ocsp_validate_cert
ret = ocsp_validate_cert(env, ptr, len, sh,
int ocsp_validate_cert(struct iked *, void *, size_t, struct iked_sahdr,