Skip to content

Crlite

Metrics for the CRLite certificate revocation checking system

Source | Edit

Metrics

crlite_revoked_in_stash

**CRLite stash hits **

Number of revoked certificates detected by a CRLite stash.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: count, sum

Definition: 
COALESCE(SUM(mozfun.map.get_key(metrics.labeled_counter.cert_verifier_crlite_status, 'revoked_in_stash')), 0)

crlite_revoked_in_filter

**CRLite filter hits **

Number of revoked certificates detected by the CRLite filter.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: count, sum

Definition: 
COALESCE(SUM(mozfun.map.get_key(metrics.labeled_counter.cert_verifier_crlite_status, 'revoked_in_filter')), 0)

ocsp_use_counter_ratio

**OCSP usage vs revocation checks **

Ratio of revocation checks performed using OCSP compared to total.

Analysis Period: weekly, overall

Data Source: ``

Statistics: population_ratio

Definition: 
None

ocsp_use_counter

**OCSP usage **

Number of revocation checks performed using OCSP.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: sum

Definition: 
COALESCE(SUM(mozfun.map.get_key(metrics.labeled_counter.cert_verifier_cert_revocation_mechanisms, 'OCSP')), 0)

crlite_use_counter_ratio

**CRLite usage vs revocation checks **

Ratio of revocation checks performed using CRLite compared to total.

Analysis Period: weekly, overall

Data Source: ``

Statistics: population_ratio

Definition: 
None

crlite_use_counter

**CRLite usage **

Number of revocation checks performed using CRLite.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: sum

Definition: 
COALESCE(SUM(mozfun.map.get_key(metrics.labeled_counter.cert_verifier_cert_revocation_mechanisms, 'CRLite')), 0)

revocation_check_counter

**Certificate revocation checks **

Number of revocation checks performed.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: sum

Definition: 
COALESCE(SUM(mozfun.map.extract_keyed_scalar_sum(metrics.labeled_counter.cert_verifier_cert_revocation_mechanisms)), 0)

cert_storage_memory

**Certificate storage memory usage (bytes) **

Heap memory usage of cert_storage::SecurityState. This includes CRLite artifacts and preloaded intermediate certificates.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: empirical_cdf, deciles

Definition: 
SAFE_DIVIDE(
        SUM(metrics.memory_distribution.cert_storage_memory.sum),
        SUM((SELECT SUM(value) FROM UNNEST(metrics.memory_distribution.cert_storage_memory.values)))
    )

Data Sources

metrics- Glean Metrics

The Glean metrics ping

Definition:

``

Definition: