X509.MakeCRL Method
Create an X.509 Certificate Revocation List (CRL).
Syntax
[C#]
public static int MakeCRL(
string crlFile,
string issuerCert,
string issuerKeyFile,
string password,
string revokedCertList,
string extensions,
SigAlgorithm sigAlg,
X509.CrlOptions opts
)
[VB.NET]
Public Shared Function MakeCRL ( _
crlFile As String, _
issuerCert As String, _
issuerKeyFile As String, _
password As String, _
revokedCertList As String, _
extensions As String, _
sigAlg As SigAlgorithm, _
opts As X509.CrlOptions _
) As Integer
Parameters
- crlFile
- name of new CRL file to be created
- issuerCert
- name of issuer's X.509 certificate file (or base64 representation)
- issuerKeyFile
- name of issuer's encrypted private key file
- password
- password for Issuer's encrypted private key file
- revokedCertList
- list of revoked certificates in format serialNumber,revocationDate; ... or the empty string "" for no revoked certificates. See the Remarks section below for more details
- extensions
- A list of attribute-value pairs separated by semicolons (;) or the empty string "". Valid attribute-value pairs are:
- lastUpdate=iso-date-string
- nextUpdate=iso-date-string
- sigAlg
- Type: SigAlgorithm
Signature algorithm.
- opts
- Type: X509.CrlOptions
Options
Return Value
If successful, the return value is zero; otherwise it returns a non-zero
error code.
Remarks
This creates a version 1 CRL file with no extensions or cRLReason's. The parameter
revokedCertList must be in the form
serialNumber,revocationDate;serialNumber,revocationDate; .... The serialNumber must either be a positive decimal integer (e.g.
123) or the number in hex format preceded by #x (e.g.
#x0102deadbeef). The revocation date must be in ISO date format (e.g.
2009-12-31T12:59:59Z). For example,
"1,2007-12-31; 2, 2009-12-31T12:59:59Z; 66000,2066-01-01; #x0102deadbeef,2010-02-28T01:01:59"
By default, the
lastUpdate time in the CRL is set to the time given by the system clock, and
nextUpdate time is left empty. You can specify your own times using the
lastUpdate and
nextUpdate attributes in the extensions parameter. Times, if specified, must be in ISO 8601 format and are always interpreted as GMT times whether or not you add a "Z".
See Also
VB6/C equivalent: X509_MakeCRL
[Contents] [Index]