Struct OcspConfig 

pub struct OcspConfig {
    pub enabled: bool,
    pub responder_url: Option<String>,
    pub cache_ttl_secs: u64,
    pub timeout_secs: u64,
    pub require_nonce: bool,
    pub soft_fail: bool,
}

OCSP configuration.

Loaded from the [ocsp] section of the Kipuka configuration file.

Fields

enabled: bool

Whether OCSP checking is enabled. Default: false.

responder_url: Option<String>

Override OCSP responder URL. When None, the AIA extension from the certificate is used (RFC 5280 §4.2.2.1).

cache_ttl_secs: u64

Cache TTL in seconds. Default: 300 (5 minutes).

timeout_secs: u64

HTTP timeout in seconds for OCSP requests. Default: 10.

require_nonce: bool

Whether to require a nonce in responses (RFC 6960 §4.4.1). Default: true.

soft_fail: bool

Soft-fail mode: if true, accept the certificate when the OCSP responder is unreachable. If false, reject. Default: false.

Trait Implementations

impl Clone for OcspConfig

fn clone(&self) -> OcspConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OcspConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OcspConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for OcspConfig

where OcspConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.