ssl_crl_cache(3)

πŸ“¦
version 29.0.6 Β· 3 versions
, in ubuntu stonking

πŸ’– ssl_crl_cache β€” bestie's guide to the CRL cache πŸ’–

okay so real quick before we dive in: this is ssl_crl_cache, a lil Erlang module from the ssl fam (that's the manual page name, keep up bestie πŸ’…). Sit down, get comfy, we're gonna talk about certificate revocation lists and honestly? iconic.


🌸 NAME 🌸

ssl_crl_cache β€” the CRL cache. yes. that's her. that's the whole name. short, sweet, slays.


✨ DESCRIPTION ✨

So what is this girl doing? She implements an internal CRL (Certificate Revocation List) cache. Basically the memory-holder for your revocation lists so you're not out here re-fetching them every five seconds like a clown πŸ™ˆ.

And in addition to implementing the ssl_crl_cache_api behaviour, she also serves up the following functions. So it's giving "I do my job AND I have extra talents" β€” main character energy fr fr πŸ‘‘.


πŸ¦‹ DATA TYPES πŸ¦‹

crl_src()

crl_src() ::
          {file, file:filename()} | {der, [public_key:der_encoded()]}.

A source to input CRLs πŸ’– like, where the CRLs come from. Two options: a file (yes, with file:filename()), or der flavored (a list of public_key:der_encoded()). Pick your fighter.


πŸ’… FUNCTIONS πŸ’…

delete(Entries) -> ok | {error, Reason}

delete(Entries) -> ok | {error, Reason}
                when
                    Entries :: crl_src() | uri_string:uri_string(),
                    Reason :: ssl:reason().

Delete CRLs from the ssl applications local cache. Yep. Yeh. Gone. Poof πŸŽ€. Her Entries can be either a crl_src() or a uri_string:uri_string() β€” so you can delete by source or by URI, your call bestie. And she'll hand you back ok, or an {error, Reason} where Reason is an ssl:reason() if things go sideways 😭.

insert(DistPointURI, CRLSrc) -> ok | {error, Reason}

insert(DistPointURI, CRLSrc) -> ok | {error, Reason}
                when
                    DistPointURI :: uri_string:uri_string(),
                    CRLSrc :: crl_src(),
                    Reason :: ssl:reason().

Insert CRLs into the ssl applications local cache, with or without a distribution point reference URI. So you're feeding her a DistPointURI (a uri_string:uri_string()) and a CRLSrc (a crl_src()), and she's popping those CRLs straight into the cache β€” distribution point reference URI optional, she's flexible like that 🫢. Returns ok when it eats, or {error, Reason} with an ssl:reason() when it doesn't πŸ˜”.


no cap: if you're out here inserting and deleting CRLs without knowing your crl_src() types, that's a vibe check you're gonna fail. know your sources bestie πŸ’œ

🌈 a lil sign-off 🌈

This diva right here? Brought to you by Ericsson AB, living in ssl version 11.7.5, answering to the name ssl_crl_cache(3). Obsessed with her, honestly. Go forth and cache responsibly, queen πŸ‘‘βœ¨πŸ’–

πŸ“¦ where this page comes from