@credo-ts/core
Version:
<p align="center"> <br /> <img alt="Credo Logo" src="https://github.com/openwallet-foundation/credo-ts/blob/c7886cb8377ceb8ee4efe8d264211e561a75072d/images/credo-logo.png" height="250px" /> </p> <h1 align="center"><b>Credo - Core</b></h1
1 lines • 2.34 kB
Source Map (JSON)
{"version":3,"file":"X509CrlDistributionPoint.mjs","names":[],"sources":["../../../src/modules/x509/X509CrlDistributionPoint.ts"],"sourcesContent":["/**\n * CRL Revocation Reason Codes (RFC 5280 Section 5.3.1)\n * These are bit flags used in the reasonFlags field of CRL Distribution Points\n */\nexport enum X509RevocationReason {\n Unused = 0, // unused(0)\n KeyCompromise = 1, // keyCompromise(1)\n CACompromise = 2, // cACompromise(2)\n AffiliationChanged = 3, // affiliationChanged(3)\n Superseded = 4, // superseded(4)\n CessationOfOperation = 5, // cessationOfOperation(5)\n CertificateHold = 6, // certificateHold(6)\n PrivilegeWithdrawn = 7, // privilegeWithdrawn(7) - not in RFC 5280, added in RFC 5759\n AACompromise = 8, // aACompromise(8)\n}\n\n/**\n * All possible revocation reason codes as a bitmask.\n * Covers reasons 0-8 (9 total reasons)\n */\nexport const ALL_REVOCATION_REASONS_MASK = 0b111111111 // bits 0-8 set\n\n/**\n * Represents a single CRL Distribution Point from the certificate extension\n * Based on RFC 5280 Section 4.2.1.13\n */\nexport interface X509CrlDistributionPoint {\n /**\n * URLs where the CRL can be fetched\n * These are mirrors - try them in order until one succeeds\n */\n urls: string[]\n\n /**\n * Optional reasons covered by this distribution point\n * If undefined, this distribution point covers ALL revocation reasons (a \"full\" DP)\n * If defined, it's a bitmask of X509RevocationReason values\n *\n * Example: [1, 2] means this DP only covers keyCompromise and cACompromise\n */\n reasons?: number[]\n\n /**\n * Optional CRL issuer (if different from certificate issuer), as a URI.\n *\n * This is parsed and populated when present, but indirect CRLs are NOT verified during\n * revocation checking: a distribution point carrying a `crlIssuer` is recognized and skipped\n * (tracked as an unsupported feature) rather than fetched against the certificate issuer.\n */\n crlIssuer?: string\n}\n"],"mappings":";;;;;AAIA,IAAY,uBAAL,yBAAA,sBAAA;CACL,qBAAA,qBAAA,YAAA,KAAA;CACA,qBAAA,qBAAA,mBAAA,KAAA;CACA,qBAAA,qBAAA,kBAAA,KAAA;CACA,qBAAA,qBAAA,wBAAA,KAAA;CACA,qBAAA,qBAAA,gBAAA,KAAA;CACA,qBAAA,qBAAA,0BAAA,KAAA;CACA,qBAAA,qBAAA,qBAAA,KAAA;CACA,qBAAA,qBAAA,wBAAA,KAAA;CACA,qBAAA,qBAAA,kBAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;;AAMA,MAAa,8BAA8B"}