GSP
Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Support
Contact Us
Online Help
Handbooks
Domain Status
Man Pages

FAQ
Virtual Servers
Pricing
Billing
Technical

Network
Facilities
Connectivity
Topology Map

Miscellaneous
Server Agreement
Year 2038
Credits
 

USA Flag

 

 

Man Pages


Manual Reference Pages  -  SSL_CRL_CACHE_API (3)

NAME

ssl_crl_cache_api - API for a SSL/TLS CRL (Certificate Revocation List) cache.

CONTENTS

Description
Exports

DESCRIPTION

When SSL/TLS performs certificate path validation according to RFC 5280 it should also perform CRL validation checks. To enable the CRL checks the application needs access to CRLs. A database of CRLs can be set up in many different ways. This module provides the behavior of the API needed to integrate an arbitrary CRL cache with the erlang ssl application. It is also used by the application itself to provide a simple default implementation of a CRL cache.

DATA TYPES

The following data types are used in the functions below:

cache_ref() =: opaque()
dist_point() =: #’DistributionPoint’{} see X509 certificates records

EXPORTS

fresh_crl(DistributionPoint, CRL) -> FreshCRL

Types:

DistributionPoint = dist_point()
CRL = [public_key:der_encoded()]
FreshCRL = [public_key:der_encoded()]

fun fresh_crl/2 will be used as input option update_crl to public_key:pkix_crls_validate/3

lookup(DistributionPoint, DbHandle) -> not_available | CRLs

Types:

DistributionPoint = dist_point()
DbHandle = cache_ref()
CRLs = [public_key:der_encoded()]

Lookup the CRLs belonging to the distribution point Distributionpoint. This function may choose to only look in the cache or to follow distribution point links depending on how the cache is administrated.

select(Issuer, DbHandle) -> CRLs

Types:

Issuer = public_key:issuer_name()
DbHandle = cache_ref()

Select the CRLs in the cache that are issued by Issuer

Search for    or go to Top of page |  Section 3 |  Main Index


Ericsson AB SSL_CRL_CACHE_API (3) ssl 7.3

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.