failure.

- - -

static VALUE
 ossl_ts_resp_get_status_text(VALUE self)
@@ -405,36 +314,22 @@ ossl_ts_resp_get_status_text(VALUE self)
     return ret;
 }

- -

to_der → string - click to toggle source -

- -

Returns the Response in DER-encoded form.

- - -

static VALUE
 ossl_ts_resp_to_der(VALUE self)
@@ -445,36 +340,22 @@ ossl_ts_resp_to_der(VALUE self)
     return asn1_to_der((void *)resp, (int (*)(void *, unsigned char **))i2d_TS_RESP);
 }

- -

token → nil or OpenSSL::PKCS7 - click to toggle source -

- -

If a timestamp token is present, this returns it in the form of a OpenSSL::PKCS7.

- - -

static VALUE
 ossl_ts_resp_get_token(VALUE self)
@@ -497,36 +378,22 @@ ossl_ts_resp_get_token(VALUE self)
     return obj;
 }

- -

token_info → nil or OpenSSL::Timestamp::TokenInfo - click to toggle source -

- -

Get the response's token info if present.

- - +

Get the response’s token info if present.

static VALUE
 ossl_ts_resp_get_token_info(VALUE self)
@@ -549,36 +416,22 @@ ossl_ts_resp_get_token_info(VALUE self)
     return obj;
 }

- -

tsa_certificate → OpenSSL::X509::Certificate or nil - click to toggle source -

- -

If the Request specified to request the TSA certificate (Request#cert_requested = true), then this field contains the certificate of the timestamp authority.

- - -

static VALUE
 ossl_ts_resp_get_tsa_certificate(VALUE self)
@@ -598,52 +451,36 @@ ossl_ts_resp_get_tsa_certificate(VALUE self)
     return ossl_x509_new(cert);
 }

- -

verify(Request, root_store) → Response - click to toggle source -

verify(Request, root_store, [intermediate_cert]) → Response -

- -

Verifies a timestamp token by checking the signature, validating the certificate chain implied by tsa_certificate and by checking conformance to a given Request. Mandatory parameters are the Request associated to this Response, and an OpenSSL::X509::Store of trusted roots.

Intermediate certificates can optionally be supplied for creating the certificate chain. These intermediate certificates must all be instances of OpenSSL::X509::Certificate.

If validation fails, several kinds of exceptions can be raised:

-
TypeError if types don't fit
+
TypeError if types don’t fit
TimestampError if something is wrong with the timestamp token itself, if it is not conformant to the Request, or if validation of the timestamp certificate chain fails.

- - -

static VALUE
 ossl_ts_resp_verify(int argc, VALUE *argv, VALUE self)
@@ -715,25 +552,20 @@ ossl_ts_resp_verify(int argc, VALUE *argv, VALUE self)
     return self;
 }

- -