Package revocation

Variables

AdminAllowedReasons contains the subset of Reasons which admins are allowed to use. Reasons not found here will soon be forbidden from appearing in CRLs or OCSP responses by root programs.

var AdminAllowedReasons = map[Reason]struct{}{
    ocsp.Unspecified:          {},
    ocsp.KeyCompromise:        {},
    ocsp.Superseded:           {},
    ocsp.CessationOfOperation: {},
    ocsp.PrivilegeWithdrawn:   {},
}

ReasonToString provides a map from reason code to string

var ReasonToString = map[Reason]string{
    ocsp.Unspecified:          "unspecified",
    ocsp.KeyCompromise:        "keyCompromise",
    ocsp.CACompromise:         "cACompromise",
    ocsp.AffiliationChanged:   "affiliationChanged",
    ocsp.Superseded:           "superseded",
    ocsp.CessationOfOperation: "cessationOfOperation",
    ocsp.CertificateHold:      "certificateHold",

    ocsp.RemoveFromCRL:      "removeFromCRL",
    ocsp.PrivilegeWithdrawn: "privilegeWithdrawn",
    ocsp.AACompromise:       "aAcompromise",
}

UserAllowedReasons contains the subset of Reasons which users are allowed to use

var UserAllowedReasons = map[Reason]struct{}{
    ocsp.Unspecified:          {},
    ocsp.KeyCompromise:        {},
    ocsp.Superseded:           {},
    ocsp.CessationOfOperation: {},
}

UserAllowedReasonsMessage contains a string describing a list of user allowed revocation reasons. This is useful when a revocation is rejected because it is not a valid user supplied reason and the allowed values must be communicated. This variable is populated during package initialization.

var UserAllowedReasonsMessage = ""

type Reason ¶

Reason is used to specify a certificate revocation reason

type Reason int