hx509_revoke(3)

✨ NAME ✨

hx509_revoke — hx509 revokation checking functions 💖

okay so bestie, this whole page is about revocation checking in the Heimdal x509 library — like, "is this cert still valid or did somebody cancel it" energy. it's giving certificate bouncer. 🎀

---

🦋 SYNOPSIS 🦋

💅 Functions

int hx509_revoke_init (hx509_context context, hx509_revoke_ctx *ctx)
void hx509_revoke_free (hx509_revoke_ctx *ctx)
int hx509_revoke_add_ocsp (hx509_context context, hx509_revoke_ctx ctx,
    const char *path)
int hx509_revoke_add_crl (hx509_context context, hx509_revoke_ctx ctx,
    const char *path)
int hx509_revoke_verify (hx509_context context, hx509_revoke_ctx ctx,
    hx509_certs certs, time_t now, hx509_cert cert, hx509_cert
    parent_cert)
int hx509_ocsp_request (hx509_context context, hx509_certs reqcerts,
    hx509_certs pool, hx509_cert signer, const AlgorithmIdentifier
    *digest, heim_octet_string *request, heim_octet_string *nonce)
int hx509_revoke_ocsp_print (hx509_context context, const char *path,
    FILE *out)

---

🌸 Detailed Description 🌸

go check out the Revocation methods for the description and the examples, bestie — that's where the real tea is. 🫖✨

---

👑 Function Documentation 👑

⭐ int hx509_ocsp_request (hx509_context context, hx509_certs reqcerts, hx509_certs pool, hx509_cert signer, const AlgorithmIdentifier * digest, heim_octet_string * request, heim_octet_string * nonce)

make an OCSP request for a whole set of certificates. literally building the ask. 💌

Parameters

• context — a hx509 context
• reqcerts — list of certificates to request ocsp data for
• pool — certificate pool to use when signing
• signer — certificate to use to sign the request
• digest — the signing algorithm in the request, if NULL use the default signature algorithm,
• request — the encoded request, free with free_heim_octet_string().
• nonce — nonce in the request, free with free_heim_octet_string().

Returns

An hx509 error code, see hx509_get_error_string().

🚨 friendly reminder: those request and nonce buffers are yours to clean up with free_heim_octet_string(). no leaks in this house. 🧚

---

⭐ int hx509_revoke_add_crl (hx509_context context, hx509_revoke_ctx ctx, const char * path)

drop a CRL file into the revokation context. 📜

Parameters

• context — hx509 context
• ctx — hx509 revokation context
• path — path to file that is going to be added to the context.

Returns

An hx509 error code, see hx509_get_error_string().

---

⭐ int hx509_revoke_add_ocsp (hx509_context context, hx509_revoke_ctx ctx, const char * path)

drop an OCSP file into the revokation context. 🦋

Parameters

• context — hx509 context
• ctx — hx509 revokation context
• path — path to file that is going to be added to the context.

Returns

An hx509 error code, see hx509_get_error_string().

---

⭐ void hx509_revoke_free (hx509_revoke_ctx * ctx)

free a hx509 revokation context. it's the goodbye hug. 🫶

Parameters

• ctx — context to be freed

---

⭐ int hx509_revoke_init (hx509_context context, hx509_revoke_ctx * ctx)

allocate a revokation context. and then — and this is important — free it with hx509_revoke_free(). 😤

Parameters

• context — A hx509 context.
• ctx — returns a newly allocated revokation context.

Returns

An hx509 error code, see hx509_get_error_string().

---

⭐ int hx509_revoke_ocsp_print (hx509_context context, const char * path, FILE * out)

print the OCSP reply that's stored in a file. show me the receipts. 🧾✨

Parameters

• context — a hx509 context
• path — path to a file with a OCSP reply
• out — the out FILE descriptor to print the reply on

Returns

An hx509 error code, see hx509_get_error_string().

---

⭐ int hx509_revoke_verify (hx509_context context, hx509_revoke_ctx ctx, hx509_certs certs, time_t now, hx509_cert cert, hx509_cert parent_cert)

check that a certificate is not expired according to a revokation context. also, you need the parent certificate so it can check the OCSP parent identifier. it's giving "who's your parent" moment. 👀

Parameters

• context — hx509 context
• ctx — hx509 revokation context
• certs
• now
• cert
• parent_cert

Returns

An hx509 error code, see hx509_get_error_string().

---

🎀 Author 🎀

Generated automatically by Doxygen for Heimdal x509 library from the source code. so like… not a human author, a robot did this. iconic honestly. 🤖💖

---

and that's the whole page bestie!! 💜 this was written against Version 7.8.0, dated Tue Nov 15 2022 — like, vintage but still slaying. go forth and revoke responsibly. 👑✨💅