---
name: "gnutls_ocsp_resp_verify"
section: "3"
platform: "linux"
package: "gnutls"
version: "3.8.13-3"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/gnutls_ocsp_resp_verify"
---

# gnutls\_ocsp\_resp\_verify(3)

API function

## NAME

gnutls\_ocsp\_resp\_verify - API function

## SYNOPSIS

**#include \<gnutls/ocsp.h\>**

**int gnutls\_ocsp\_resp\_verify(gnutls\_ocsp\_resp\_const\_t** *resp***, gnutls\_x509\_trust\_list\_t** *trustlist***, unsigned int \*** *verify***, unsigned int** *flags***);**

## ARGUMENTS

- gnutls\_ocsp\_resp\_const\_t resp

  should contain a **gnutls\_ocsp\_resp\_t** type

- gnutls\_x509\_trust\_list\_t trustlist

  trust anchors as a **gnutls\_x509\_trust\_list\_t** type

- unsigned int \* verify

  output variable with verification status, an **gnutls\_ocsp\_verify\_reason\_t**

- unsigned int flags

  verification flags from **gnutls\_certificate\_verify\_flags**

## DESCRIPTION

Verify signature of the Basic OCSP Response against the public key in the certificate of a trusted signer.  The  *trustlist* should be populated with trust anchors.  The function will extract the signer certificate from the Basic OCSP Response and will verify it against the  *trustlist* .  A trusted signer is a certificate that is either in  *trustlist* , or it is signed directly by a certificate in\
  *trustlist* and has the id-ad-ocspSigning Extended Key Usage bit set.

The output  *verify* variable will hold verification status codes (e.g., **GNUTLS\_OCSP\_VERIFY\_SIGNER\_NOT\_FOUND**, **GNUTLS\_OCSP\_VERIFY\_INSECURE\_ALGORITHM**) which are only valid if the function returned **GNUTLS\_E\_SUCCESS**.

Note that the function returns **GNUTLS\_E\_SUCCESS** even when verification failed.  The caller must always inspect the  *verify* variable to find out the verification status.

The  *flags* variable should be 0 for now.

## RETURNS

On success, **GNUTLS\_E\_SUCCESS** (0) is returned, otherwise a negative error value.

## REPORTING BUGS

Report bugs to \<bugs@gnutls.org\>.\
 Home page: https://www.gnutls.org

## COPYRIGHT

Copyright © 2001-2023 Free Software Foundation, Inc., and others.\
 Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.

## SEE ALSO

The full documentation for **gnutls** is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form visit

- https://www.gnutls.org/manual/