---
name: "libressl-OCSP_CRLID_new"
section: "3"
platform: "linux"
package: "libressl"
version: "4.4.0-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/libressl-OCSP_CRLID_new"
---

# libressl-OCSP\_CRLID\_new(3)

OCSP CRL extension

## NAME

**OCSP\_CRLID\_new**, **OCSP\_CRLID\_free**, **OCSP\_crlID\_new** – OCSP CRL extension

## SYNOPSIS

Crypto Library (libcrypto, -lcrypto)

**#include \<openssl/ocsp.h\>**

*OCSP\_CRLID* *\**\

**OCSP\_CRLID\_new**(*void*);

*void*\

**OCSP\_CRLID\_free**(*OCSP\_CRLID \*crlid*);

*X509\_EXTENSION* *\**\

**OCSP\_crlID\_new**(*const char \*url*, *long \*number*, *char \*time*);

## DESCRIPTION

If a client asks about the validity of a certificate and it turns out to be invalid, the responder may optionally communicate which certificate revocation list the certificate was found on. The required data is stored as an ASN.1 *CrlID* structure in the singleExtensions field of the *SingleResponse* structure. The *CrlID* is represented by an *OCSP\_CRLID* object, which will be stored inside the *OCSP\_SINGLERESP* object documented in OCSP\_SINGLERESP\_new(3).

**OCSP\_CRLID\_new**() allocates and initializes an empty *OCSP\_CRLID* object. **OCSP\_CRLID\_free**() frees *crlid*.

**OCSP\_crlID\_new**() accepts the *url* at which the CRL is available, the CRL *number*, and/or the *time* at which the CRL was created. Each argument can be NULL, in which case the respective field is omitted. The resulting *CrlID* structure is encoded in ASN.1 using X509V3\_EXT\_i2d(3) with criticality 0.

## RETURN VALUES

**OCSP\_CRLID\_new**() returns a new *OCSP\_CRLID* object or NULL if an error occurred.

**OCSP\_crlID\_new**() returns a new *X509\_EXTENSION* object or NULL if an error occurred.

## SEE ALSO

OCSP\_REQUEST\_new(3), OCSP\_resp\_find\_status(3), OCSP\_response\_status(3), X509\_EXTENSION\_new(3)

## STANDARDS

RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol, section 4.4.2: CRL References

## HISTORY

**OCSP\_CRLID\_new**(), **OCSP\_CRLID\_free**(), and **OCSP\_crlID\_new**() first appeared in OpenSSL 0.9.7 and have been available since OpenBSD 3.2.

## CAVEATS

The function names **OCSP\_CRLID\_new**() and **OCSP\_crlID\_new**() only differ in case.