Certificate Revocation Lists (CRL)

Certificate Revocation Lists (CRL) are lists of certifications that have been actively expired before their natural expiration date. This section describes the functions that deal with CRL files.

CST_import_CRL

int CST_import_CRL (CST * st, FILE * file)

Import Certificate Revocation List from file (PEM). The related certificates stored inside the database are checked and revoked accordingly.

Parameters

• st Pointer to storage structure
• file Input file (PEM encoded)

Returns

• Error code

Errors

• CST_ERROR_CRL_NOT_VALID
• Refer to CST_import_cert (5.2) errors.

CST_import_CRL_DER

int CST_import_CRL_DER (CST * st, FILE * file)

Import Certificate Revocation List from file (DER). The related certificates stored inside the database are checked and revoked accordingly.

Parameters

• st Pointer to storage structure
• file Input file (DER encoded)

Returns

• Error code

Errors

• CST_ERROR_CRL_NOT_VALID
• Refer to CST_import_cert (5.2) errors.

CST_get_all_crl

GSList* CST_get_all_crl (CST * st)

Return all CRLs from storage

Parameters

• st Pointer to storage structure

Returns

• List of CRL storage IDs. User is responsible to free this object using g_slist_free().
• NULL if some error ocurred.

Errors

• CST_ERROR_PARAM_INCORRECT (if storage is NULL)

CST_delete_crl

int CST_delete_crl (CST * st, const cst_t_seqnum crlID)

Remove CRL from storage. The related certificates stored inside the database are checked and unrevoked accordingly.

Parameters

• st Pointer to storage structure
• crlID CRL ID

Returns

• Error code.

Errors

• CST_ERROR_PARAM_INCORRECT (if storage or crlID is NULL)
• CST_ERROR_NOT_FOUND

CST_get_CRL

X509_CRL* CST_get_CRL (CST * st, const cst_t_seqnum crlID)

Get CRL by crlID

Parameters

• st Pointer to storage structure
• crlID CRL ID

Returns

• X509_CRL structure. User is responsible to free this object using X509_CRL_free().
• NULL if not found.

Errors

• CST_ERROR_PARAM_INCORRECT (if storage or crlID is NULL)
• CST_ERROR_NOT_FOUND