NAME

CL_IsCertInCrl

SYNOPSIS

CSSM_BOOL CSSMCLI CL_IsCertInCrl
    (CSSM_CL_HANDLE CLHandle,
    const CSSM_DATA_PTR Cert,
    const CSSM_DATA_PTR Crl)

DESCRIPTION

This function searches the CRL for a record corresponding to the certificate. The operation will fail if neither the CRL or the revocation records have been signed. If a signature exists, the application is responsible for verifying that the signature was created by a trusted party.

PARAMETERS

CLHandle (input)

The handle that describes the add-in certificate library module used to perform this function.

Cert (input)

A pointer to the CSSM_DATA structure containing the certificate to be located.

Crl (input)

A pointer to the CSSM_DATA structure containing the CRL to be searched.

RETURN VALUE

A CSSM_TRUE return value signifies that the certificate is in the CRL. When CSSM_FALSE is returned, either the certificate is not in the CRL or an error has occurred. Use CSSM_GetError to obtain the error code.

ERRORS

CSSM_CL_INVALID_CL_HANDLE

Invalid CL handle.

CSSM_CL_INVALID_CERTIFICATE_PTR

Invalid Certificate.

CSSM_CL_INVALID_CRL_PTR

Invalid CRL pointer.