CL_CrlVerifyWithKey

NAME

  CL_CrlVerifyWithKey,
  CSSM_CL_CrlVerifyWithKey - Verify a CRL with a specific key (CDSA)

SYNOPSIS

  # include <cssm.h>

   API:
       CSSM_RETURN CSSMAPI CSSM_CL_CrlVerifyWithKey
       (CSSM_CL_HANDLE CLHandle,
       CSSM_CC_HANDLE CCHandle,
       const CSSM_DATA *CrlToBeVerified)

   SPI:
       CSSM_RETURN CSSMCLI CL_CrlVerifyWithKey
       (CSSM_CL_HANDLE CLHandle,
       CSSM_CC_HANDLE CCHandle,
       const CSSM_DATA *CrlToBeVerified)

LIBRARY

  Common Security Services Manager library (CDSA$INCSSM300_SHR.EXE)

PARAMETERS

  CLHandle (input)
          The handle that describes the Certificate Library service module
          used to perform this function.

  CCHandle (input)
          A signature verification context defining the Cryptographic
          Services Provider (CSP), verification algorithm, and public
          key that must be used to perform the operation.

  CrlToBeVerified (input)
          A signed certificate revocation list whose signature is to be
          verified.

DESCRIPTION

  This function verifies that the CrlToBeVerified parameter was signed
  using a specific private key and that the certificate revocation list
  has not been altered since it was signed using that private key.  The
  public key corresponding to the private signing key is used in the
  verification process.

  The cryptographic context indicated by the CCHandle parameter must
  be a signature verification context created using the function
  CSSM_CSP_CreateSignatureContext() (CSSM API) or
  CSP_CreateSignatureContext() (CL SPI). The context must specify the
  Cryptographic Services Provider (CSP) module, the verification
  algorithm, and the public verification key that must be used to
  perform this operation.

RETURN VALUE

  A CSSM_RETURN value indicating success or specifying a particular
  error condition. The value CSSM_OK indicates success. All other values
  represent an error condition.

ERRORS

  Errors are described in the CDSA technical standard.  See CDSA.

       CSSMERR_CL_INVALID_CONTEXT_HANDLE
       CSSMERR_CL_INVALID_CRL_POINTER
       CSSMERR_CL_UNKNOWN_FORMAT
       CSSMERR_CL_VERIFICATION_FAILURE

SEE ALSO

  Books

  Intel CDSA Application Developer's Guide (see CDSA)

  Other Help Topics

  Functions for the CSSM API:

      CSSM_CL_CrlVerify

  Functions for the CLI SPI:

      CL_CrlVerify