RSA BSAFE Cert-C

CRL_FIELDS Reference

CRL_OBJ

The CRL_FIELDS structure allows you to view and update information in an opaque CRL_OBJ object, by calling the C_GetCRLFields() and C_SetCRLFields() functions.

Data Fields

version

A UINT2 value that indicates the CRL version number. Cert-C recognizes the following two types:

CRL Version Number	Description
`CRL_VERSION_1`	1988 format (This is the default.)
`CRL_VERSION_2`	1995 format (Supports the crlExtensions field.)

signatureAlgorithm

An int value that indicates the algorithm used to sign the CRL. In the case of an unsigned CRL, use this algorithm to sign the CRL. Cert-C supports the following signature algorithms:

Signature Algorithm	Description
`SA_MD2_WITH_RSA_ENCRYPTION`	Signature operations that involve the MD2 digest algorithm and RSA public-key algorithm
`SA_MD5_WITH_RSA_ENCRYPTION`	Signature operations that involve the MD5 digest algorithm and RSA public-key algorithm
`SA_SHA1_WITH_RSA_ENCRYPTION`	Signature operations that involve the SHA-1 digest algorithm and RSA public-key algorithm
`SA_OIW_SHA1_WITH_RSA_ENCRYPTION`	Signature operations that involve the SHA-1 digest algorithm, the OAEP masking according to OIW (OSI Implementers' Workshop) syntax, and RSA public-key algorithm
`SA_DSA_WITH_SHA1`	Signature operations that involve the SHA-1 digest algorithm and the Digital Signature Algorithm

issuerName A NAME_OBJ object that contains the CRL issuer's DN.

lastUpdate A UINT4 value that indicates the time at which the CRL was last signed. The time is specified as the number of seconds since 12:00 A.M. GMT, January 1, 1970.

nextUpdate A UINT4 value that indicates the time at which the next update of the CRL is expected, that is, the point at which the CRL expires. The time is specified as the number of seconds since 12:00 A.M. GMT, January 1, 1970.

crlEntries A CRL_ENTRIES_OBJ object that contains the list of certificate serial numbers and their revocation times. This is where all revocation entries are stored.

crlExtensions An EXTENSIONS_OBJ object that contains X.509 v3 extensions for the CRL. This field applies to CRLs of version CRL_VERSION_2 only. If the version is CRL_VERSION_1, then it should not contain any extension entries when C_SetCRLFields() is called.

reserved Set this field to NULL_PTR; it is reserved for future use.

#include <crlapi.h>

00257 typedef struct CRL_FIELDS {
00258   UINT2           version;            /* must be CRL_V1 (default) or CRL_V21 */
00259   int             signatureAlgorithm;
00260   NAME_OBJ        issuerName;
00261   UINT4           lastUpdate;
00262   UINT4           nextUpdate;
00263   CRL_ENTRIES_OBJ crlEntries;
00264   EXTENSIONS_OBJ  crlExtensions;
00265   POINTER         reserved;                 /* reserved for future expansion */
00266 } CRL_FIELDS;