Skip to content

Crlite

Metrics for the CRLite certificate revocation checking system

Source | Edit

Metrics

crlite_revoked_in_stash

**CRLite stash hits **

Number of revoked certificates detected by a CRLite stash.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: count, sum

Definition:
COALESCE(SUM(mozfun.map.get_key(metrics.labeled_counter.cert_verifier_crlite_status, 'revoked_in_stash')), 0)

crlite_revoked_in_filter

**CRLite filter hits **

Number of revoked certificates detected by the CRLite filter.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: count, sum

Definition:
COALESCE(SUM(mozfun.map.get_key(metrics.labeled_counter.cert_verifier_crlite_status, 'revoked_in_filter')), 0)

ocsp_use_counter

**OCSP usage **

Number of revocation checks performed using OCSP.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: population_ratio, sum

Definition:
COALESCE(SUM(mozfun.map.get_key(metrics.labeled_counter.cert_verifier_cert_revocation_mechanisms, 'OCSP')), 0)

crlite_use_counter

**CRLite usage **

Number of revocation checks performed using CRLite.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: population_ratio, sum

Definition:
COALESCE(SUM(mozfun.map.get_key(metrics.labeled_counter.cert_verifier_cert_revocation_mechanisms, 'CRLite')), 0)

revocation_check_counter

**Certificate revocation checks **

Number of revocation checks performed.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: sum

Definition:
COALESCE(SUM(mozfun.map.extract_keyed_scalar_sum(metrics.labeled_counter.cert_verifier_cert_revocation_mechanisms)), 0)

cert_storage_memory

**Certificate storage memory usage (bytes) **

Heap memory usage of cert_storage::SecurityState. This includes CRLite artifacts and preloaded intermediate certificates.

Analysis Period: weekly, overall

Data Source: metrics

Statistics: empirical_cdf, deciles

Definition:
ARRAY_AGG(metrics.memory_distribution.cert_storage_memory IGNORE NULLS)

Data Sources

metrics- Glean Metrics

The Glean metrics ping

Definition: