page_revoke(3)

📦
version 7.8.0 · 3 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, epel 10, epel 9, fedora 43, fedora 44

✨ NAME ✨

okay bestie 💖 welcome to page_revoke(3) from the Heimdal x509 library 👑 this page is literally about revocation methods, and it's giving "two ways to say bye to a key, and both matter."

There are two revocation method for PKIX/X.509: CRL and OCSP. 🎀

Revocation is needed if the private key is lost and stolen. 😭 Depending on how picky you are, you might want to make revocation for destroyed private keys too (smartcard broken), but that should not be a problem. 🫶

Now the tea ☕:

  • CRL — is a list of certifiates that have expired. 💀
  • OCSP — is an online checking method where the requestor sends a list of certificates to the OCSP server to return a signed reply if they are valid or not. 🦋 Some services sends a OCSP reply as part of the hand-shake to make the revoktion decision simpler/faster for the client. ✨

that's the whole page, bestie 🫶 this was page_revoke(3) from the Heimdal x509 library, Version 7.8.0, Tue Nov 15 2022. 💅 no cap, stay revoked. 💖

📦 where this page comes from