name: CRL
full_form: Certificate Revocation List
context: NDS/AF compliant SEGs and NEs shall not send an IKEv2 CERTREQ where the Certificate Type is "Certificate Revocation List (CRL)". Receiving NEs and SEGs may ignore this request as section 6.1.3 specifies that CRLs shall be retrieved via a CRL distribution point. The CRL issuer (which is in most cases the CA) shall only issue full CRLs. The use of delta CRLs is not allowed because of possible interoperability problems and because in the NDS/AF environment the full CRL is not expected to grow too large. The full CRL shall only contain revoked certificates applicable for use within NDS/AF. The CRL issuer shall issue a CRL also in cases that there are no revoked certificates. A SEG, NE or TLS entity is not obliged to query for a CRL via the CRL Distribution Point if a cached one is still available and valid. If no valid cached CRL is available, the NE, SEG or TLS entity shall fetch a new CRL. If no valid CRL can be fetched, the NE, SEG or TLS entity shall treat this as an error and cancel
description: A Certificate Revocation List (CRL) is a list of digital certificates that have been revoked by the issuing Certificate Authority (CA) and are no longer valid. CRLs are used to manage certificate revocation for secure communication between network entities.
explanation: CRLs are a security mechanism employed to ensure the validity of digital certificates and prevent the use of compromised or expired certificates in communication. They contribute to the overall security posture by mitigating risks associated with fraudulent or unauthorized access.
section_title: 7.6	CRL management
biotag_Context: O,O,O,O,O,O,O,O,O,B-Protocol,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B- Protocol,O,O,O,B- Protocol,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B- Protocol,O,O,O,O,O,O,O,O,O,B- Protocol,O,O,O,O,O,O,O,O,O,O,O,B- Protocol,O,O,O,O,B- Protocol,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,B-Protocol,O,O,O,O,O,O,O,O,B- Protocol,O,O,B- Protocol,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B- Protocol,O,O,O,O,B-Network Function,O,B-Protocol,O,O,O,O,O,O,O,O,O,B- Protocol,O,O,O,O,O,B-Network Function,O,B-Protocol,O,O,O,O,O,O,O,O,O
biotag_Description: O,B- Protocol,I- Protocol,I- Protocol,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Technology,I-Technology,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O