Modifier and Type	Class and Description
private static enum	RevocationChecker.Mode
private static class	RevocationChecker.RejectKeySelector
private static class	RevocationChecker.RevocationProperties

Modifier and Type	Field and Description
private static final boolean[]	ALL_REASONS
private TrustAnchor	anchor
private int	certIndex
private List<CertStore>	certStores
private static final boolean[]	CRL_SIGN_USAGE
private boolean	crlDP
private boolean	crlSignFlag
private static final Debug	debug
private static final int	DEFAULT_NONCE_BYTES
private OCSPResponse.IssuerInfo	issuerInfo
private final boolean	legacy
private static final long	MAX_CLOCK_SKEW
private RevocationChecker.Mode	mode
private List<Extension>	ocspExtensions Hides java.security.cert.PKIXRevocationChecker.ocspExtensions.
private Map<X509Certificate, byte[]>	ocspResponses Hides java.security.cert.PKIXRevocationChecker.ocspResponses.
private boolean	onlyEE
private PKIX.ValidatorParams	params
private PublicKey	prevPubKey
private X509Certificate	responderCert
private URI	responderURI
private RevocationChecker.RevocationProperties	rp
private boolean	softFail
private final LinkedList<CertPathValidatorException>	softFailExceptions

Access	Constructor and Description
pack-priv	RevocationChecker()
pack-priv	RevocationChecker(TrustAnchor anchor, PKIX.ValidatorParams params)

Method Summary

Modifier and Type	Method and Description
private void	buildToNewKey(X509Certificate the `X509Certificate` to be checked currCert, PublicKey the `PublicKey` of the certificate whose key cannot be used to vouch for the CRL and should be ignored prevKey, Set<X509Certificate> a `Set` of `X509Certificate`s> whose revocation status depends on the establishment of this path. stackedCerts) Tries to find a CertPath that establishes a key that can be used to verify the revocation status of a given certificate.
pack-priv static boolean	Returns: a boolean specifying if the cert is allowed to vouch for the validity of a CRL certCanSignCrl(X509Certificate an X509Certificate to check cert) Checks that a cert can be used to verify a CRL.
public void	check(Certificate cert, Collection<String> unresolvedCritExts) Implements abstract java.security.cert.PKIXCertPathChecker.check. Performs the check(s) on the specified certificate using its internal state and removes any critical extensions that it processes from the specified collection of OID strings that represent the unresolved critical extensions.
private void	check(X509Certificate xcert, Collection<String> unresolvedCritExts, PublicKey pubKey, boolean crlSignFlag)
private void	checkApprovedCRLs(X509Certificate cert, Set<X509CRL> approvedCRLs)
private void	checkCRLs(X509Certificate cert, Collection<String> unresolvedCritExts, Set<X509Certificate> stackedCerts, PublicKey pubKey, boolean signFlag)
private void	checkCRLs(X509Certificate cert, PublicKey prevKey, X509Certificate prevCert, boolean signFlag, boolean allowSeparateKey, Set<X509Certificate> stackedCerts, Set<TrustAnchor> anchors)
private void	checkOCSP(X509Certificate cert, Collection<String> unresolvedCritExts)
private static X509Certificate	getResponderCert(RevocationChecker.RevocationProperties rp, Set<TrustAnchor> anchors, List<CertStore> stores)
private static X509Certificate	getResponderCert(String subject, Set<TrustAnchor> anchors, List<CertStore> stores)
private static X509Certificate	getResponderCert(String issuer, String serial, Set<TrustAnchor> anchors, List<CertStore> stores)
private static X509Certificate	getResponderCert(X509CertSelector sel, Set<TrustAnchor> anchors, List<CertStore> stores)
private static RevocationChecker.RevocationProperties	getRevocationProperties()
public List<CertPathValidatorException>	getSoftFailExceptions() Implements abstract java.security.cert.PKIXRevocationChecker.getSoftFailExceptions. Returns a list containing the exceptions that are ignored by the revocation checker when the `SOFT_FAIL` option is set.
public Set<String>	getSupportedExtensions() Implements abstract java.security.cert.PKIXCertPathChecker.getSupportedExtensions. Returns an immutable `Set` of X.509 certificate extensions that this `PKIXCertPathChecker` supports (i.e. recognizes, is able to process), or `null` if no extensions are supported.
pack-priv void	init(TrustAnchor anchor, PKIX.ValidatorParams params)
public void	init(boolean forward) Implements abstract java.security.cert.PKIXCertPathChecker.init. Implements java.security.cert.CertPathChecker.init. Initializes the internal state of this `PKIXCertPathChecker`.
pack-priv static boolean	isCausedByNetworkIssue(String type, CertStoreException cse)
public boolean	isForwardCheckingSupported() Implements abstract java.security.cert.PKIXCertPathChecker.isForwardCheckingSupported. Implements java.security.cert.CertPathChecker.isForwardCheckingSupported. Indicates if forward checking is supported.
private boolean	isSoftFailException(CertPathValidatorException e)
private static String	stripOutSeparators(String value)
private static URI	toURI(String uriString)
private void	updateState(X509Certificate cert)
private Collection<X509CRL>	Returns: a collection of approved crls (or an empty collection) verifyPossibleCRLs(Set<X509CRL> a set of possible CRLs to test for acceptability crls, X509Certificate the certificate whose revocation status is being checked cert, PublicKey the public key of the issuer of cert prevKey, boolean `true` if prevKey was trusted to sign CRLs signFlag, boolean[] the reason code mask reasonsMask, Set<TrustAnchor> a `Set` of `TrustAnchor`s> anchors) Internal method that verifies a set of possible_crls, and sees if each is approved, based on the cert.
private void	verifyWithSeparateSigningKey(X509Certificate the `X509Certificate` to be checked cert, PublicKey the `PublicKey` that failed prevKey, boolean `true` if that key was trusted to sign CRLs signFlag, Set<X509Certificate> a `Set` of `X509Certificate`s whose revocation status depends on the non-revoked status of this cert. To avoid circular dependencies, we assume they're revoked while checking the revocation status of this cert. stackedCerts) We have a cert whose revocation status couldn't be verified by a CRL issued by the cert that issued the CRL.

Inherited from java.security.cert.PKIXRevocationChecker:: clone getOcspExtensions getOcspResponder getOcspResponderCert getOcspResponses getOptions setOcspExtensions setOcspResponder setOcspResponderCert setOcspResponses setOptions

Field Detail

ALL_REASONS	back to summary
private static final boolean[] ALL_REASONS

anchor	back to summary
private TrustAnchor anchor

certIndex	back to summary
private int certIndex

certStores	back to summary
private List<CertStore> certStores

CRL_SIGN_USAGE	back to summary
private static final boolean[] CRL_SIGN_USAGE

crlDP	back to summary
private boolean crlDP

crlSignFlag	back to summary
private boolean crlSignFlag

debug	back to summary
private static final Debug debug

DEFAULT_NONCE_BYTES	back to summary
private static final int DEFAULT_NONCE_BYTES

issuerInfo	back to summary
private OCSPResponse.IssuerInfo issuerInfo

legacy	back to summary
private final boolean legacy

MAX_CLOCK_SKEW	back to summary
private static final long MAX_CLOCK_SKEW

mode	back to summary
private RevocationChecker.Mode mode

ocspExtensions	back to summary
private List<Extension> ocspExtensions Hides java.security.cert.PKIXRevocationChecker.ocspExtensions.

ocspResponses	back to summary
private Map<X509Certificate, byte[]> ocspResponses Hides java.security.cert.PKIXRevocationChecker.ocspResponses.

onlyEE	back to summary
private boolean onlyEE

params	back to summary
private PKIX.ValidatorParams params

prevPubKey	back to summary
private PublicKey prevPubKey

responderCert	back to summary
private X509Certificate responderCert

responderURI	back to summary
private URI responderURI

rp	back to summary
private RevocationChecker.RevocationProperties rp

softFail	back to summary
private boolean softFail

softFailExceptions	back to summary
private final LinkedList<CertPathValidatorException> softFailExceptions

Constructor Detail

RevocationChecker	back to summary
pack-priv RevocationChecker()

RevocationChecker	back to summary
pack-priv RevocationChecker(TrustAnchor anchor, PKIX.ValidatorParams params) throws CertPathValidatorException

Method Detail

buildToNewKey back to summary

buildToNewKey	back to summary
private void buildToNewKey(X509Certificate currCert, PublicKey prevKey, Set<X509Certificate> stackedCerts) throws CertPathValidatorException Tries to find a CertPath that establishes a key that can be used to verify the revocation status of a given certificate. Ignores keys that have previously been tried. Throws a CertPathValidatorException if no such key could be found. Parameters currCert:X509Certificate the `X509Certificate` to be checked prevKey:PublicKey the `PublicKey` of the certificate whose key cannot be used to vouch for the CRL and should be ignored stackedCerts:Set<X509Certificate> a `Set` of `X509Certificate`s> whose revocation status depends on the establishment of this path. Exceptions CertPathValidatorException: on failure

private void buildToNewKey(X509Certificate currCert, PublicKey prevKey, Set<X509Certificate> stackedCerts) throws CertPathValidatorException

Tries to find a CertPath that establishes a key that can be used to verify the revocation status of a given certificate. Ignores keys that have previously been tried. Throws a CertPathValidatorException if no such key could be found.

Parameters

currCert:X509Certificate: the X509Certificate to be checked
prevKey:PublicKey: the PublicKey of the certificate whose key cannot be used to vouch for the CRL and should be ignored
stackedCerts:Set<X509Certificate>: a Set of X509Certificates> whose revocation status depends on the establishment of this path.

Exceptions

CertPathValidatorException:: on failure

certCanSignCrl	back to summary
pack-priv static boolean certCanSignCrl(X509Certificate cert) Checks that a cert can be used to verify a CRL. Parameters cert:X509Certificate an X509Certificate to check Returns:boolean a boolean specifying if the cert is allowed to vouch for the validity of a CRL

certCanSignCrl

back to summary

pack-priv static boolean certCanSignCrl(X509Certificate cert)

Checks that a cert can be used to verify a CRL.

Parameters

cert:X509Certificate: an X509Certificate to check

Returns:boolean

a boolean specifying if the cert is allowed to vouch for the validity of a CRL

check back to summary

check	back to summary
public void check(Certificate cert, Collection<String> unresolvedCritExts) throws CertPathValidatorException Implements abstract java.security.cert.PKIXCertPathChecker.check. Doc from java.security.cert.PKIXCertPathChecker.check. Performs the check(s) on the specified certificate using its internal state and removes any critical extensions that it processes from the specified collection of OID strings that represent the unresolved critical extensions. The certificates are presented in the order specified by the `init` method. Annotations @Override Exceptions CertPathValidatorException: if the specified certificate does not pass the check

public void check(Certificate cert, Collection<String> unresolvedCritExts) throws CertPathValidatorException

Implements abstract java.security.cert.PKIXCertPathChecker.check.

Doc from java.security.cert.PKIXCertPathChecker.check.

Performs the check(s) on the specified certificate using its internal state and removes any critical extensions that it processes from the specified collection of OID strings that represent the unresolved critical extensions. The certificates are presented in the order specified by the init method.

Annotations

@Override

Exceptions

CertPathValidatorException:: if the specified certificate does not pass the check

check	back to summary
private void check(X509Certificate xcert, Collection<String> unresolvedCritExts, PublicKey pubKey, boolean crlSignFlag) throws CertPathValidatorException

checkApprovedCRLs	back to summary
private void checkApprovedCRLs(X509Certificate cert, Set<X509CRL> approvedCRLs) throws CertPathValidatorException

checkCRLs	back to summary
private void checkCRLs(X509Certificate cert, Collection<String> unresolvedCritExts, Set<X509Certificate> stackedCerts, PublicKey pubKey, boolean signFlag) throws CertPathValidatorException

checkCRLs	back to summary
private void checkCRLs(X509Certificate cert, PublicKey prevKey, X509Certificate prevCert, boolean signFlag, boolean allowSeparateKey, Set<X509Certificate> stackedCerts, Set<TrustAnchor> anchors) throws CertPathValidatorException

checkOCSP	back to summary
private void checkOCSP(X509Certificate cert, Collection<String> unresolvedCritExts) throws CertPathValidatorException

getResponderCert	back to summary
private static X509Certificate getResponderCert(RevocationChecker.RevocationProperties rp, Set<TrustAnchor> anchors, List<CertStore> stores) throws CertPathValidatorException

getResponderCert	back to summary
private static X509Certificate getResponderCert(String subject, Set<TrustAnchor> anchors, List<CertStore> stores) throws CertPathValidatorException

getResponderCert	back to summary
private static X509Certificate getResponderCert(String issuer, String serial, Set<TrustAnchor> anchors, List<CertStore> stores) throws CertPathValidatorException

getResponderCert	back to summary
private static X509Certificate getResponderCert(X509CertSelector sel, Set<TrustAnchor> anchors, List<CertStore> stores) throws CertPathValidatorException

getRevocationProperties	back to summary
private static RevocationChecker.RevocationProperties getRevocationProperties()

getSoftFailExceptions back to summary

getSoftFailExceptions	back to summary
public List<CertPathValidatorException> getSoftFailExceptions() Implements abstract java.security.cert.PKIXRevocationChecker.getSoftFailExceptions. Doc from java.security.cert.PKIXRevocationChecker.getSoftFailExceptions. Returns a list containing the exceptions that are ignored by the revocation checker when the `SOFT_FAIL` option is set. The list is cleared each time `init` is called. The list is ordered in ascending order according to the certificate index returned by `getIndex` method of each entry. An implementation of `PKIXRevocationChecker` is responsible for adding the ignored exceptions to the list. Annotations @Override

public List<CertPathValidatorException> getSoftFailExceptions()

Implements abstract java.security.cert.PKIXRevocationChecker.getSoftFailExceptions.

Doc from java.security.cert.PKIXRevocationChecker.getSoftFailExceptions.

Returns a list containing the exceptions that are ignored by the revocation checker when the SOFT_FAIL option is set. The list is cleared each time init is called. The list is ordered in ascending order according to the certificate index returned by getIndex method of each entry.

An implementation of PKIXRevocationChecker is responsible for adding the ignored exceptions to the list.

Annotations

@Override

getSupportedExtensions back to summary

getSupportedExtensions	back to summary
public Set<String> getSupportedExtensions() Implements abstract java.security.cert.PKIXCertPathChecker.getSupportedExtensions. Doc from java.security.cert.PKIXCertPathChecker.getSupportedExtensions. Returns an immutable `Set` of X.509 certificate extensions that this `PKIXCertPathChecker` supports (i.e. recognizes, is able to process), or `null` if no extensions are supported. Each element of the set is a `String` representing the Object Identifier (OID) of the X.509 extension that is supported. The OID is represented by a set of nonnegative integers separated by periods. All X.509 certificate extensions that a `PKIXCertPathChecker` might possibly be able to process should be included in the set. Annotations @Override

public Set<String> getSupportedExtensions()

Implements abstract java.security.cert.PKIXCertPathChecker.getSupportedExtensions.

Doc from java.security.cert.PKIXCertPathChecker.getSupportedExtensions.

Returns an immutable Set of X.509 certificate extensions that this PKIXCertPathChecker supports (i.e. recognizes, is able to process), or null if no extensions are supported.

Each element of the set is a String representing the Object Identifier (OID) of the X.509 extension that is supported. The OID is represented by a set of nonnegative integers separated by periods.

All X.509 certificate extensions that a PKIXCertPathChecker might possibly be able to process should be included in the set.

Annotations

@Override

init	back to summary
pack-priv void init(TrustAnchor anchor, PKIX.ValidatorParams params) throws CertPathValidatorException

init back to summary

init	back to summary
public void init(boolean forward) throws CertPathValidatorException Implements abstract java.security.cert.PKIXCertPathChecker.init. Implements java.security.cert.CertPathChecker.init. Doc from java.security.cert.PKIXCertPathChecker.init. Initializes the internal state of this `PKIXCertPathChecker`. The `forward` flag specifies the order that certificates will be passed to the `check` method (forward or reverse). A `PKIXCertPathChecker` must support reverse checking and may support forward checking. Annotations @Override Exceptions CertPathValidatorException: if this `PKIXCertPathChecker` is unable to check certificates in the specified order; it should never be thrown if the forward flag is false since reverse checking must be supported

public void init(boolean forward) throws CertPathValidatorException

Implements abstract java.security.cert.PKIXCertPathChecker.init.

Implements java.security.cert.CertPathChecker.init.

Doc from java.security.cert.PKIXCertPathChecker.init.

Initializes the internal state of this PKIXCertPathChecker.

The forward flag specifies the order that certificates will be passed to the check method (forward or reverse). A PKIXCertPathChecker must support reverse checking and may support forward checking.

Annotations

@Override

Exceptions

CertPathValidatorException:: if this PKIXCertPathChecker is unable to check certificates in the specified order; it should never be thrown if the forward flag is false since reverse checking must be supported

isCausedByNetworkIssue	back to summary
pack-priv static boolean isCausedByNetworkIssue(String type, CertStoreException cse)

isForwardCheckingSupported back to summary

isForwardCheckingSupported	back to summary
public boolean isForwardCheckingSupported() Implements abstract java.security.cert.PKIXCertPathChecker.isForwardCheckingSupported. Implements java.security.cert.CertPathChecker.isForwardCheckingSupported. Doc from java.security.cert.PKIXCertPathChecker.isForwardCheckingSupported. Indicates if forward checking is supported. Forward checking refers to the ability of the `PKIXCertPathChecker` to perform its checks when certificates are presented to the `check` method in the forward direction (from target to most-trusted CA). Annotations @Override

public boolean isForwardCheckingSupported()

Implements abstract java.security.cert.PKIXCertPathChecker.isForwardCheckingSupported.

Implements java.security.cert.CertPathChecker.isForwardCheckingSupported.

Doc from java.security.cert.PKIXCertPathChecker.isForwardCheckingSupported.

Indicates if forward checking is supported. Forward checking refers to the ability of the PKIXCertPathChecker to perform its checks when certificates are presented to the check method in the forward direction (from target to most-trusted CA).

Annotations

@Override

isSoftFailException	back to summary
private boolean isSoftFailException(CertPathValidatorException e)

stripOutSeparators	back to summary
private static String stripOutSeparators(String value)

toURI	back to summary
private static URI toURI(String uriString) throws CertPathValidatorException

updateState	back to summary
private void updateState(X509Certificate cert) throws CertPathValidatorException

verifyPossibleCRLs back to summary

private Collection<X509CRL> verifyPossibleCRLs(Set<X509CRL> crls, X509Certificate cert, PublicKey prevKey, boolean signFlag, boolean[] reasonsMask, Set<TrustAnchor> anchors)

Internal method that verifies a set of possible_crls, and sees if each is approved, based on the cert.

Parameters

crls:Set<X509CRL>: a set of possible CRLs to test for acceptability
cert:X509Certificate: the certificate whose revocation status is being checked
prevKey:PublicKey: the public key of the issuer of cert
signFlag:boolean: true if prevKey was trusted to sign CRLs
reasonsMask:boolean[]: the reason code mask
anchors:Set<TrustAnchor>: a Set of TrustAnchors>

Returns:Collection<X509CRL>

a collection of approved crls (or an empty collection)

verifyWithSeparateSigningKey back to summary

private void verifyWithSeparateSigningKey(X509Certificate cert, PublicKey prevKey, boolean signFlag, Set<X509Certificate> stackedCerts) throws CertPathValidatorException

We have a cert whose revocation status couldn't be verified by a CRL issued by the cert that issued the CRL. See if we can find a valid CRL issued by a separate key that can verify the revocation status of this certificate.

Note that this does not provide support for indirect CRLs, only CRLs signed with a different key (but the same issuer name) as the certificate being checked.

Parameters

cert:X509Certificate: the X509Certificate to be checked
prevKey:PublicKey: the PublicKey that failed
signFlag:boolean: true if that key was trusted to sign CRLs
stackedCerts:Set<X509Certificate>: a Set of X509Certificates whose revocation status depends on the non-revoked status of this cert. To avoid circular dependencies, we assume they're revoked while checking the revocation status of this cert.

Exceptions

CertPathValidatorException:: if the cert's revocation status cannot be verified successfully with another key

sun.security.provider.certpath back to summary

private final Enum RevocationChecker.Mode

Class Inheritance

extends Enum<RevocationChecker.Mode>

java.lang.Object
java.lang.Enum
sun.security.provider.certpath.RevocationChecker.Mode

Field Summary

Modifier and Type	Field and Description
public static final RevocationChecker.Mode	ONLY_CRLS
public static final RevocationChecker.Mode	ONLY_OCSP
public static final RevocationChecker.Mode	PREFER_CRLS
public static final RevocationChecker.Mode	PREFER_OCSP

Constructor Summary

Access	Constructor and Description
private	Mode()

Method Summary

Modifier and Type	Method and Description
public static RevocationChecker.Mode	valueOf(String name)
public static RevocationChecker.Mode[]	values()

Inherited from java.lang.Enum:: clone compareTo describeConstable equals finalize getDeclaringClass hashCode name ordinal toString valueOf

Field Detail

ONLY_CRLS	back to summary
public static final RevocationChecker.Mode ONLY_CRLS

ONLY_OCSP	back to summary
public static final RevocationChecker.Mode ONLY_OCSP

PREFER_CRLS	back to summary
public static final RevocationChecker.Mode PREFER_CRLS

PREFER_OCSP	back to summary
public static final RevocationChecker.Mode PREFER_OCSP

Constructor Detail

Mode	back to summary
private Mode()

Method Detail

valueOf	back to summary
public static RevocationChecker.Mode valueOf(String name)

values	back to summary
public static RevocationChecker.Mode[] values()

sun.security.provider.certpath back to summary

private Class RevocationChecker.RejectKeySelector

Class Inheritance

extends X509CertSelector

java.lang.Object
java.security.cert.X509CertSelector
sun.security.provider.certpath.RevocationChecker.RejectKeySelector

Field Summary

Modifier and Type	Field and Description
private final Set<PublicKey>	badKeySet

Constructor Summary

Access	Constructor and Description
pack-priv	RejectKeySelector(Set<PublicKey> a `Set` of `PublicKey`s that should be rejected (or `null` if no such check should be done) badPublicKeys) Creates a new `RejectKeySelector`.

Method Summary

Modifier and Type	Method and Description
public boolean	Returns: `true` if the `Certificate` should be selected, `false` otherwise match(Certificate the `Certificate` to be checked cert) Overrides java.security.cert.X509CertSelector.match. Implements java.security.cert.CertSelector.match. Decides whether a `Certificate` should be selected.
public String	Returns: a `String` describing the contents of the `CertSelector` toString() Overrides java.security.cert.X509CertSelector.toString. Return a printable representation of the `CertSelector`.

Inherited from java.security.cert.X509CertSelector:: addPathToName addPathToName addSubjectAlternativeName addSubjectAlternativeName clone getAuthorityKeyIdentifier getBasicConstraints getCertificate getCertificateValid getExtendedKeyUsage getIssuer getIssuerAsBytes getIssuerAsString getKeyUsage getMatchAllSubjectAltNames getNameConstraints getPathToNames getPolicy getPrivateKeyValid getSerialNumber getSubject getSubjectAlternativeNames getSubjectAsBytes getSubjectAsString getSubjectKeyIdentifier getSubjectPublicKey getSubjectPublicKeyAlgID setAuthorityKeyIdentifier setBasicConstraints setCertificate setCertificateValid setExtendedKeyUsage setIssuer setIssuer setIssuer setKeyUsage setMatchAllSubjectAltNames setNameConstraints setPathToNames setPolicy setPrivateKeyValid setSerialNumber setSubject setSubject setSubject setSubjectAlternativeNames setSubjectKeyIdentifier setSubjectPublicKey setSubjectPublicKey setSubjectPublicKeyAlgID

Field Detail

badKeySet	back to summary
private final Set<PublicKey> badKeySet

Constructor Detail

RejectKeySelector back to summary

pack-priv RejectKeySelector(Set<PublicKey> badPublicKeys)

Creates a new RejectKeySelector.

Parameters

badPublicKeys:Set<PublicKey>: a Set of PublicKeys that should be rejected (or null if no such check should be done)

Method Detail

match back to summary

public boolean match(Certificate cert)

Overrides java.security.cert.X509CertSelector.match.

Implements java.security.cert.CertSelector.match.

Decides whether a Certificate should be selected.

Parameters

cert:Certificate: the Certificate to be checked

Returns:boolean

true if the Certificate should be selected, false otherwise

Annotations

@Override

toString back to summary

public String toString()

Overrides java.security.cert.X509CertSelector.toString.

Return a printable representation of the CertSelector.

Returns:String

a String describing the contents of the CertSelector

Annotations

@Override

Modifier and Type	Field and Description
pack-priv boolean	crlDPEnabled
pack-priv boolean	ocspEnabled
pack-priv String	ocspIssuer
pack-priv boolean	ocspNonce
pack-priv String	ocspSerial
pack-priv String	ocspSubject
pack-priv String	ocspUrl
pack-priv boolean	onlyEE

pack-priv Class RevocationChecker

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

private final Enum RevocationChecker.Mode

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

private Class RevocationChecker.RejectKeySelector

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

private Class RevocationChecker.RevocationProperties

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail