{"version":3,"file":"X509CrlDistributionPoint.mjs","names":[],"sources":["../../../src/modules/x509/X509CrlDistributionPoint.ts"],"sourcesContent":["/**\n * CRL Revocation Reason Codes (RFC 5280 Section 5.3.1)\n * These are bit flags used in the reasonFlags field of CRL Distribution Points\n */\nexport enum X509RevocationReason {\n  Unused = 0, // unused(0)\n  KeyCompromise = 1, // keyCompromise(1)\n  CACompromise = 2, // cACompromise(2)\n  AffiliationChanged = 3, // affiliationChanged(3)\n  Superseded = 4, // superseded(4)\n  CessationOfOperation = 5, // cessationOfOperation(5)\n  CertificateHold = 6, // certificateHold(6)\n  PrivilegeWithdrawn = 7, // privilegeWithdrawn(7) - not in RFC 5280, added in RFC 5759\n  AACompromise = 8, // aACompromise(8)\n}\n\n/**\n * All possible revocation reason codes as a bitmask.\n * Covers reasons 0-8 (9 total reasons)\n */\nexport const ALL_REVOCATION_REASONS_MASK = 0b111111111 // bits 0-8 set\n\n/**\n * Represents a single CRL Distribution Point from the certificate extension\n * Based on RFC 5280 Section 4.2.1.13\n */\nexport interface X509CrlDistributionPoint {\n  /**\n   * URLs where the CRL can be fetched\n   * These are mirrors - try them in order until one succeeds\n   */\n  urls: string[]\n\n  /**\n   * Optional reasons covered by this distribution point\n   * If undefined, this distribution point covers ALL revocation reasons (a \"full\" DP)\n   * If defined, it's a bitmask of X509RevocationReason values\n   *\n   * Example: [1, 2] means this DP only covers keyCompromise and cACompromise\n   */\n  reasons?: number[]\n\n  /**\n   * Optional CRL issuer (if different from certificate issuer), as a URI.\n   *\n   * This is parsed and populated when present, but indirect CRLs are NOT verified during\n   * revocation checking: a distribution point carrying a `crlIssuer` is recognized and skipped\n   * (tracked as an unsupported feature) rather than fetched against the certificate issuer.\n   */\n  crlIssuer?: string\n}\n"],"mappings":";;;;;AAIA,IAAY,uBAAL,yBAAA,sBAAA;CACL,qBAAA,qBAAA,YAAA,KAAA;CACA,qBAAA,qBAAA,mBAAA,KAAA;CACA,qBAAA,qBAAA,kBAAA,KAAA;CACA,qBAAA,qBAAA,wBAAA,KAAA;CACA,qBAAA,qBAAA,gBAAA,KAAA;CACA,qBAAA,qBAAA,0BAAA,KAAA;CACA,qBAAA,qBAAA,qBAAA,KAAA;CACA,qBAAA,qBAAA,wBAAA,KAAA;CACA,qBAAA,qBAAA,kBAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;;AAMA,MAAa,8BAA8B"}