Modifier and Type	Class and Description
public static interface	OCSP.RevocationStatus The Revocation Status of a certificate.

Field Summary

Modifier and Type	Field and Description
private static final int	CONNECT_TIMEOUT Integer value indicating the timeout length, in milliseconds, to be used for establishing a connection to an OCSP responder.
private static final Debug	debug
private static final int	DEFAULT_CONNECT_TIMEOUT
private static final int	READ_TIMEOUT Integer value indicating the timeout length, in milliseconds, to be used for reading an OCSP response from the responder.
private static final boolean	USE_GET Boolean value indicating whether OCSP client can use GET for OCSP requests.

Constructor Summary

Access	Constructor and Description
private	OCSP()

Method Summary

Modifier and Type	Method and Description
pack-priv static OCSPResponse	Returns: the OCSPResponse check(List<CertId> the CertIds to be checked certIds, URI the URI of the OCSP responder responderURI, OCSPResponse.IssuerInfo the issuer's certificate and/or subject and public key issuerInfo, X509Certificate the OCSP responder's certificate responderCert, Date the time the validity of the OCSP responder's certificate should be checked against. If null, the current time is used. date, List<Extension> zero or more OCSP extensions to be included in the request. If no extensions are requested, an empty `List` must be used. A `null` value is not allowed. extensions, String variant) Checks the revocation status of a list of certificates using OCSP.
public static byte[]	Returns: the OCSP response bytes getOCSPBytes(List<CertId> the CertIds to be checked certIds, URI the URI of the OCSP responder responderURI, List<Extension> zero or more OCSP extensions to be included in the request. If no extensions are requested, an empty `List` must be used. A `null` value is not allowed. extensions) Send an OCSP request, then read and return the OCSP response bytes.
public static URI	Returns: the URI of the OCSP Responder, or null if not specified getResponderURI(X509Certificate the certificate cert) Returns the URI of the OCSP Responder as specified in the certificate's Authority Information Access extension, or null if not specified.
pack-priv static URI	getResponderURI(X509CertImpl certImpl)
private static boolean	initializeBoolean(String prop, boolean def)
private static int	initializeTimeout(String prop, int def) Initialize the timeout length by getting the OCSP timeout system property.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

CONNECT_TIMEOUT	back to summary
private static final int CONNECT_TIMEOUT Integer value indicating the timeout length, in milliseconds, to be used for establishing a connection to an OCSP responder. A timeout of zero is interpreted as an infinite timeout.

debug	back to summary
private static final Debug debug

DEFAULT_CONNECT_TIMEOUT	back to summary
private static final int DEFAULT_CONNECT_TIMEOUT

READ_TIMEOUT	back to summary
private static final int READ_TIMEOUT Integer value indicating the timeout length, in milliseconds, to be used for reading an OCSP response from the responder. A timeout of zero is interpreted as an infinite timeout.

USE_GET	back to summary
private static final boolean USE_GET Boolean value indicating whether OCSP client can use GET for OCSP requests. There is an ambiguity in RFC recommendations. RFC 5019 says a stronger thing, "MUST": "When sending requests that are less than or equal to 255 bytes in total (after encoding) including the scheme and delimiters (http://), server name and base64-encoded OCSPRequest structure, clients MUST use the GET method (to enable OCSP response caching)." RFC 6960 says a weaker thing, "MAY": "HTTP-based OCSP requests can use either the GET or the POST method to submit their requests. To enable HTTP caching, small requests (that after encoding are less than 255 bytes) MAY be submitted using GET." For performance reasons, we default to stronger behavior. But this option also allows to fallback to weaker behavior in case of compatibility problems.

USE_GET

back to summary

private static final boolean USE_GET

Boolean value indicating whether OCSP client can use GET for OCSP requests. There is an ambiguity in RFC recommendations. RFC 5019 says a stronger thing, "MUST": "When sending requests that are less than or equal to 255 bytes in total (after encoding) including the scheme and delimiters (http://), server name and base64-encoded OCSPRequest structure, clients MUST use the GET method (to enable OCSP response caching)." RFC 6960 says a weaker thing, "MAY": "HTTP-based OCSP requests can use either the GET or the POST method to submit their requests. To enable HTTP caching, small requests (that after encoding are less than 255 bytes) MAY be submitted using GET." For performance reasons, we default to stronger behavior. But this option also allows to fallback to weaker behavior in case of compatibility problems.

Constructor Detail

OCSP	back to summary
private OCSP()

Method Detail

check back to summary

check	back to summary
pack-priv static OCSPResponse check(List<CertId> certIds, URI responderURI, OCSPResponse.IssuerInfo issuerInfo, X509Certificate responderCert, Date date, List<Extension> extensions, String variant) throws IOException, CertPathValidatorException Checks the revocation status of a list of certificates using OCSP. Parameters certIds:List<CertId> the CertIds to be checked responderURI:URI the URI of the OCSP responder issuerInfo:OCSPResponse.IssuerInfo the issuer's certificate and/or subject and public key responderCert:X509Certificate the OCSP responder's certificate date:Date the time the validity of the OCSP responder's certificate should be checked against. If null, the current time is used. extensions:List<Extension> zero or more OCSP extensions to be included in the request. If no extensions are requested, an empty `List` must be used. A `null` value is not allowed. Returns:OCSPResponse the OCSPResponse Exceptions IOException: if there is an exception connecting to or communicating with the OCSP responder CertPathValidatorException: if an exception occurs while encoding the OCSP Request or validating the OCSP Response

pack-priv static OCSPResponse check(List<CertId> certIds, URI responderURI, OCSPResponse.IssuerInfo issuerInfo, X509Certificate responderCert, Date date, List<Extension> extensions, String variant) throws IOException, CertPathValidatorException

Checks the revocation status of a list of certificates using OCSP.

Parameters

certIds:List<CertId>: the CertIds to be checked
responderURI:URI: the URI of the OCSP responder
issuerInfo:OCSPResponse.IssuerInfo: the issuer's certificate and/or subject and public key
responderCert:X509Certificate: the OCSP responder's certificate
date:Date: the time the validity of the OCSP responder's certificate should be checked against. If null, the current time is used.
extensions:List<Extension>: zero or more OCSP extensions to be included in the request. If no extensions are requested, an empty List must be used. A null value is not allowed.

Returns:OCSPResponse

the OCSPResponse

Exceptions

IOException:: if there is an exception connecting to or communicating with the OCSP responder
CertPathValidatorException:: if an exception occurs while encoding the OCSP Request or validating the OCSP Response

getOCSPBytes back to summary

getOCSPBytes	back to summary
public static byte[] getOCSPBytes(List<CertId> certIds, URI responderURI, List<Extension> extensions) throws IOException Send an OCSP request, then read and return the OCSP response bytes. Parameters certIds:List<CertId> the CertIds to be checked responderURI:URI the URI of the OCSP responder extensions:List<Extension> zero or more OCSP extensions to be included in the request. If no extensions are requested, an empty `List` must be used. A `null` value is not allowed. Returns:byte[] the OCSP response bytes Exceptions IOException: if there is an exception connecting to or communicating with the OCSP responder

public static byte[] getOCSPBytes(List<CertId> certIds, URI responderURI, List<Extension> extensions) throws IOException

Send an OCSP request, then read and return the OCSP response bytes.

Parameters

certIds:List<CertId>: the CertIds to be checked
responderURI:URI: the URI of the OCSP responder
extensions:List<Extension>: zero or more OCSP extensions to be included in the request. If no extensions are requested, an empty List must be used. A null value is not allowed.

Returns:byte[]

the OCSP response bytes

Exceptions

IOException:: if there is an exception connecting to or communicating with the OCSP responder

getResponderURI	back to summary
public static URI getResponderURI(X509Certificate cert) Returns the URI of the OCSP Responder as specified in the certificate's Authority Information Access extension, or null if not specified. Parameters cert:X509Certificate the certificate Returns:URI the URI of the OCSP Responder, or null if not specified

getResponderURI

back to summary

public static URI getResponderURI(X509Certificate cert)

Returns the URI of the OCSP Responder as specified in the certificate's Authority Information Access extension, or null if not specified.

Parameters

cert:X509Certificate: the certificate

Returns:URI

the URI of the OCSP Responder, or null if not specified

getResponderURI	back to summary
pack-priv static URI getResponderURI(X509CertImpl certImpl)

initializeBoolean	back to summary
private static boolean initializeBoolean(String prop, boolean def)

initializeTimeout	back to summary
private static int initializeTimeout(String prop, int def) Initialize the timeout length by getting the OCSP timeout system property. If the property has not been set, or if its value is negative, set the timeout length to the default.

sun.security.provider.certpath back to summary

public Interface OCSP.RevocationStatus

Known Direct Implementers: sun.security.provider.certpath.OCSPResponse.SingleResponse

The Revocation Status of a certificate.

Nested and Inner Type Summary

Modifier and Type	Class and Description
public static enum	OCSP.RevocationStatus.CertStatus

Method Summary

Modifier and Type	Method and Description
public OCSP.RevocationStatus.CertStatus	getCertStatus() Returns the revocation status.
public CRLReason	getRevocationReason() Returns the reason the certificate was revoked, or null if it has not been revoked.
public Date	getRevocationTime() Returns the time when the certificate was revoked, or null if it has not been revoked.
public Map<String, Extension>	getSingleExtensions() Returns a Map of additional extensions.

Method Detail

getCertStatus	back to summary
public OCSP.RevocationStatus.CertStatus getCertStatus() Returns the revocation status.

getRevocationReason	back to summary
public CRLReason getRevocationReason() Returns the reason the certificate was revoked, or null if it has not been revoked.

getRevocationTime	back to summary
public Date getRevocationTime() Returns the time when the certificate was revoked, or null if it has not been revoked.

getSingleExtensions	back to summary
public Map<String, Extension> getSingleExtensions() Returns a Map of additional extensions.

sun.security.provider.certpath back to summary

public final Enum OCSP.RevocationStatus.CertStatus

Class Inheritance

extends Enum<OCSP.RevocationStatus.CertStatus>

java.lang.Object
java.lang.Enum
sun.security.provider.certpath.OCSP.RevocationStatus.CertStatus

Field Summary

Modifier and Type	Field and Description
public static final OCSP.RevocationStatus.CertStatus	GOOD
public static final OCSP.RevocationStatus.CertStatus	REVOKED
public static final OCSP.RevocationStatus.CertStatus	UNKNOWN

Constructor Summary

Access	Constructor and Description
private	CertStatus()

Method Summary

Modifier and Type	Method and Description
public static OCSP.RevocationStatus.CertStatus	valueOf(String name)
public static OCSP.RevocationStatus.CertStatus[]	values()

Inherited from java.lang.Enum:: clone compareTo describeConstable equals finalize getDeclaringClass hashCode name ordinal toString valueOf

Field Detail

GOOD	back to summary
public static final OCSP.RevocationStatus.CertStatus GOOD

REVOKED	back to summary
public static final OCSP.RevocationStatus.CertStatus REVOKED

UNKNOWN	back to summary
public static final OCSP.RevocationStatus.CertStatus UNKNOWN

Constructor Detail

CertStatus	back to summary
private CertStatus()

Method Detail

valueOf	back to summary
public static OCSP.RevocationStatus.CertStatus valueOf(String name)

values	back to summary
public static OCSP.RevocationStatus.CertStatus[] values()

public final Class OCSP

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

public Interface OCSP.RevocationStatus

Nested and Inner Type Summary

Method Summary

Method Detail

public final Enum OCSP.RevocationStatus.CertStatus

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail