CryptoSys PKI Toolkit Manual
X509.MakeCRL Method
Creates an X.509 Certificate Revocation List (CRL)
Syntax
[C#]
public static int MakeCRL(
string crlFile,
string issuerCert,
string issuerKeyFile,
string password,
string revokedCertList,
string extensions,
X509.Options options
)
[VB.NET]
Public Shared Function MakeCRL ( _
crlFile As String, _
issuerCert As String, _
issuerKeyFile As String, _
password As String, _
revokedCertList As String, _
extensions As String, _
options As X509.Options _
) As Integer
Parameters
- crlFile
- name of new CRL file to be created
- issuerCert
- name of issuer's X.509 certificate file (or base64 representation)
- issuerKeyFile
- name of issuer's encrypted private key file
- password
- password for Issuer's encrypted private key file
- revokedCertList
- list of revoked certificates in format serialNumber,revocationDate; ... or the empty string "" for no revoked certificates. See the Remarks section below for more details
- extensions
- (optional) containing one or more attribute-values pairs separated by semicolons (;) or the empty string "". Valid attribute-value pairs are:
- lastUpdate=iso-date-string
- nextUpdate=iso-date-string
- options
- Type: X509.Options
Set as 0 to choose the default signature algorithm sha1WithRSAEncryption. To choose another signature algorithm, select one of the SigAlg_ options from X509.Options.
Return Value
If successful, the return value is zero; otherwise it returns a non-zero
error code.
Remarks
This creates a version 1 CRL file with no extensions or cRLReason's. The parameter
revokedCertList must be in the form
serialNumber,revocationDate;serialNumber,revocationDate; .... The serialNumber must either be a positive decimal integer (e.g.
123) or the number in hex format preceded by #x (e.g.
#x0102deadbeef). The revocation date must be in ISO date format (e.g.
2009-12-31T12:59:59Z). For example,
"1,2007-12-31; 2, 2009-12-31T12:59:59Z; 66000,2066-01-01; #x0102deadbeef,2010-02-28T01:01:59"
By default, the
lastUpdate time in the CRL is set to the time given by the system clock, and
nextUpdate time is left empty. You can specify your own times using the
lastUpdate and
nextUpdate attributes in the extensions parameter. Times, if specified, must be in ISO 8601 format and are always interpreted as GMT times whether or not you add a "Z".
Examples (VB.NET)
See
Example1
See Also
VB6/C equivalent: X509_MakeCRL
[Contents] [Index]