eu.europa.esig.dss.validation

Class OCSPAndCRLCertificateVerifier

java.lang.Object

eu.europa.esig.dss.validation.OCSPAndCRLCertificateVerifier

All Implemented Interfaces:

CertificateStatusVerifier

public class OCSPAndCRLCertificateVerifier
extends Object
implements CertificateStatusVerifier

Fetchs revocation data from a certificate by querying an OCSP server first and then a CRL server if no OCSP response could be retrieved.

Constructor Summary

Constructors

Constructor and Description
OCSPAndCRLCertificateVerifier(CRLSource crlSource, OCSPSource ocspSource, CertificatePool validationCertPool) Build a OCSPAndCRLCertificateVerifier that will use the provided CRLSource and OCSPSource

Method Summary

Methods

Modifier and Type	Method and Description
RevocationToken	check(CertificateToken certificateToken) Check the validity (revocation status) of the certificate.
RevocationToken	checkCRL(CertificateToken certificateToken)
RevocationToken	checkOCSP(CertificateToken certificateToken)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OCSPAndCRLCertificateVerifier

public OCSPAndCRLCertificateVerifier(CRLSource crlSource,
                             OCSPSource ocspSource,
                             CertificatePool validationCertPool)

Build a OCSPAndCRLCertificateVerifier that will use the provided CRLSource and OCSPSource

Parameters:

crlSource -

ocspSource -

validationCertPool -

Method Detail

check

public RevocationToken check(CertificateToken certificateToken)

Description copied from interface: CertificateStatusVerifier

Check the validity (revocation status) of the certificate. The operation returns a RevocationToken.

Specified by:

check in interface CertificateStatusVerifier

Parameters:

certificateToken - The certificate to be verified

Returns:

The RevocationToken or null the check cannot be performed.

checkOCSP

public RevocationToken checkOCSP(CertificateToken certificateToken)

checkCRL

public RevocationToken checkCRL(CertificateToken certificateToken)