checkChainRevocation

Checks revocation status for all certificates in a validated chain.

Evaluates CRL and OCSP evidence against each certificate (except the trust anchor), applies the revocation policy, and returns a unified decision.

function checkChainRevocation(
	input: CheckChainRevocationInput,
): Promise<CheckChainRevocationResult>

Parameters

• input: CheckChainRevocationInput

Examples

const result = await checkChainRevocation({
  chain: validatedChain,
  crls: [crl1, crl2],
  ocspResponses: [ocspResponseDer],
  policy: { mode: 'hard-fail' },
});
if (result.value.decision === 'deny') {
  console.log('Revocation check failed');
}