Struct CrlStore 

pub struct CrlStore { /* private fields */ }

An in-memory CRL (Certificate Revocation List) store.

For production deployments, the TLS layer should handle CRL/OCSP. This provides an application-layer defence-in-depth check against known-revoked serial numbers.

Implementations

impl CrlStore

pub fn new() -> Self

Create a new empty CRL store.

pub fn add_revoked(&self, issuer_dn: &str, serial_hex: &str)

Mark a certificate serial number as revoked for a given issuer DN.

pub fn check(&self, issuer_dn: &str, serial_hex: &str) -> RevocationStatus

Check if a certificate (by issuer DN and serial hex) is revoked.

pub fn check_der(&self, cert_der: &[u8]) -> RevocationStatus

Check a DER-encoded certificate against the CRL store.

pub fn revoked_count(&self) -> usize

Total count of revoked serial numbers across all issuers.

pub fn clear_issuer(&self, issuer_dn: &str)

Remove all entries for an issuer.

Trait Implementations

impl Clone for CrlStore

fn clone(&self) -> CrlStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CrlStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CrlStore

fn default() -> CrlStore

Returns the “default value” for a type.