Mark old CRL APIs as deprecated (#6810)

This commit is contained in:
Gregory Cooke 2023-11-21 10:00:46 -05:00 committed by GitHub
parent 7935c4f759
commit 287c47355e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions

View File

@ -59,11 +59,14 @@ type Cache interface {
type RevocationConfig struct { type RevocationConfig struct {
// RootDir is the directory to search for CRL files. // RootDir is the directory to search for CRL files.
// Directory format must match OpenSSL X509_LOOKUP_hash_dir(3). // Directory format must match OpenSSL X509_LOOKUP_hash_dir(3).
// Deprecated: use CRLProvider instead.
RootDir string RootDir string
// AllowUndetermined controls if certificate chains with RevocationUndetermined // AllowUndetermined controls if certificate chains with RevocationUndetermined
// revocation status are allowed to complete. // revocation status are allowed to complete.
AllowUndetermined bool AllowUndetermined bool
// Cache will store CRL files if not nil, otherwise files are reloaded for every lookup. // Cache will store CRL files if not nil, otherwise files are reloaded for every lookup.
// Only used for caching CRLs when using the RootDir setting.
// Deprecated: use CRLProvider instead.
Cache Cache Cache Cache
// CRLProvider is an alternative to using RootDir directly for the // CRLProvider is an alternative to using RootDir directly for the
// X509_LOOKUP_hash_dir approach to CRL files. If set, the CRLProvider's CRL // X509_LOOKUP_hash_dir approach to CRL files. If set, the CRLProvider's CRL