20152015Ericsson AB. All Rights Reserved.
The contents of this file are subject to the Erlang Public License,
Version 1.1, (the "License"); you may not use this file except in
compliance with the License. You should have received a copy of the
Erlang Public License along with this software. If not, it can be
retrieved online at http://www.erlang.org/.
Software distributed under the License is distributed on an "AS IS"
basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See
the License for the specific language governing rights and limitations
under the License.
ssl_crl_cache_apissl_crl_cache_api.xmlssl_crl_cache_apiAPI for a SSL/TLS CRL (Certificate Revocation List) cache.
When SSL/TLS performs certificate path validation according to
RFC 5280
it should also perform CRL validation checks. To enable the CRL
checks the application needs access to CRLs. A database of CRLs
can be set up in many different ways. This module provides the
behavior of the API needed to integrate an arbitrary CRL cache
with the erlang ssl application. It is also used by the
application itself to provide a simple default implementation of
a CRL cache.
DATA TYPES
The following data types are used in the functions below:
cache_ref() = opaque()dist_point() = #'DistributionPoint'{} see X509 certificates recordsfresh_crl(DistributionPoint, CRL) -> FreshCRLfun fresh_crl/2 will be used as input option update_crl to
public_key:pkix_crls_validate/3 DistributionPoint = dist_point() CRL = [public_key:der_encoded()] FreshCRL = [public_key:der_encoded()]
fun fresh_crl/2 will be used as input option update_crl to
public_key:pkix_crls_validate/3
Lookup the CRLs belonging to the distribution point Distributionpoint.
This function may choose to only look in the cache or to follow distribution point
links depending on how the cache is administrated.
select(Issuer, DbHandle) -> CRLs Select the CRLs in the cache that are issued by Issuer Issuer = public_key:issuer_name() DbHandle = cache_ref()
Select the CRLs in the cache that are issued by Issuer