NAME

OpenXPKI::Server::NICE::Role::RevokeCertificate

Instance Parameters

use_revocation_id

Boolean, activate the revocation_id feature. Deprecated

no_pending_state

Boolean, if set to true the certificate status is directly set to 'REVOKED' instead of 'CRL_ISSUANCE_PENDING'. Note that this disables the option to rebuild a CRL when new revocations are due based on the certificate status.

Methods

revokeCertificate

Set the certificate status and revocation details to mark a certificate as revoked. Identifier is mandatory, others are optional, times must be given as epoch. Defaults are given in brackets.

Returns undef if the certificate was NOT found revoked after database update. If use_revocation_id is set, returns a hash with revocation_id set, otherwise returns a literal 1.

cert_identifier
reason code (unspecified)
revocation time (now)
invalidity time (not set)
hold instruction code (not set)

checkForRevocation

Check if a certificate is marked revoked.

Returns 0 if the certificate is not revoked.

Returns the revocation_id if this feature is active. Otherwise returns a literal '1'.

cert_identifier