package crl

import "github.com/cloudflare/cfssl/crl"

Package crl exposes Certificate Revocation List generation functionality

Index ¶

• func CreateGenericCRL(certList []pkix.RevokedCertificate, key crypto.Signer, issuingCert *x509.Certificate, expiryTime time.Time) ([]byte, error)
• func NewCRLFromDB(certs []certdb.CertificateRecord, issuerCert *x509.Certificate, key crypto.Signer, expiryTime time.Duration) ([]byte, error)
• func NewCRLFromFile(serialList, issuerFile, keyFile []byte, expiryTime string) ([]byte, error)

Functions ¶

func CreateGenericCRL ¶

func CreateGenericCRL(certList []pkix.RevokedCertificate, key crypto.Signer, issuingCert *x509.Certificate, expiryTime time.Time) ([]byte, error)

CreateGenericCRL is a helper function that takes in all of the information above, and then calls the createCRL function. This outputs the bytes of the created CRL.

func NewCRLFromDB ¶

func NewCRLFromDB(certs []certdb.CertificateRecord, issuerCert *x509.Certificate, key crypto.Signer, expiryTime time.Duration) ([]byte, error)

NewCRLFromDB takes in a list of CertificateRecords, as well as the issuing certificate of the CRL, and the private key. This function is then used to parse the records and generate a CRL

func NewCRLFromFile ¶

func NewCRLFromFile(serialList, issuerFile, keyFile []byte, expiryTime string) ([]byte, error)

NewCRLFromFile takes in a list of serial numbers, one per line, as well as the issuing certificate of the CRL, and the private key. This function is then used to parse the list and generate a CRL

Source Files ¶

crl.go