CL_CrlRemoveCert(3) — Subroutines
NAME
CL_CrlRemoveCert, CSSM_CL_CrlRemoveCert − Reinstate a certificate (CDSA)
SYNOPSIS
# include <cdsa/cssm.h>
API:
CSSM_RETURN CSSMAPI CSSM_CL_CrlRemoveCert
(CSSM_CL_HANDLE CLHandle,
const CSSM_DATA ∗Cert,
const CSSM_DATA ∗OldCrl,
CSSM_DATA_PTR NewCrl)
SPI:
CSSM_RETURN CSSMCLI CL_CrlRemoveCert
(CSSM_CL_HANDLE CLHandle,
const CSSM_DATA ∗Cert,
const CSSM_DATA ∗OldCrl,
CSSM_DATA_PTR NewCrl)
LIBRARY
Common Security Services Manager library (libcssm.so)
PARAMETERS
CLHandle (input)
The handle that describes the add-in Certificate Library module used to perform this function.
Cert (input)
A pointer to the CSSM_DATA structure containing the certificate to be reinstated.
OldCrl (input)
A pointer to the CSSM_DATA structure containing the CRL from which the certificate is to be removed.
NewCrl (output)
A pointer to the CSSM_DATA structure containing the updated CRL. The NewCrl->Data is allocated by the service provider and must be deallocated by the application.
DESCRIPTION
This function reinstates a certificate by removing it from the specified CRL. The operation is valid only if the CRL has not been closed by the process of signing the CRL by executing CSSM_CL_CrlSign() (CSSM API), or CL_CrlSign() (CL SPI). Once the CRL has been signed, entries cannot be added or removed.
RETURN VALUE
A CSSM_RETURN value indicating success or specifying a particular error condition. The value CSSM_OK indicates success. All other values represent an error condition.
ERRORS
Errors are described in the CDSA technical standard. See CDSA_intro(3).
CSSMERR_CL_INVALID_CERT_POINTER
CSSMERR_CL_INVALID_CRL_POINTER
CSSMERR_CL_UNKNOWN_FORMAT
CSSMERR_CL_CRL_ALREADY_SIGNED
SEE ALSO
Books
Intel CDSA Application Developer’s Guide (see CDSA_intro(3))
Reference Pages
Functions for the CSSM API:
Functions for the CLI SPI: