Setting bytes of OCSP_ResponseData() causes BER_decoding_Error when OCSPResponse status is revoked

[wasmachensachen98]

Setting bytes of OCSP_ResponseData() causes BER_decoding_Error when OCSPResponse status is revoked

[wasmachensachen98]

I believe it could be caused by setting the revocation reason. Because similarly:

from datetime import datetime, timedelta

new_cert_status = OCSP_RevokedInfo()
revocation_time = datetime.utcnow() - timedelta(days=1)
new_cert_status.revocationTime = ASN1_GENERALIZED_TIME(revocation_time.strftime('%Y%m%d%H%M%SZ'))
# When adding revocationReason the fails to parse when sending
# new_cert_status.revocationReason = X509_ExtReasonCode(cRLReason=ASN1_ENUMERATED(0))
ocsp_cert_status = OCSP_CertStatus(certStatus=new_cert_status)

With the revocation reason added i get the parsing error when sending the ocsp

Error parsing response 19224:error:0D084078:asn1 encoding routines:asn1_template_ex_d2i:explicit tag not constructed:../openssl-1.1.1i/crypto/asn1/tasn_dec.c:489:Field=revocationReason, Type=OCSP_REVOKEDINFO 19224:error:0D08303A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error:../openssl-1.1.1i/crypto/asn1/tasn_dec.c:637: 19224:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:../openssl-1.1.1i/crypto/asn1/tasn_dec.c:272:Field=value.revoked, Type=OCSP_CERTSTATUS 19224:error:0D08303A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error:../openssl-1.1.1i/crypto/asn1/tasn_dec.c:646:Field=certStatus, Type=OCSP_SINGLERESP 19224:error:0D08303A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error:../openssl-1.1.1i/crypto/asn1/tasn_dec.c:614:Field=responses, Type=OCSP_RESPDATA 19224:error:0D08303A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error:../openssl-1.1.1i/crypto/asn1/tasn_dec.c:646:Field=tbsResponseData, Type=OCSP_BASICRESP 19224:error:0D0C706E:asn1 encoding routines:ASN1_item_unpack:decode error:../openssl-1.1.1i/crypto/asn1/asn_pack.c:60:

I hope I could help.

[gpotter2]

fixed in #4240