ocsp_verify_signer
ret = ocsp_verify_signer(signer, 1, st, flags, untrusted, &chain);
return ocsp_verify_signer(signer, 0, store, flags,