crl

Documentation

Overview

Package crl exposes Certificate Revocation List generation functionality

Index

• func CreateGenericCRL(certList []pkix.RevokedCertificate, key crypto.Signer, ...) ([]byte, error)
• func NewCRLFromFile(serialList, issuerFile, keyFile []byte, expiryTime string) ([]byte, error)

Functions

func CreateGenericCRL

func CreateGenericCRL(certList []pkix.RevokedCertificate, key crypto.Signer, issuingCert *x509.Certificate, expiryTime time.Time) ([]byte, error)

CreateGenericCRL is a helper function that takes in all of the information above, and then calls the createCRL function. This outputs the bytes of the created CRL.

func NewCRLFromFile

func NewCRLFromFile(serialList, issuerFile, keyFile []byte, expiryTime string) ([]byte, error)

NewCRLFromFile takes in a list of serial numbers, one per line, as well as the issuing certificate of the CRL, and the private key. This function is then used to parse the list and generate a CRL