NAME

CL_CrlRemoveCert

SYNOPSIS

CSSM_DATA_PTR CSSMCLI CL_CrlRemoveCert
    (CSSM_CL_HANDLE CLHandle,
    const CSSM_DATA_PTR Cert,
    const CSSM_DATA_PTR OldCrl)

DESCRIPTION

This function reinstates a certificate by removing it from the specified CRL. The operation is valid only if the CRL has not be closed by the process of signing the CRL (that is, execution of the function CSSM_CL_CrlSign). Once the CRL has been signed, entries cannot be added or removed.

PARAMETERS

CLHandle (input)

The handle that describes the add-in certificate library module used to perform this function.

Cert (input)

A pointer to the CSSM_DATA structure containing the certificate to be unrevoked.

OldCrl (input)

A pointer to the CSSM_DATA structure containing the CRL from which the certificate is to be removed.

RETURN VALUE

A pointer to the CSSM_DATA structure containing the updated CRL. If the pointer is NULL, an error has occurred. Use CSSM_GetError to obtain the error code.

ERRORS

CSSM_CL_INVALID_CL_HANDLE

Invalid CL handle.

CSSM_CL_INVALID_CERTIFICATE_PTR

Invalid Certificate.

CSSM_CL_INVALID_CRL

Invalid CRL.

CSSM_CL_MEMORY_ERROR

Not enough memory to allocate the CRL.

CSSM_CL_CRL_REMOVE_CERT_FAIL

Unable to remove certificate from CRL.

SEE ALSO

CL_CrlAddCert