Struct rcgen::CertificateRevocationList

pub struct CertificateRevocationList { /* private fields */ }

A certificate revocation list (CRL)

Example

extern crate rcgen;
use rcgen::*;

// Generate a CRL issuer.
let mut issuer_params = CertificateParams::new(vec!["crl.issuer.example.com".to_string()]);
issuer_params.is_ca = IsCa::Ca(BasicConstraints::Unconstrained);
issuer_params.key_usages = vec![KeyUsagePurpose::KeyCertSign, KeyUsagePurpose::DigitalSignature, KeyUsagePurpose::CrlSign];
let issuer = Certificate::from_params(issuer_params).unwrap();
// Describe a revoked certificate.
let revoked_cert = RevokedCertParams{
  serial_number: SerialNumber::from(9999),
  revocation_time: date_time_ymd(2024, 06, 17),
  reason_code: Some(RevocationReason::KeyCompromise),
  invalidity_date: None,
};
// Create a CRL signed by the issuer, revoking revoked_cert.
let crl = CertificateRevocationListParams{
  this_update: date_time_ymd(2023, 06, 17),
  next_update: date_time_ymd(2024, 06, 17),
  crl_number: SerialNumber::from(1234),
  issuing_distribution_point: None,
  revoked_certs: vec![revoked_cert],
  alg: &PKCS_ECDSA_P256_SHA256,
  key_identifier_method: KeyIdMethod::Sha256,
};
let crl = CertificateRevocationList::from_params(crl).unwrap();
println!("{}", crl.serialize_pem_with_signer(&issuer).unwrap());

Implementations

impl CertificateRevocationList

pub fn from_params( params: CertificateRevocationListParams ) -> Result<Self, RcgenError>

Generates a new certificate revocation list (CRL) from the given parameters.

pub fn get_params(&self) -> &CertificateRevocationListParams

Returns the certificate revocation list (CRL) parameters.

pub fn serialize_der_with_signer( &self, ca: &Certificate ) -> Result<Vec<u8>, RcgenError>

Serializes the certificate revocation list (CRL) in binary DER format, signed with the issuing certificate authority’s key.

pub fn serialize_pem_with_signer( &self, ca: &Certificate ) -> Result<String, RcgenError>

Serializes the certificate revocation list (CRL) in ASCII PEM format, signed with the issuing certificate authority’s key.