CheckChainRevocationInput

Input for checkChainRevocation.

interface CheckChainRevocationInput {
	readonly chain: readonly ParsedCertificate[];
	readonly crls?: readonly CrlSource[];
	readonly ocspResponses?: readonly OcspResponseSource[];
	readonly extraCertificates?: readonly RevocationCertificateSource[];
	readonly trustedOcspResponders?: readonly RevocationCertificateSource[];
	readonly at?: Date;
	readonly policy?: RevocationPolicy;
}

Properties

• readonly chain: readonly ParsedCertificate[] — Validated certificate chain (leaf first, root last).
• readonly crls?: readonly CrlSource[] — CRLs to evaluate.
• readonly ocspResponses?: readonly OcspResponseSource[] — OCSP responses to evaluate.
• readonly extraCertificates?: readonly RevocationCertificateSource[] — Extra certs for indirect CRL issuers / delegated OCSP responders.
• readonly trustedOcspResponders?: readonly RevocationCertificateSource[] — Explicitly trusted OCSP responder certificates (RFC 6960 §4.2.2.2 criterion 1). A response signed by one of these is accepted without delegated-responder issuance, EKU, and revocation checks.
• readonly at?: Date — Evaluation time. Defaults to new Date().
• readonly policy?: RevocationPolicy — Revocation policy.