Crl Element (Certificate Revocation) - Adobe LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING Manual

Adobe LiveCycle
Installing and Configuring LiveCycle Security Products for JBoss
Record type
Common to all
record types

CRL element (Certificate revocation)

The element lists all of the CRL files used by the PDF Manipulation Module for certificate revocation
CRL
checking. The
(referenced by the
LiveCycle Document Security or LiveCycle Reader Extensions never directly fetches a CRL from the web.
The system administrator must keep the CRL files updated. The file referenced by the
is searched for in the directory specified using Configuration Manager.
The attributes of a
Attribute
URL
filename
During the initialization of the PDF Manipulation Module, if a CRL file is missing for a URL entry in the
trust.xml file, a warning is generated in the log file. The warning alerts the administrator to install any
missing CRL files.
If no matching URL is found for a
Document Security or LiveCycle Reader Extensions looks up the CRL over the network. If the CRL is not
retrieved, the signature validation fails and a warning is not generated in the log file.
Attributes
EmbedRevInfo
TimestampURL
element uses the record type
CRL
value in a certificate) to a file name where the actual CRL is stored so that
CRLdp
record are described in this table.
CRL
Description
A reference to the
match the URL found in the
The file name of the CRL.
CRLdp
Description
(Optional) Specifies whether the revocation information is
embedded within the certificate. The value
that, if available, the revocation information is embedded. The
default value is
false
The value of this attribute overrides the global preference. (See
the record type under the
signature
table that begins on page
(Optional) The URL to consult for timestamping information for
this credential. The URL must contain the user name and
password, if required, in this format:
http(s)://[username]:[password]@[path]
The value of this attribute overrides the global preference. (See
the record type under the
signature
table that begins on page
. The attributes of the records map from a URL
CRL
value in the corresponding certificate. It must exactly
CRLdp
field of the certificate.
CRLdp
value in the trust.xml file during signature validation, LiveCycle
Content and Format of the trust.xml File
CRL element (Certificate revocation)
true
.
prefs
83.)
prefs
83.)
filename
82
indicates
element in the
element in the
attribute