CredentialCRL
Overview
The <CRL> element of a File CredentialResolver references a certificate revocation list from a local file or a remote URL. This is not typically used as part of confguring a local credential belonging to the SP, but more typically used to supply CRLs to more advanced metadata verification strategies that utilize the PKIX and StaticPKIX TrustEngines.
Reference
Attributes
The <Key>, <Certificate> and <CRL> child elements share support for the following attributes:
Name | Type | Default | Description |
|---|---|---|---|
backingFilePath | local pathname | If a <URL> child element is used, this attribute is required in order to provide a local location to save a copy of the remote resource | |
reloadChanges | boolean | true | If a <Path> child element is used, controls whether changes to the file are monitored in order to reload the information |
reloadInterval | time in seconds | 0 | If non-zero, and a <URL> child element is used, indicates the maximum elapsed time in seconds after which the URL will be checked for changes |
Specific Attributes
In addition the following CRL-specific settings are supported:
Name | Type | Default | Description |
|---|---|---|---|
format | "PEM", or "DER" |
| Optional indicator of CRL file format (auto-detected in most cases) |