OCSP_SIGNATURE_new
req->optionalSignature = OCSP_SIGNATURE_new();
if (!(req->optionalSignature = sig = OCSP_SIGNATURE_new()))
OCSP_SIGNATURE *OCSP_SIGNATURE_new(void);