NAME

OpenXPKI::Server::API2::Plugin::Cert::get_crl_list

COMMANDS

get_crl_list

List all CRL issued in the given realm. If no realm is given, use the realm of the current session. You can add issuer_identifier (cert_identifier) in which case you get only the CRLs issued by this issuer. The result is an arrayref of matching entries ordered by last_update, newest first. limit has a default of 25.

To find CRLs valid within a certain period in time, you can query on the last_update/next_update fields using valid_after/valid_before and expires_after/expires_before (expect epoch).

Parameters

•

"format"

Determines the return format.

Possible values for format are:

PEM
DER
DBINFO - unmodified result from the database (without PEM data)

"issuer_identifier"
Get only the CRLs for the provided issuer. If not set CRLs for all issuers in the current realm are returned.
"profile"
CRL profile, only used when crl_serial is not set.
"limit"
"pki_realm"
"valid_after"
"valid_before"
"expires_after"
"expires_before"

Changes compared to API v1:

Format TXT and HASH/FULLHASH have been removed, DBINFO returns lowercased keys with some modifications. See get_crl for details.

valid_at was replaced by the more detailed time filters.