Function

Gcr-4 ▶ Gcr ▶ trust_is_certificate_distrusted

  • Checks whether the certificate that can be uniquely identified with the given serial_nr and issuer is marked as distrusted (for example by the user, or because it's part of a CRL).

    Since we can't directly use Certificate to fetch these values, you need to call these with the raw serial number and issuer as provided by the PKCS#11 fields CKA_SERIAL_NR and CKA_ISSUER.

    Parameters

    • serial_nr: string | Uint8Array<ArrayBufferLike>

      The serial number of the certificate

    • issuer: string | Uint8Array<ArrayBufferLike>

      The raw issuer

    • Optionalcancellable: Gio.Cancellable

      a Gio.Cancellable or null

    Returns boolean

    true if the certificate is marked as distrusted