File: gnupg.info,  Node: Dirmngr CHECKCRL,  Next: Dirmngr CHECKOCSP,  Prev: Dirmngr ISVALID,  Up: Dirmngr Protocol

3.6.3 Validate a certificate using a CRL
----------------------------------------

Check whether the certificate with FINGERPRINT (SHA-1 hash of the entire
X.509 certificate blob) is valid or not by consulting the CRL
responsible for this certificate.  If the fingerprint has not been given
or the certificate is not known, the function inquires the certificate
using:

       S: INQUIRE TARGETCERT
       C: D 
       C: END

   Thus the caller is expected to return the certificate for the request
(which should match FINGERPRINT) as a binary blob.  Processing then
takes place without further interaction; in particular dirmngr tries to
locate other required certificate by its own mechanism which includes a
local certificate store as well as a list of trusted root certificates.

The return code is 0 for success; i.e.  the certificate has not been
revoked or one of the usual error codes from libgpg-error.