@credo-ts/core
Version:
<p align="center"> <br /> <img alt="Credo Logo" src="https://github.com/openwallet-foundation/credo-ts/blob/c7886cb8377ceb8ee4efe8d264211e561a75072d/images/credo-logo.png" height="250px" /> </p> <h1 align="center"><b>Credo - Core</b></h1
58 lines • 1.91 kB
text/typescript
//#region src/modules/x509/X509CrlDistributionPoint.d.ts
/**
* CRL Revocation Reason Codes (RFC 5280 Section 5.3.1)
* These are bit flags used in the reasonFlags field of CRL Distribution Points
*/
export declare enum X509RevocationReason {
Unused = 0 // unused(0)
,
KeyCompromise = 1 // keyCompromise(1)
,
CACompromise = 2 // cACompromise(2)
,
AffiliationChanged = 3 // affiliationChanged(3)
,
Superseded = 4 // superseded(4)
,
CessationOfOperation = 5 // cessationOfOperation(5)
,
CertificateHold = 6 // certificateHold(6)
,
PrivilegeWithdrawn = 7 // privilegeWithdrawn(7) - not in RFC 5280, added in RFC 5759
,
AACompromise = 8
}
/**
* All possible revocation reason codes as a bitmask.
* Covers reasons 0-8 (9 total reasons)
*/
export declare const ALL_REVOCATION_REASONS_MASK = 511;
/**
* Represents a single CRL Distribution Point from the certificate extension
* Based on RFC 5280 Section 4.2.1.13
*/
export interface X509CrlDistributionPoint {
/**
* URLs where the CRL can be fetched
* These are mirrors - try them in order until one succeeds
*/
urls: string[];
/**
* Optional reasons covered by this distribution point
* If undefined, this distribution point covers ALL revocation reasons (a "full" DP)
* If defined, it's a bitmask of X509RevocationReason values
*
* Example: [1, 2] means this DP only covers keyCompromise and cACompromise
*/
reasons?: number[];
/**
* Optional CRL issuer (if different from certificate issuer), as a URI.
*
* This is parsed and populated when present, but indirect CRLs are NOT verified during
* revocation checking: a distribution point carrying a `crlIssuer` is recognized and skipped
* (tracked as an unsupported feature) rather than fetched against the certificate issuer.
*/
crlIssuer?: string;
}
//#endregion
//# sourceMappingURL=X509CrlDistributionPoint.d.mts.map