NAME
CSSM_CL_CrlVerifyWithKey — Verify a CRL with a specific key (CDSA)
SYNOPSIS
# include <cssm.h>
API:
CSSM_RETURN CSSMAPI CSSM_CL_CrlVerifyWithKey
(CSSM_CL_HANDLE CLHandle,
CSSM_CC_HANDLE CCHandle,
const CSSM_DATA *CrlToBeVerified)
SPI:
CSSM_RETURN CSSMCLI CL_CrlVerifyWithKey
(CSSM_CL_HANDLE CLHandle,
CSSM_CC_HANDLE CCHandle,
const CSSM_DATA *CrlToBeVerified) |
LIBRARY
Common Security Services Manager library (cdsa$incssm300_shr.exe)
PARAMETERS
| CLHandle (input) | | The handle that describes the Certificate Library
service module used to perform this function. |
| CCHandle (input) | | A signature verification context defining the Cryptographic
Services Provider (CSP), verification algorithm, and public key
that must be used to perform the operation. |
| CrlToBeVerified (input) |
| | | A signed certificate revocation list whose signature
is to be verified. |
DESCRIPTION
This function verifies that the CrlToBeVerified parameter
was signed using a specific private key and that the certificate
revocation list has not been altered since it was signed using that
private key. The public key corresponding to the private signing
key is used in the verification process.
The cryptographic context indicated by the CCHandle parameter
must be a signature verification context created using the function CSSM_CSP_CreateSignatureContext() (CSSM API) or CSP_CreateSignatureContext() (CL SPI). The context must specify the Cryptographic
Services Provider (CSP) module, the verification algorithm, and
the public verification key that must be used to perform this operation.
RETURN VALUE
A CSSM_RETURN value indicating success or specifying a particular
error condition. The value CSSM_OK indicates success. All other
values represent an error condition.
ERRORS
Errors are described in the CDSA Technical Standard.
CSSMERR_CL_INVALID_CONTEXT_HANDLE
CSSMERR_CL_INVALID_CRL_POINTER
CSSMERR_CL_UNKNOWN_FORMAT
CSSMERR_CL_VERIFICATION_FAILURE |
SEE ALSO
Books
Intel CDSA Application Developer's Guide
Online Help
Functions for the CSSM API:
CSSM_CL_CrlVerify
Functions for the CLI SPI:
CL_CrlVerify
