The handle that describes the add-in trust policymodule used to perform this function.
CLHandle (input/optional)
The handle that describes the add-in certificatelibrary module that can be used to manipulate the certificates tobe verified. If no certificate library module is specified, theTP module uses an assumed CL module, if required.
CSPHandle (input/optional)
The handle referencing a Cryptographic Service Providerto be used to verify signatures on the signer's certificate andon the CRL. The TP module is responsible for creating the cryptographiccontext structure required to perform the verification operation.If no CSP is specified, the TP module uses an assumed CSP to performthe operations.
CrlToBeVerified (input)
A pointer to the CSSM_DATA structure containinga signed certificate revocation list to be verified. The CRL typeand encoding are included in this structure.
SignerCertGroup (input)
A pointer to the CSSM_CERTGROUP structure containingone or more related certificates that paretially or fully representthe signer of the certificate revocation list. The first certificatein the group is the target certificate representing the CRL signer.Use of subsequent certificates is specific to the trust domain.For example, in a hierarchical trust model subsequent members areintermediate certificates of a certificate chain - the caller canspecify additional points of trust represented by anchor certificatesin the VerifyContext. The trust policy modulecan use these additional points of trust in the verification process.
VerifyContext (input/optional)
A structure containing credentials, policy information,and contextual information to be used in the verification process.All of the input values in the context are optional. The serviceprovider can define default values or can attempt to operate withoutinput for all the other fields of this input structure. The operationcan fail if a necessary input value is omitted and the service modulecan not define an appropriate default value.
RevokerVerifyResult (output/optional)
A pointer to a structure containing informationgeneration during the verification process. The information caninclude:
Evidence
(output/optional)
NumberOfEvidences
(output/optional)
DESCRIPTIONThis function verifies the integrity of the certificate revocationlist and determines whether it is trusted. The conditions for trustare part of the trust policy module. It can include conditions suchas validity of the signer's certificate, verification of the signatureon the CRL, the identity of the signer, the identity of the senderof the CRL, date the CRL was issued, the effective dates on theCRL, and so on.
The caller can specify additional points of trust representedby anchor certificates in the VerifyContext.The trust policy module can use these additional points of trustin the verification process.
RETURN VALUEA CSSM_RETURN value indicating success or specifying a particularerror condition. The value CSSM_OK indicates success. All othervalues represent an error condition. ERRORSErrors are described in the CDSA Technical Standard.
HP Open Source Security for OpenVMS Volume 1:... 
API Functions
