version 1.2, 2013/01/18 00:24:58 |
version 1.3, 2015/01/30 01:10:33 |
|
|
#define KRL_SECTION_FINGERPRINT_SHA1 3 |
#define KRL_SECTION_FINGERPRINT_SHA1 3 |
#define KRL_SECTION_SIGNATURE 4 |
#define KRL_SECTION_SIGNATURE 4 |
|
|
3. Certificate serial section |
2. Certificate section |
|
|
These sections use type KRL_SECTION_CERTIFICATES to revoke certificates by |
These sections use type KRL_SECTION_CERTIFICATES to revoke certificates by |
serial number or key ID. The consist of the CA key that issued the |
serial number or key ID. The consist of the CA key that issued the |
|
|
|
|
string ca_key |
string ca_key |
string reserved |
string reserved |
|
|
|
Where "ca_key" is the standard SSH wire serialisation of the CA's |
|
public key. Alternately, "ca_key" may be an empty string to indicate |
|
the certificate section applies to all CAs (this is most useful when |
|
revoking key IDs). |
|
|
Followed by one or more sections: |
Followed by one or more sections: |
|
|