ChainRevocationInput

Input for chain-level revocation checking in verifyCertificateChain.

interface ChainRevocationInput {
	readonly crls?: readonly CrlSource[];
	readonly ocspResponses?: readonly (string | Uint8Array)[];
	readonly extraCertificates?: readonly RevocationCertificateSource[];
	readonly trustedOcspResponders?: readonly RevocationCertificateSource[];
	readonly policy?: RevocationPolicy;
}

Properties

• readonly crls?: readonly CrlSource[] — CRLs to evaluate.
• readonly ocspResponses?: readonly (string | Uint8Array)[] — OCSP responses to evaluate (PEM strings or DER bytes).
• readonly extraCertificates?: readonly RevocationCertificateSource[] — Extra certs for indirect CRL issuers / delegated OCSP responders.
• readonly trustedOcspResponders?: readonly RevocationCertificateSource[] — Explicitly trusted OCSP responder certificates (RFC 6960 §4.2.2.2 criterion 1).
• readonly policy?: RevocationPolicy — Revocation policy.