1 files changed, 36 insertions, 1 deletions

diff --git a/src/lib/libtls/tls.h b/src/lib/libtls/tls.h
index 6cc3d0d6f8..3929cb848e 100644
--- a/src/lib/libtls/tls.h
+++ b/src/lib/libtls/tls.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls.h,v 1.38 2016/09/13 13:40:58 tedu Exp $ */
+/* $OpenBSD: tls.h,v 1.39 2016/11/02 15:18:42 beck Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -41,6 +41,31 @@ extern "C" {
 #define TLS_WANT_POLLIN         -2
 #define TLS_WANT_POLLOUT        -3
 
+/* RFC 6960 Section 2.3 */
+#define TLS_OCSP_RESPONSE_SUCCESSFUL            0
+#define TLS_OCSP_RESPONSE_MALFORMED             1
+#define TLS_OCSP_RESPONSE_INTERNALERROR         2
+#define TLS_OCSP_RESPONSE_TRYLATER              3
+#define TLS_OCSP_RESPONSE_SIGREQUIRED           4
+#define TLS_OCSP_RESPONSE_UNAUTHORIZED          5
+
+/* RFC 6960 Section 2.2 */
+#define TLS_OCSP_CERT_GOOD                      0
+#define TLS_OCSP_CERT_REVOKED                   1
+#define TLS_OCSP_CERT_UNKNOWN                   2
+
+/* RFC 5280 Section 5.3.1 */
+#define TLS_CRL_REASON_UNSPECIFIED              0
+#define TLS_CRL_REASON_KEY_COMPROMISE           1
+#define TLS_CRL_REASON_CA_COMPROMISE            2
+#define TLS_CRL_REASON_AFFILIATION_CHANGED      3
+#define TLS_CRL_REASON_SUPERSEDED               4
+#define TLS_CRL_REASON_CESSATION_OF_OPERATION   5
+#define TLS_CRL_REASON_CERTIFICATE_HOLD         6
+#define TLS_CRL_REASON_REMOVE_FROM_CRL          8
+#define TLS_CRL_REASON_PRIVILEGE_WITHDRAWN      9
+#define TLS_CRL_REASON_AA_COMPROMISE            10
+
 struct tls;
 struct tls_config;
 
@@ -138,6 +163,16 @@ const char *tls_conn_version(struct tls *_ctx);
 
 uint8_t *tls_load_file(const char *_file, size_t *_len, char *_password);
 
+int tls_ocsp_process_response(struct tls *_ctx, const unsigned char *_response, size_t _size);
+int tls_peer_ocsp_cert_status(struct tls *_ctx);
+int tls_peer_ocsp_crl_reason(struct tls *_ctx);
+time_t tls_peer_ocsp_next_update(struct tls *_ctx);
+int tls_peer_ocsp_response_status(struct tls *_ctx);
+const char *tls_peer_ocsp_result(struct tls *_ctx);
+time_t tls_peer_ocsp_revocation_time(struct tls *_ctx);
+time_t tls_peer_ocsp_this_update(struct tls *_ctx);
+const char *tls_peer_ocsp_url(struct tls *_ctx);
+
 #ifdef __cplusplus
 }
 #endif