From e90df98684c00a1ab20fca6d2398bfea3a043bf6 Mon Sep 17 00:00:00 2001 From: Ingela Anderton Andin Date: Tue, 1 Apr 2014 16:02:33 +0200 Subject: public_key: Update outdated links --- lib/public_key/doc/src/cert_records.xml | 4 ++-- lib/public_key/doc/src/part.xml | 4 ++-- lib/public_key/doc/src/public_key.xml | 12 ++++++------ 3 files changed, 10 insertions(+), 10 deletions(-) (limited to 'lib/public_key/doc') diff --git a/lib/public_key/doc/src/cert_records.xml b/lib/public_key/doc/src/cert_records.xml index 79e5cb219d..397c13b463 100644 --- a/lib/public_key/doc/src/cert_records.xml +++ b/lib/public_key/doc/src/cert_records.xml @@ -5,7 +5,7 @@
2008 - 2013 + 2014 Ericsson AB, All Rights Reserved @@ -39,7 +39,7 @@ The intent is to describe the data types and not to specify the meaning of each component for this we refer you to RFC 5280 and - PKCS-10. + PKCS-10.

Use the following include directive to get access to the diff --git a/lib/public_key/doc/src/part.xml b/lib/public_key/doc/src/part.xml index 51e628aa90..73146c8e2a 100644 --- a/lib/public_key/doc/src/part.xml +++ b/lib/public_key/doc/src/part.xml @@ -5,7 +5,7 @@

2008 - 2013 + 2014 Ericsson AB, All Rights Reserved @@ -34,7 +34,7 @@

This application provides an API to public key infrastructure from RFC 5280 (X.509 certificates) and public key formats defined by - the + the PKCS-standard

diff --git a/lib/public_key/doc/src/public_key.xml b/lib/public_key/doc/src/public_key.xml index fc3479cb64..61ce9dd3f6 100644 --- a/lib/public_key/doc/src/public_key.xml +++ b/lib/public_key/doc/src/public_key.xml @@ -5,7 +5,7 @@
2008 - 2013 + 2014 Ericsson AB, All Rights Reserved @@ -48,12 +48,12 @@ Supports RFC 5280 - Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile - Supports PKCS-1 - RSA Cryptography Standard + Supports PKCS-1 - RSA Cryptography Standard Supports DSS- Digital Signature Standard (DSA - Digital Signature Algorithm) - Supports PKCS-3 - Diffie-Hellman Key Agreement Standard - Supports PKCS-5 - Password-Based Cryptography Standard - Supports PKCS-8 - Private-Key Information Syntax Standard - Supports PKCS-10 - Certification Request Syntax Standard + Supports PKCS-3 - Diffie-Hellman Key Agreement Standard + Supports PKCS-5 - Password-Based Cryptography Standard + Supports PKCS-8 - Private-Key Information Syntax Standard + Supports PKCS-10 - Certification Request Syntax Standard -- cgit v1.2.3 From 6560f6c6d5b45bf6994fa2f1130eb23bc327d599 Mon Sep 17 00:00:00 2001 From: Ingela Anderton Andin Date: Wed, 2 Apr 2014 17:13:25 +0200 Subject: public_key: Document issuer_fun option to pkix_crls_validate/3 --- lib/public_key/doc/src/public_key.xml | 29 ++++++++++++++++++++++++----- 1 file changed, 24 insertions(+), 5 deletions(-) (limited to 'lib/public_key/doc') diff --git a/lib/public_key/doc/src/public_key.xml b/lib/public_key/doc/src/public_key.xml index 61ce9dd3f6..172a2faba0 100644 --- a/lib/public_key/doc/src/public_key.xml +++ b/lib/public_key/doc/src/public_key.xml @@ -461,11 +461,14 @@

The fun should be defined as:

-fun(OtpCert :: #'OTPCertificate'{}, Event :: {bad_cert, Reason :: atom()} | - {extension, #'Extension'{}}, +fun(OtpCert :: #'OTPCertificate'{}, + Event :: {bad_cert, Reason :: atom()} | + {extension, #'Extension'{}}, InitialUserState :: term()) -> - {valid, UserState :: term()} | {valid_peer, UserState :: term()} | - {fail, Reason :: term()} | {unknown, UserState :: term()}. + {valid, UserState :: term()} | + {valid_peer, UserState :: term()} | + {fail, Reason :: term()} | + {unknown, UserState :: term()}.

If the verify callback fun returns {fail, Reason}, the @@ -511,7 +514,8 @@ fun(OtpCert :: #'OTPCertificate'{}, Event :: {bad_cert, Reason :: atom()} |

The fun has the following type spec:

- fun(#'DistributionPoint'{}, #'CertificateList'{}) -> #'CertificateList'{} + fun(#'DistributionPoint'{}, #'CertificateList'{}) -> + #'CertificateList'{}

The fun should use the information in the distribution point to acesses the lates possible version of the CRL. If this fun is not specified @@ -519,6 +523,21 @@ fun(OtpCert :: #'OTPCertificate'{}, Event :: {bad_cert, Reason :: atom()} |

fun(_DP, CRL) -> CRL end + + {issuer_fun, fun()} + +

The fun has the following type spec:

+ + +fun(#'DistributionPoint'{}, #'CertificateList'{}, + {rdnSequence,[#'AttributeTypeAndValue'{}]}, term()) -> + {ok, #'OTPCertificate'{}, [der_encoded]} + +

The fun should return the Root certificate and certificate chain + that has signed the CRL. +

+ fun(DP, CRL, Issuer, UserState) -> {ok, RootCert, CertChain} + -- cgit v1.2.3