ssl_crl_cache_api

ssl_crl_cache_api

Module

ssl_crl_cache_api

Module summary

API for a SSL/TLS CRL (Certificate Revocation List) cache.

Description

When SSL/TLS performs certificate path validation according to RFC 5280 it should also perform CRL validation checks. To enable the CRL checks the application needs access to CRLs. A database of CRLs can be set up in many different ways. This module provides the behavior of the API needed to integrate an arbitrary CRL cache with the erlang ssl application. It is also used by the application itself to provide a simple default implementation of a CRL cache.

Data types

The following data types are used in the functions below:

cache_ref() =
opaque()
登录查看完整内容