crl

Documentation

Overview

Package crl exposes Certificate Revocation List generation functionality

Index

• func CreateGenericCRL(certList []pkix.RevokedCertificate, key crypto.Signer, ...) ([]byte, error)
• func NewCRLFromDB(certs []certdb.CertificateRecord, issuerCert *x509.Certificate, ...) ([]byte, error)
• func NewCRLFromFile(serialList, issuerFile, keyFile []byte, expiryTime string) ([]byte, error)

Functions

func CreateGenericCRL

func CreateGenericCRL(certList []pkix.RevokedCertificate, key crypto.Signer, issuingCert *x509.Certificate, expiryTime time.Time) ([]byte, error)

CreateGenericCRL is a helper function that takes in all of the information above, and then calls the createCRL function. This outputs the bytes of the created CRL.

func NewCRLFromDB

func NewCRLFromDB(certs []certdb.CertificateRecord, issuerCert *x509.Certificate, key crypto.Signer, expiryTime time.Duration) ([]byte, error)

NewCRLFromDB takes in a list of CertificateRecords, as well as the issuing certificate of the CRL, and the private key. This function is then used to parse the records and generate a CRL

func NewCRLFromFile

func NewCRLFromFile(serialList, issuerFile, keyFile []byte, expiryTime string) ([]byte, error)

NewCRLFromFile takes in a list of serial numbers, one per line, as well as the issuing certificate of the CRL, and the private key. This function is then used to parse the list and generate a CRL