public interface RevocationChecker
| Modifier and Type | Method and Description |
|---|---|
void |
check(X509Certificate cert)
A method used to check revocation of a specific certificate.
|
void |
check(X509Certificate[] chain)
Determines whether any of the certifcates in the chain have been revoked.
|
void |
check(X509Certificate cert,
X509Certificate[] chain)
Determines whether the given certificate has been revoked.
|
void |
check(X509Certificate cert,
X509Certificate[] chain,
int position)
A convience method that carries the position of the certificate in the chain,
May be useful for speeding up Issuer certificate searches depending which
revocation checker is in use.
|
static final TraceLog LOG
void check(X509Certificate[] chain) throws CertificationException
When checking revocation of a certificate, objects which implement this interface should be checked in an order which is required for the application. For example, if OCSP and CRL revocation is required by the application, An OCSPRevocationChecker and a CollectionRS RevocationChecker could be managed by a RevocationConfiguration which is searched until the revocationchecker that contains revocation information about the certificate is found. The revocation status of the certificate is then extracted from that RevocationChecker.
chain - the certificate chain. If the given chain is null, then the method
just returns.RevocationException - if any of the certificates in chain are revokedCertificationException - if revocation status could not be determinedvoid check(X509Certificate cert, X509Certificate[] chain, int position) throws CertificationException
cert - the certificate which revocation will be checkedchain - the certificate chainposition - RevocationException - if any of the certificates in chain are revokedCertificationException - if revocation status could not be determinedvoid check(X509Certificate cert, X509Certificate[] chain) throws CertificationException
The supplied chain of certificates should include the certificate being checked and may be useful when trying to get access to the issuer of the certificate in question.
cert - the certificate which revocation will be checkedchain - the certificate chainRevocationException - if any of the certificates in chain are revokedCertificationException - if revocation status could not be determinedvoid check(X509Certificate cert) throws CertificationException
cert - the certificate which revocation will be checkedRevocationException - if any of the certificates in chain are revokedCertificationException - if revocation status could not be determined