diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2008-09-01 15:15:16 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2008-09-01 15:15:16 +0000 |
| commit | d43c4497ce1611373c3a3e5b433dfde4907d1a69 (patch) | |
| tree | 412a0fe67c6f39893614919e58dbcae0a7a422ae /crypto/x509v3/x509v3.h | |
| parent | 4b96839f069a2c9fef3d1feffca2880361181544 (diff) | |
| download | openssl-d43c4497ce1611373c3a3e5b433dfde4907d1a69.tar.gz | |
Initial support for delta CRLs. If "use deltas" flag is set attempt to find
a delta CRL in addition to a full CRL. Check and search delta in addition to
the base.
Diffstat (limited to 'crypto/x509v3/x509v3.h')
| -rw-r--r-- | crypto/x509v3/x509v3.h | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/crypto/x509v3/x509v3.h b/crypto/x509v3/x509v3.h index c824cf01f3..22b1b7fe39 100644 --- a/crypto/x509v3/x509v3.h +++ b/crypto/x509v3/x509v3.h @@ -226,6 +226,18 @@ X509_NAME *dpname; /* All existing reasons */ #define CRLDP_ALL_REASONS 0x807f +#define CRL_REASON_NONE -1 +#define CRL_REASON_UNSPECIFIED 0 +#define CRL_REASON_KEY_COMPROMISE 1 +#define CRL_REASON_CA_COMPROMISE 2 +#define CRL_REASON_AFFILIATION_CHANGED 3 +#define CRL_REASON_SUPERSEDED 4 +#define CRL_REASON_CESSATION_OF_OPERATION 5 +#define CRL_REASON_CERTIFICATE_HOLD 6 +#define CRL_REASON_REMOVE_FROM_CRL 8 +#define CRL_REASON_PRIVILEGE_WITHDRAWN 9 +#define CRL_REASON_AA_COMPROMISE 10 + struct DIST_POINT_st { DIST_POINT_NAME *distpoint; ASN1_BIT_STRING *reasons; @@ -402,7 +414,8 @@ struct ISSUING_DIST_POINT_st #define EXFLAG_CRITICAL 0x200 #define EXFLAG_PROXY 0x400 -#define EXFLAG_INVALID_POLICY 0x400 +#define EXFLAG_INVALID_POLICY 0x800 +#define EXFLAG_FRESHEST 0x1000 #define KU_DIGITAL_SIGNATURE 0x0080 #define KU_NON_REPUDIATION 0x0040 |