mbedtls_x509_crl_parse() function

points to the start of the chain

buffer holding the CRL data in PEM or DER format

size of the buffer (including the terminating null byte for PEM data)

Unallocate all CRL data

Set the data required to verify peer certificate

Parse a DER-encoded CRL and append it to the chained list

Verify a chain of certificates. The verify callback is a user-supplied callback that can clear / modify / add flags for a certificate. If set, the verification callback is called for each certificate in the chain (from the trust-ca down to the presented crt). The parameters for the callback are: (void *parameter, mbedtls_x509_crt *crt, int certificate_depth, int *flags). With the flags representing current flags for that specific certificate and the certificate depth from the bottom (Peer cert depth = 0). All flags left after returning from the callback are also returned to the application. The function should return 0 for anything (including invalid certificates) other than fatal error, as a non-zero return code immediately aborts the verification process. For fatal errors, a specific error code should be used (different from MBEDTLS_ERR_X509_CERT_VERIFY_FAILED which should not be returned at this point), or MBEDTLS_ERR_X509_FATAL_ERROR can be used if no better code is available.

Initialize a CRL (chain)

Restartable version of \c mbedtls_crt_verify_with_profile()

Verify the certificate revocation status

Set the data required to verify peer certificate for the current handshake

Load one or more CRLs and append them to the chained list

Returns an informational string about the CRL.

Verify a chain of certificates with respect to a configurable security profile.