Package eu.emi.security.authn.x509.helpers.revocation

Class CRLRevocationChecker

java.lang.Object

eu.emi.security.authn.x509.helpers.revocation.CRLRevocationChecker

All Implemented Interfaces:

RevocationChecker

public class CRLRevocationChecker
extends java.lang.Object
implements RevocationChecker

Implementation of RevocationChecker using CRLs, the RFC3280CertPathUtilitiesCanl.

Field Summary

Fields

Modifier and Type	Field	Description
private java.util.List<?>	certificates
private CrlCheckingMode	checkingMode
private org.bouncycastle.jcajce.util.JcaJceHelper	jcaHelper
private ExtPKIXParameters2	paramsPKIX
private java.util.Date	validDate
private java.security.PublicKey	workingPublicKey

Constructor Summary

Constructors

Constructor	Description
CRLRevocationChecker(ExtPKIXParameters2 paramsPKIX, java.util.Date validDate, java.security.PublicKey workingPublicKey, java.util.List<?> certificates, CrlCheckingMode checkingMode)

Method Summary

Modifier and Type	Method	Description
RevocationStatus	checkRevocation(java.security.cert.X509Certificate certitifcate, java.security.cert.X509Certificate issuer)	Checks revocation.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

paramsPKIX

private ExtPKIXParameters2 paramsPKIX

validDate

private java.util.Date validDate

workingPublicKey

private java.security.PublicKey workingPublicKey

certificates

private java.util.List<?> certificates

checkingMode

private CrlCheckingMode checkingMode

jcaHelper

private org.bouncycastle.jcajce.util.JcaJceHelper jcaHelper

Constructor Detail

CRLRevocationChecker

public CRLRevocationChecker(ExtPKIXParameters2 paramsPKIX,
                            java.util.Date validDate,
                            java.security.PublicKey workingPublicKey,
                            java.util.List<?> certificates,
                            CrlCheckingMode checkingMode)

Method Detail

checkRevocation

public RevocationStatus checkRevocation(java.security.cert.X509Certificate certitifcate,
                                        java.security.cert.X509Certificate issuer)
                                 throws SimpleValidationErrorException

Description copied from interface: RevocationChecker

Checks revocation.

Specified by:

checkRevocation in interface RevocationChecker

Parameters:

certitifcate - certificate

issuer - issuer

Returns:

whether the revocation was successfully checked or if the status is unknown.

Throws:

SimpleValidationErrorException - if revocation validation finished with error, in particular also when certificate is revoked.