X509_CRL_NEW(3)

💖 NAME 💖

okay so this is the X509_CRL_NEW(3) page from the Library Functions Manual, and it's literally the group chat for X.509 certificate revocation lists. The whole crew is:

• X509_CRL_new
• X509_CRL_dup
• X509_CRL_up_ref
• X509_CRL_free
• X509_CRL_INFO_new
• X509_CRL_INFO_free

and together they're all about X.509 certificate revocation lists. periodt. 🎀

✨ SYNOPSIS ✨

#include <openssl/x509.h>

X509_CRL *
X509_CRL_new(void);

X509_CRL *
X509_CRL_dup(X509_CRL *crl);

int
X509_CRL_up_ref(X509_CRL *crl);

void
X509_CRL_free(X509_CRL *crl);

X509_CRL_INFO *
X509_CRL_INFO_new(void);

void
X509_CRL_INFO_free(X509_CRL_INFO *crl_info);

🦋 DESCRIPTION 🦋

okay bestie, here's the tea. Each function has main character energy of its own, and honestly they ate:

• X509_CRL_new() — allocates and initializes an empty X509_CRL object. That object represents an ASN.1 CertificateList structure defined in RFC 5280 section 5.1. It can hold a pointer to an X509_CRL_INFO object (more on that below) together with a cryptographic signature and information about the signature algorithm used. The reference count is set to 1. 👑
• X509_CRL_dup() — creates a deep copy of crl. No cap, a whole duplicate. 🪞
• X509_CRL_up_ref() — increments the reference count of crl by 1. Slay, the refcount goes up. ✨
• X509_CRL_free() — decrements the reference count of crl by 1. If the reference count reaches 0, it frees crl. So it's giving cleanup era. 🧹
• X509_CRL_INFO_new() — allocates and initializes an empty X509_CRL_INFO object. This one represents an ASN.1 TBSCertList structure defined in RFC 5280 section 5.1. It is used inside the X509_CRL object and can hold:
  • a list of revoked certificates
  • an issuer name
  • the time the list was issued
  • the time when the next update of the list is due
  • optional extensions

iconic container behavior, honestly. 🫶

• X509_CRL_INFO_free() — frees crl_info. Bye bestie. 💅

🌈 RETURN VALUES 🌈

vibe check on what comes back:

• X509_CRL_new(), X509_CRL_dup(), and X509_CRL_INFO_new() return the new X509_CRL or X509_CRL_INFO object, respectively, or NULL if an error occurs. 🫠
• X509_CRL_up_ref() returns 1 on success or 0 on error. highkey simple as that. 💯

🎀 SEE ALSO 🎀

lowkey required reading, fr fr. not me having a whole reading list for CRLs 💀:

• ACCESS_DESCRIPTION_new(3)
• AUTHORITY_KEYID_new(3)
• d2i_X509_CRL(3)
• DIST_POINT_new(3)
• PEM_read_X509_CRL(3)
• X509_CRL_digest(3)
• X509_CRL_get0_by_serial(3)
• X509_CRL_get0_lastUpdate(3)
• X509_CRL_get0_signature(3)
• X509_CRL_get_ext(3)
• X509_CRL_get_ext_d2i(3)
• X509_CRL_get_issuer(3)
• X509_CRL_get_version(3)
• X509_CRL_match(3)
• X509_CRL_print(3)
• X509_CRL_sign(3)
• X509_EXTENSION_new(3)
• X509_INFO_new(3)
• X509_load_crl_file(3)
• X509_new(3)
• X509_OBJECT_get0_X509_CRL(3)
• X509_REVOKED_new(3)
• X509_STORE_CTX_set0_crls(3)
• X509_STORE_get1_crls(3)

⭐ STANDARDS ⭐

RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, section 5: CRL and CRL Extensions Profile. That's the source material, iykyk. 📚

💜 HISTORY 💜

• X509_CRL_new(), X509_CRL_free(), X509_CRL_INFO_new(), and X509_CRL_INFO_free() first appeared in SSLeay 0.4.4. 🧚
• X509_CRL_dup() first appeared in SSLeay 0.5.1. 🦋
• These functions have been available since OpenBSD 2.4. 🐡
• X509_CRL_up_ref() first appeared in OpenSSL 1.1.0 and has been available since OpenBSD 6.3. 🔥

---

🎀 that's the whole page, bestie. source/version: Debian; date: March 6, 2024. periodt. 💅