View Source X509.Certificate.Validity (X509 v0.8.7)
Convenience functions for creating :Validity
records for use in
certificates. The :Validity
record represents the X.509 Validity
type, defining the validity of a certificate in terms of notBefore
and notAfter
timestamps.
Link to this section Summary
Types
:Validity
record, as used in Erlang's :public_key
module
X.509 Time type (UTCTime or GeneralizedTime)
Functions
Creates a new :Validity
record with an notAfter
value a given number of
days in the future. The notBefore
value can be backdated (by default
300 seconds) to avoid newly issued certificates
from being rejected by peers due to poorly synchronized clocks.
Creates a new :Validity
record with the given start and end timestamps
in DateTime format.
Link to this section Types
@type t() :: X509.ASN1.record(:validity)
:Validity
record, as used in Erlang's :public_key
module
@type time() :: {:utcTime | :generalTime, charlist()}
X.509 Time type (UTCTime or GeneralizedTime)
Link to this section Functions
@spec days_from_now(integer(), non_neg_integer()) :: t()
Creates a new :Validity
record with an notAfter
value a given number of
days in the future. The notBefore
value can be backdated (by default
300 seconds) to avoid newly issued certificates
from being rejected by peers due to poorly synchronized clocks.
For CA certificates, consider using new/2
instead, with a not_before
value that does not reveal the exact time when the key pair was generated.
This minimizes information leakage about the state of the RNG.
@spec new(DateTime.t(), DateTime.t()) :: t()
Creates a new :Validity
record with the given start and end timestamps
in DateTime format.
examples
Examples:
iex> {:ok, not_before, 0} = DateTime.from_iso8601("2018-01-01T00:00:00Z")
iex> {:ok, not_after, 0} = DateTime.from_iso8601("2018-12-31T23:59:59Z")
iex> X509.Certificate.Validity.new(not_before, not_after)
{:Validity, {:utcTime, '180101000000Z'}, {:utcTime, '181231235959Z'}}
iex> {:ok, not_before, 0} = DateTime.from_iso8601("2051-01-01T00:00:00Z")
iex> {:ok, not_after, 0} = DateTime.from_iso8601("2051-12-31T23:59:59Z")
iex> X509.Certificate.Validity.new(not_before, not_after)
{:Validity, {:generalTime, '20510101000000Z'},
{:generalTime, '20511231235959Z'}}