ssl_crl_cache(3)
π ssl_crl_cache β bestie's guide to the CRL cache π
okay so real quick before we dive in: this is ssl_crl_cache, a lil Erlang module from the ssl fam (that's the manual page name, keep up bestie π
). Sit down, get comfy, we're gonna talk about certificate revocation lists and honestly? iconic.
πΈ NAME πΈ
ssl_crl_cache β the CRL cache. yes. that's her. that's the whole name. short, sweet, slays.
β¨ DESCRIPTION β¨
So what is this girl doing? She implements an internal CRL (Certificate Revocation List) cache. Basically the memory-holder for your revocation lists so you're not out here re-fetching them every five seconds like a clown π.
And in addition to implementing the ssl_crl_cache_api behaviour, she also serves up the following functions. So it's giving "I do my job AND I have extra talents" β main character energy fr fr π.
π¦ DATA TYPES π¦
crl_src()
crl_src() ::
{file, file:filename()} | {der, [public_key:der_encoded()]}.
A source to input CRLs π like, where the CRLs come from. Two options: a file (yes, with file:filename()), or der flavored (a list of public_key:der_encoded()). Pick your fighter.
π FUNCTIONS π
delete(Entries) -> ok | {error, Reason}
delete(Entries) -> ok | {error, Reason}
when
Entries :: crl_src() | uri_string:uri_string(),
Reason :: ssl:reason().
Delete CRLs from the ssl applications local cache. Yep. Yeh. Gone. Poof π. Her Entries can be either a crl_src() or a uri_string:uri_string() β so you can delete by source or by URI, your call bestie. And she'll hand you back ok, or an {error, Reason} where Reason is an ssl:reason() if things go sideways π.
insert(DistPointURI, CRLSrc) -> ok | {error, Reason}
insert(DistPointURI, CRLSrc) -> ok | {error, Reason}
when
DistPointURI :: uri_string:uri_string(),
CRLSrc :: crl_src(),
Reason :: ssl:reason().
Insert CRLs into the ssl applications local cache, with or without a distribution point reference URI. So you're feeding her a DistPointURI (a uri_string:uri_string()) and a CRLSrc (a crl_src()), and she's popping those CRLs straight into the cache β distribution point reference URI optional, she's flexible like that π«Ά. Returns ok when it eats, or {error, Reason} with an ssl:reason() when it doesn't π.
no cap: if you're out here inserting and deleting CRLs without knowing your crl_src() types, that's a vibe check you're gonna fail. know your sources bestie π
π a lil sign-off π
This diva right here? Brought to you by Ericsson AB, living in ssl version 11.7.5, answering to the name ssl_crl_cache(3). Obsessed with her, honestly. Go forth and cache responsibly, queen πβ¨π
π¦ where this page comes from
- ubuntu stonking: erlang-doc 1:29.0.6+dfsg-1 Β· Apache-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms