X509 CRL

(x509-crl/create ca-cert ca-key issue-time next-update &keys {:rng rng :hash hash :padding padding})

Create a new empty CRL signed by the given CA.

(x509-crl/entries-count crl-obj)

Return the number of entries in the CRL.

(x509-crl/get-entry crl-obj index)

Return the CRL entry at the given `index`. Use `x509-crl/entries-count` to get the number of entries.

(x509-crl/is-revoked crl-obj cert-obj)

Check if the given `cert-obj` is revoked on the given `crl-obj`. Return true when the certificate is revoked.

(x509-crl/load blob)

Load a CRL from the DER or PEM encoded `blob`.

(x509-crl/load-file file-name)

Load a CRL from a file.

(x509-crl/next-update crl-obj)

Return the time the next CRL update is expected, as seconds since epoch. Return `nil` if the CRL has no nextUpdate field, which is optional.

(x509-crl/revoke crl ca-cert ca-key issue-time next-update entries &keys {:rng rng :hash hash :padding padding})

Update a CRL with new revoked entries, creating a new CRL. The original CRL is not modified.

(x509-crl/this-update crl-obj)

Return the time the CRL was issued, as seconds since epoch.

(x509-crl/to-der crl-obj)

Encode the CRL as DER binary data.

(x509-crl/to-pem crl-obj)

Encode the CRL as a PEM string.

(x509-crl/verify crl-obj pubkey)

Verify the CRL signature against the given public key. Returns true if the signature is valid.

(x509-crl-entry/create cert reason)

Create a CRL entry for the given certificate with a revocation reason.

(x509-crl-entry/reason crl-entry)

Return the revocation reason code for the CRL entry.
0: Unspecified
1: Key Compromise
2: CA Compromise
3: Affiliation Changed
4: Superseded
5: Cessation of Operation
6: Certificate Hold
8: Remove from CRL
9: Privilege Withdrawn
10: AA Compromise

(x509-crl-entry/revocation-date crl-entry)

Return the revocation date as seconds since epoch.

(x509-crl-entry/serial-number crl-entry)

Return the serial number of the revoked certificate.