mirror of
https://github.com/dyzulk/trustlab-docs.git
synced 2026-01-26 13:32:08 +07:00
feat: initial commit of trustlab-docs
This commit is contained in:
23
pages/guide/certificates/revocation.mdx
Normal file
23
pages/guide/certificates/revocation.mdx
Normal file
@@ -0,0 +1,23 @@
|
||||
# Revocation (Cabut Sertifikat)
|
||||
|
||||
Revocation invalidates a certificate before its expiration date. This is critical if a Private Key is compromised.
|
||||
|
||||
## When to Revoke?
|
||||
- **Key Compromise**: You suspect someone stole your Private Key.
|
||||
- **Service Change**: The domain name effectively no longer belongs to the service.
|
||||
- **Mistake**: The certificate was issued with incorrect details.
|
||||
|
||||
## How to Revoke
|
||||
|
||||
1. Open the Certificate Detail page.
|
||||
2. Click the **"Revoke"** button (Danger Zone).
|
||||
3. Select a **Reason Code**:
|
||||
- `unspecified` (0)
|
||||
- `keyCompromise` (1)
|
||||
- `cACompromise` (2)
|
||||
- `superseded` (4)
|
||||
- `cessationOfOperation` (5)
|
||||
4. Confirm the action.
|
||||
|
||||
## CRL (Certificate Revocation List)
|
||||
Once revoked, the certificate serial number is added to the TrustLab CRL. All clients checking the CRL will immediately reject the certificate.
|
||||
Reference in New Issue
Block a user