CreateOcspResponseInput

Input for createOcspResponse.

interface CreateOcspResponseInput {
	readonly signerPrivateKey: CryptoKey;
	readonly signerCertificate: OcspCertificateSource;
	readonly responses: readonly CreateOcspSingleResponseInput[];
	readonly producedAt?: Date;
	readonly nonce?: Uint8Array;
	readonly hashAlgorithm?: OcspHashAlgorithm;
	readonly includedCertificates?: readonly OcspCertificateSource[];
}

Properties

• readonly signerPrivateKey: CryptoKey — Private key used to sign the response. Algorithm is inferred from the key.
• readonly signerCertificate: OcspCertificateSource — Certificate of the OCSP responder — used to build the responder ID (by key hash).
• readonly responses: readonly CreateOcspSingleResponseInput[] — Per-certificate status entries to include in the BasicOCSPResponse.
• readonly producedAt?: Date — Timestamp for the producedAt field. Defaults to new Date().
• readonly nonce?: Uint8Array — Nonce to echo back for replay protection.
• readonly hashAlgorithm?: OcspHashAlgorithm — Hash algorithm for CertID computation. Defaults to 'SHA-1'.
• readonly includedCertificates?: readonly OcspCertificateSource[] — Extra certificates to embed in the response (e.g. the responder's issuer chain).