SAS System Options for Encryption

SSLCRLCHECK System Option

Specifies whether a Certificate Revocation List (CRL) is checked when a digital certificate is validated.

Client:	Optional
Server:	Optional
Valid in:	configuration file, OPTIONS statement, SAS System Options window, SAS invocation
Operating Environments:	UNIX, Windows, z/OS
Category:	Communications: Networking and Encryption
PROC OPTIONS Group=	Communications

Syntax
Syntax Description
Details

Syntax

SSLCRLCHECK | NOSSLCRLCHECK

Syntax Description

SSLCRLCHECK: specifies that CRLs are checked when digital certificates are validated.
NOSSLCRLCHECK: specifies that CRLs are not checked when digital certificates are validated.

Details

A Certificate Revocation List (CRL) is published by a Certification Authority (CA) and contains a list of revoked digital certificates. The list contains only the revoked digital certificates that were issued by a specific CA.

The SSLCRLCHECK option is required at the server only if the SSLCLIENTAUTH option is also specified at the server. Because clients check server digital certificates, this option is relevant for the client.

Top of Page