eu.emi.security.authn.x509.helpers.revocation

Class CRLRevocationChecker

java.lang.Object

eu.emi.security.authn.x509.helpers.revocation.CRLRevocationChecker

All Implemented Interfaces:

RevocationChecker

public class CRLRevocationChecker
extends Object
implements RevocationChecker

Implementation of RevocationChecker using CRLs, the RFC3280CertPathUtilitiesCanl.

Author:

K. Benedyczak

Constructor Summary

Constructors

Constructor and Description
CRLRevocationChecker(ExtPKIXParameters2 paramsPKIX, Date validDate, PublicKey workingPublicKey, List<?> certificates, CrlCheckingMode checkingMode)

Method Summary

Modifier and Type	Method and Description
RevocationStatus	checkRevocation(X509Certificate certitifcate, X509Certificate issuer) Checks revocation.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CRLRevocationChecker

public CRLRevocationChecker(ExtPKIXParameters2 paramsPKIX,
                            Date validDate,
                            PublicKey workingPublicKey,
                            List<?> certificates,
                            CrlCheckingMode checkingMode)

Method Detail

checkRevocation

public RevocationStatus checkRevocation(X509Certificate certitifcate,
                                        X509Certificate issuer)
                                 throws SimpleValidationErrorException

Description copied from interface: RevocationChecker

Checks revocation.

Specified by:

checkRevocation in interface RevocationChecker

Parameters:

certitifcate - certificate

issuer - issuer

Returns:

whether the revocation was successfully checked or if the status is unknown.

Throws:

SimpleValidationErrorException - if revocation validation finished with error, in particular also when certificate is revoked.