eu.europa.esig.dss.validation

Class CommonCertificateVerifier

java.lang.Object

eu.europa.esig.dss.validation.CommonCertificateVerifier

All Implemented Interfaces:

CertificateVerifier

public class CommonCertificateVerifier
extends Object
implements CertificateVerifier

This class provides the different sources used to verify the status of a certificate using the trust model. There are four different types of sources to be defined:
- Trusted certificates source;
- Adjunct certificates source (not trusted);
- OCSP source;
- CRL source.
The DataLoader should be provided to give access to the certificates through AIA.

Constructor Summary

Constructors

Constructor and Description
CommonCertificateVerifier() The default constructor.
CommonCertificateVerifier(boolean simpleCreationOnly) This constructor allows to create CommonCertificateVerifier without DataLoader.
CommonCertificateVerifier(CertificateSource trustedCertSource, CRLSource crlSource, OCSPSource ocspSource, DataLoader dataLoader) The constructor with key parameters.

Method Summary

Methods

Modifier and Type	Method and Description
CertificatePool	createValidationPool() This method creates the validation pool of certificates which is used during the validation process.
CertificateSource	getAdjunctCertSource() Returns the adjunct certificates source associated with this verifier.
CRLSource	getCrlSource() Returns the CRL source associated with this verifier.
DataLoader	getDataLoader() The data loader used to access AIA certificate source.
OCSPSource	getOcspSource() Returns the OCSP source associated with this verifier.
ListCRLSource	getSignatureCRLSource() This method returns the CRL source (information extracted from signatures).
ListOCSPSource	getSignatureOCSPSource() This method returns the OCSP source (information extracted from signatures).
CertificateSource	getTrustedCertSource() Returns the trusted certificates source associated with this verifier.
void	setAdjunctCertSource(CertificateSource adjunctCertSource) Associates an adjunct certificates source to this verifier.
void	setCrlSource(CRLSource crlSource) Defines the source of CRL used by this class
void	setDataLoader(DataLoader dataLoader) The data loader used to access AIA certificate source.
void	setOcspSource(OCSPSource ocspSource) Defines the source of OCSP used by this class
void	setSignatureCRLSource(ListCRLSource signatureCRLSource) This method allows to set the CRL source (information extracted from signatures).
void	setSignatureOCSPSource(ListOCSPSource signatureOCSPSource) This method allows to set the OCSP source (information extracted from signatures).
void	setTrustedCertSource(CertificateSource trustedCertSource) Defines how the certificates from the Trusted Lists are retrieved.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CommonCertificateVerifier

public CommonCertificateVerifier()

The default constructor. The DataLoader is created to allow the retrieval of certificates through AIA.

CommonCertificateVerifier

public CommonCertificateVerifier(boolean simpleCreationOnly)

This constructor allows to create CommonCertificateVerifier without DataLoader. It means that only a profile -B signatures can be created.

Parameters:

simpleCreationOnly - if true the CommonCertificateVerifier will not contain DataLoader.

CommonCertificateVerifier

public CommonCertificateVerifier(CertificateSource trustedCertSource,
                         CRLSource crlSource,
                         OCSPSource ocspSource,
                         DataLoader dataLoader)

The constructor with key parameters.

Parameters:

trustedCertSource - the reference to the trusted certificate source.

crlSource - contains the reference to the OCSPSource.

ocspSource - contains the reference to the CRLSource.

dataLoader - contains the reference to a data loader used to access AIA certificate source.

Method Detail

getTrustedCertSource

public CertificateSource getTrustedCertSource()

Description copied from interface: CertificateVerifier

Returns the trusted certificates source associated with this verifier. This source is used to identify the trusted anchor.

Specified by:

getTrustedCertSource in interface CertificateVerifier

Returns:

getOcspSource

public OCSPSource getOcspSource()

Description copied from interface: CertificateVerifier

Returns the OCSP source associated with this verifier.

Specified by:

getOcspSource in interface CertificateVerifier

Returns:

getCrlSource

public CRLSource getCrlSource()

Description copied from interface: CertificateVerifier

Returns the CRL source associated with this verifier.

Specified by:

getCrlSource in interface CertificateVerifier

Returns:

setCrlSource

public void setCrlSource(CRLSource crlSource)

Defines the source of CRL used by this class

Specified by:

setCrlSource in interface CertificateVerifier

Parameters:

crlSource - the crlSource to set

setOcspSource

public void setOcspSource(OCSPSource ocspSource)

Defines the source of OCSP used by this class

Specified by:

setOcspSource in interface CertificateVerifier

Parameters:

ocspSource - the ocspSource to set

setTrustedCertSource

public void setTrustedCertSource(CertificateSource trustedCertSource)

Defines how the certificates from the Trusted Lists are retrieved. This source should provide trusted certificates. These certificates are used as trust anchors.

Specified by:

setTrustedCertSource in interface CertificateVerifier

Parameters:

trustedCertSource - The source of trusted certificates.

getAdjunctCertSource

public CertificateSource getAdjunctCertSource()

Description copied from interface: CertificateVerifier

Returns the adjunct certificates source associated with this verifier.

Specified by:

getAdjunctCertSource in interface CertificateVerifier

Returns:

setAdjunctCertSource

public void setAdjunctCertSource(CertificateSource adjunctCertSource)

Description copied from interface: CertificateVerifier

Associates an adjunct certificates source to this verifier.

Specified by:

setAdjunctCertSource in interface CertificateVerifier

Parameters:

adjunctCertSource -

getDataLoader

public DataLoader getDataLoader()

Description copied from interface: CertificateVerifier

The data loader used to access AIA certificate source.

Specified by:

getDataLoader in interface CertificateVerifier

Returns:

setDataLoader

public void setDataLoader(DataLoader dataLoader)

Description copied from interface: CertificateVerifier

The data loader used to access AIA certificate source. If this property is not set the default CommonsHttpDataLoader is created.

Specified by:

setDataLoader in interface CertificateVerifier

getSignatureCRLSource

public ListCRLSource getSignatureCRLSource()

Description copied from interface: CertificateVerifier

This method returns the CRL source (information extracted from signatures).

Specified by:

getSignatureCRLSource in interface CertificateVerifier

setSignatureCRLSource

public void setSignatureCRLSource(ListCRLSource signatureCRLSource)

Description copied from interface: CertificateVerifier

This method allows to set the CRL source (information extracted from signatures).

Specified by:

setSignatureCRLSource in interface CertificateVerifier

getSignatureOCSPSource

public ListOCSPSource getSignatureOCSPSource()

Description copied from interface: CertificateVerifier

This method returns the OCSP source (information extracted from signatures).

Specified by:

getSignatureOCSPSource in interface CertificateVerifier

setSignatureOCSPSource

public void setSignatureOCSPSource(ListOCSPSource signatureOCSPSource)

Description copied from interface: CertificateVerifier

This method allows to set the OCSP source (information extracted from signatures).

Specified by:

setSignatureOCSPSource in interface CertificateVerifier

createValidationPool

public CertificatePool createValidationPool()

Description copied from interface: CertificateVerifier

This method creates the validation pool of certificates which is used during the validation process.

Specified by:

createValidationPool in interface CertificateVerifier