4.9 NPKIT_x509 CRL Hold Types

The following flags are used to specify what to do if a certificate is on hold. These values are used by the cRLHoldInstruction parameter in the functions NPKIT_VerifyCertChain, NPKIT_VerifyCertChainWithCallback, and NPKIT_VerifyIssuerSubjectNameMatch.

Value

Name

Description

0

PKI_HOLD_INSTRUCTION_NONE

No hold instructions.

1

PKI_HOLD_INSTRUCTION_CALL_ISSUER

The person trying to verify the certificate should contact the certificate’s issuer for information.

2

PKI_HOLD_INSTRUCTION_REJECT

The certificate should be rejected as if it were revoked.