Modifier and Type	Class and Description
pack-priv class	StatusResponseManager.OCSPFetchCall Inner Callable class that does the actual work of looking up OCSP responses, first looking at the cache and doing OCSP requests if a cache miss occurs.
pack-priv static class	StatusResponseManager.ResponseCacheEntry Static nested class used as the data kept in the response cache.
pack-priv static class	StatusResponseManager.StaplingParameters Inner class used to hold stapling parameters needed by the handshaker when stapling is active.
pack-priv class	StatusResponseManager.StatusInfo Inner class used to group request and response data.

Modifier and Type	Field and Description
private final int	cacheCapacity
private final int	cacheLifetime
private static final int	DEFAULT_CACHE_LIFETIME
private static final int	DEFAULT_CACHE_SIZE
private static final int	DEFAULT_CORE_THREADS
private final URI	defaultResponder
private final boolean	ignoreExtensions
private final Cache<CertId, StatusResponseManager.ResponseCacheEntry>	responseCache
private final boolean	respOverride
private final ScheduledThreadPoolExecutor	threadMgr

Access	Constructor and Description
pack-priv	StatusResponseManager() Create a StatusResponseManager with default parameters.

Method Summary

Modifier and Type	Method and Description
pack-priv Map<X509Certificate, byte[]>	Returns: an unmodifiable `Map` containing the certificate and its usually get(CertStatusExtension.CertStatusRequestType the type of request being made of the `StatusResponseManager` type, CertStatusExtension.CertStatusRequest the `CertStatusRequest` from the status_request or status_request_v2 ClientHello extension. A value of `null` is interpreted as providing no responder IDs or extensions. request, X509Certificate[] an array of 2 or more certificates. Each certificate must be issued by the next certificate in the chain. chain, long the number of time units to delay before returning responses. delay, TimeUnit the unit of time applied to the `delay` parameter unit) Get a list of responses for a chain of certificates.
private StatusResponseManager.ResponseCacheEntry	Returns: the `ResponseCacheEntry` for a specific CertId, or `null` if it is not found or a nonce extension has been requested by the caller. getFromCache(CertId the CertId of the response to look up cid, CertStatusExtension.OCSPStatusRequest the OCSP request structure sent by the client in the TLS status_request[_v2] hello extension. ocspRequest) Check the cache for a given `CertId`.
pack-priv URI	Returns: a `URI` containing the address to the OCSP responder, or `null` if no AIA extension exists in the certificate and no default responder has been configured. getURI(X509Certificate the subject to get the responder URI from cert) Obtain the URI use by the `StatusResponseManager` during lookups.
pack-priv static StatusResponseManager.StaplingParameters	processStapling(ServerHandshakeContext shc)
public String	toString() Overrides java.lang.Object.toString. Returns a string representation of the object.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll wait wait wait

cacheCapacity	back to summary
private final int cacheCapacity

cacheLifetime	back to summary
private final int cacheLifetime

DEFAULT_CACHE_LIFETIME	back to summary
private static final int DEFAULT_CACHE_LIFETIME

DEFAULT_CACHE_SIZE	back to summary
private static final int DEFAULT_CACHE_SIZE

DEFAULT_CORE_THREADS	back to summary
private static final int DEFAULT_CORE_THREADS

defaultResponder	back to summary
private final URI defaultResponder

ignoreExtensions	back to summary
private final boolean ignoreExtensions

responseCache	back to summary
private final Cache<CertId, StatusResponseManager.ResponseCacheEntry> responseCache

respOverride	back to summary
private final boolean respOverride

threadMgr	back to summary
private final ScheduledThreadPoolExecutor threadMgr

Constructor Detail

StatusResponseManager	back to summary
pack-priv StatusResponseManager() Create a StatusResponseManager with default parameters.

Method Detail

get back to summary

get	back to summary
pack-priv Map<X509Certificate, byte[]> get(CertStatusExtension.CertStatusRequestType type, CertStatusExtension.CertStatusRequest request, X509Certificate[] chain, long delay, TimeUnit unit) Get a list of responses for a chain of certificates. This will find OCSP responses from the cache, or failing that, directly contact the OCSP responder. It is assumed that the certificates in the provided chain are in their proper order (from end-entity to trust anchor). Parameters type:CertStatusExtension.CertStatusRequestType the type of request being made of the `StatusResponseManager` request:CertStatusExtension.CertStatusRequest the `CertStatusRequest` from the status_request or status_request_v2 ClientHello extension. A value of `null` is interpreted as providing no responder IDs or extensions. chain:X509Certificate[] an array of 2 or more certificates. Each certificate must be issued by the next certificate in the chain. delay:long the number of time units to delay before returning responses. unit:TimeUnit the unit of time applied to the `delay` parameter Returns:Map<X509Certificate, byte[]> an unmodifiable `Map` containing the certificate and its usually

pack-priv Map<X509Certificate, byte[]> get(CertStatusExtension.CertStatusRequestType type, CertStatusExtension.CertStatusRequest request, X509Certificate[] chain, long delay, TimeUnit unit)

Get a list of responses for a chain of certificates. This will find OCSP responses from the cache, or failing that, directly contact the OCSP responder. It is assumed that the certificates in the provided chain are in their proper order (from end-entity to trust anchor).

Parameters

type:CertStatusExtension.CertStatusRequestType: the type of request being made of the StatusResponseManager
request:CertStatusExtension.CertStatusRequest: the CertStatusRequest from the status_request or status_request_v2 ClientHello extension. A value of null is interpreted as providing no responder IDs or extensions.
chain:X509Certificate[]: an array of 2 or more certificates. Each certificate must be issued by the next certificate in the chain.
delay:long: the number of time units to delay before returning responses.
unit:TimeUnit: the unit of time applied to the delay parameter

Returns:Map<X509Certificate, byte[]>

an unmodifiable Map containing the certificate and its usually

getFromCache back to summary

getFromCache	back to summary
private StatusResponseManager.ResponseCacheEntry getFromCache(CertId cid, CertStatusExtension.OCSPStatusRequest ocspRequest) Check the cache for a given `CertId`. Parameters cid:CertId the CertId of the response to look up ocspRequest:CertStatusExtension.OCSPStatusRequest the OCSP request structure sent by the client in the TLS status_request[_v2] hello extension. Returns:StatusResponseManager.ResponseCacheEntry the `ResponseCacheEntry` for a specific CertId, or `null` if it is not found or a nonce extension has been requested by the caller.

private StatusResponseManager.ResponseCacheEntry getFromCache(CertId cid, CertStatusExtension.OCSPStatusRequest ocspRequest)

Check the cache for a given CertId.

Parameters

cid:CertId: the CertId of the response to look up
ocspRequest:CertStatusExtension.OCSPStatusRequest: the OCSP request structure sent by the client in the TLS status_request[_v2] hello extension.

Returns:StatusResponseManager.ResponseCacheEntry

the ResponseCacheEntry for a specific CertId, or null if it is not found or a nonce extension has been requested by the caller.

getURI back to summary

getURI	back to summary
pack-priv URI getURI(X509Certificate cert) Obtain the URI use by the `StatusResponseManager` during lookups. This method takes into account not only the AIA extension from a certificate to be checked, but also any default URI and possible override settings for the response manager. Parameters cert:X509Certificate the subject to get the responder URI from Returns:URI a `URI` containing the address to the OCSP responder, or `null` if no AIA extension exists in the certificate and no default responder has been configured. Exceptions NullPointerException: if `cert` is `null`.

pack-priv URI getURI(X509Certificate cert)

Obtain the URI use by the StatusResponseManager during lookups. This method takes into account not only the AIA extension from a certificate to be checked, but also any default URI and possible override settings for the response manager.

Parameters

cert:X509Certificate: the subject to get the responder URI from

Returns:URI

a URI containing the address to the OCSP responder, or null if no AIA extension exists in the certificate and no default responder has been configured.

Exceptions

NullPointerException:: if cert is null.

processStapling	back to summary
pack-priv static StatusResponseManager.StaplingParameters processStapling(ServerHandshakeContext shc)

toString back to summary

toString	back to summary
public String toString() Overrides java.lang.Object.toString. Doc from java.lang.Object.toString. Returns a string representation of the object. Satisfying this method's contract implies a non-`null` result must be returned. Annotations @Override

public String toString()

Overrides java.lang.Object.toString.

Doc from java.lang.Object.toString.

Returns a string representation of the object. Satisfying this method's contract implies a non-null result must be returned.

Annotations

@Override

sun.security.ssl back to summary

pack-priv Class StatusResponseManager.OCSPFetchCall

Class Inheritance

extends Object
implements Callable<StatusResponseManager.StatusInfo>

java.lang.Object
sun.security.ssl.StatusResponseManager.OCSPFetchCall

All Implemented Interfaces

java.util.concurrent.Callable

Inner Callable class that does the actual work of looking up OCSP responses, first looking at the cache and doing OCSP requests if a cache miss occurs.

Field Summary

Modifier and Type	Field and Description
pack-priv List<Extension>	extensions
pack-priv CertStatusExtension.OCSPStatusRequest	ocspRequest
pack-priv List<ResponderId>	responderIds
pack-priv StatusResponseManager.StatusInfo	statInfo

Constructor Summary

Access	Constructor and Description
public	OCSPFetchCall(StatusResponseManager.StatusInfo the `StatusInfo` containing the subject certificate, CertId, and other supplemental info. info, CertStatusExtension.OCSPStatusRequest the `OCSPStatusRequest` containing any responder IDs and extensions. request) A constructor that builds the OCSPFetchCall from the provided StatusInfo and information from the status_request[_v2] extension.

Method Summary

Modifier and Type	Method and Description
private void	addToCache(CertId The `CertId` for the OCSP response certId, StatusResponseManager.ResponseCacheEntry A cache entry containing the response bytes and the `OCSPResponse` built from those bytes. entry) Add a response to the cache.
public StatusResponseManager.StatusInfo	Returns: The StatusInfo object passed into the `OCSPFetchCall` constructor, with the `responseData` field filled in with the response or `null` if no response can be obtained. call() Implements java.util.concurrent.Callable.call. Get an OCSP response, either from the cache or from a responder.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

extensions	back to summary
pack-priv List<Extension> extensions

ocspRequest	back to summary
pack-priv CertStatusExtension.OCSPStatusRequest ocspRequest

responderIds	back to summary
pack-priv List<ResponderId> responderIds

statInfo	back to summary
pack-priv StatusResponseManager.StatusInfo statInfo

Constructor Detail

OCSPFetchCall back to summary

OCSPFetchCall	back to summary
public OCSPFetchCall(StatusResponseManager.StatusInfo info, CertStatusExtension.OCSPStatusRequest request) A constructor that builds the OCSPFetchCall from the provided StatusInfo and information from the status_request[_v2] extension. Parameters info:StatusResponseManager.StatusInfo the `StatusInfo` containing the subject certificate, CertId, and other supplemental info. request:CertStatusExtension.OCSPStatusRequest the `OCSPStatusRequest` containing any responder IDs and extensions.

public OCSPFetchCall(StatusResponseManager.StatusInfo info, CertStatusExtension.OCSPStatusRequest request)

A constructor that builds the OCSPFetchCall from the provided StatusInfo and information from the status_request[_v2] extension.

Parameters

info:StatusResponseManager.StatusInfo: the StatusInfo containing the subject certificate, CertId, and other supplemental info.
request:CertStatusExtension.OCSPStatusRequest: the OCSPStatusRequest containing any responder IDs and extensions.

Method Detail

addToCache back to summary

addToCache	back to summary
private void addToCache(CertId certId, StatusResponseManager.ResponseCacheEntry entry) Add a response to the cache. Parameters certId:CertId The `CertId` for the OCSP response entry:StatusResponseManager.ResponseCacheEntry A cache entry containing the response bytes and the `OCSPResponse` built from those bytes.

private void addToCache(CertId certId, StatusResponseManager.ResponseCacheEntry entry)

Add a response to the cache.

Parameters

certId:CertId: The CertId for the OCSP response
entry:StatusResponseManager.ResponseCacheEntry: A cache entry containing the response bytes and the OCSPResponse built from those bytes.

call back to summary

call	back to summary
public StatusResponseManager.StatusInfo call() Implements java.util.concurrent.Callable.call. Get an OCSP response, either from the cache or from a responder. Returns:StatusResponseManager.StatusInfo The StatusInfo object passed into the `OCSPFetchCall` constructor, with the `responseData` field filled in with the response or `null` if no response can be obtained. Annotations @Override

public StatusResponseManager.StatusInfo call()

Implements java.util.concurrent.Callable.call.

Get an OCSP response, either from the cache or from a responder.

Returns:StatusResponseManager.StatusInfo

The StatusInfo object passed into the OCSPFetchCall constructor, with the responseData field filled in with the response or null if no response can be obtained.

Annotations

@Override

sun.security.ssl back to summary

pack-priv Class StatusResponseManager.ResponseCacheEntry

Class Inheritance

extends Object

java.lang.Object
sun.security.ssl.StatusResponseManager.ResponseCacheEntry

Static nested class used as the data kept in the response cache.

Field Summary

Modifier and Type	Field and Description
pack-priv final Date	nextUpdate
pack-priv final byte[]	ocspBytes
pack-priv final ResponderId	respId
pack-priv final OCSPResponse.SingleResponse	singleResp
pack-priv final OCSPResponse.ResponseStatus	status

Constructor Summary

Access	Constructor and Description
pack-priv	ResponseCacheEntry(byte[] the DER encoding for the OCSP response responseBytes, CertId cid) Create a new cache entry from the raw bytes of the response

Method Summary

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

nextUpdate	back to summary
pack-priv final Date nextUpdate

ocspBytes	back to summary
pack-priv final byte[] ocspBytes

respId	back to summary
pack-priv final ResponderId respId

singleResp	back to summary
pack-priv final OCSPResponse.SingleResponse singleResp

status	back to summary
pack-priv final OCSPResponse.ResponseStatus status

Constructor Detail

ResponseCacheEntry back to summary

ResponseCacheEntry	back to summary
pack-priv ResponseCacheEntry(byte[] responseBytes, CertId cid) throws IOException Create a new cache entry from the raw bytes of the response Parameters responseBytes:byte[] the DER encoding for the OCSP response Exceptions IOException: if an `OCSPResponse` cannot be created from the encoded bytes.

pack-priv ResponseCacheEntry(byte[] responseBytes, CertId cid) throws IOException

Create a new cache entry from the raw bytes of the response

Parameters

responseBytes:byte[]: the DER encoding for the OCSP response

Exceptions

IOException:: if an OCSPResponse cannot be created from the encoded bytes.

sun.security.ssl back to summary

pack-priv final Class StatusResponseManager.StaplingParameters

Class Inheritance

extends Object

java.lang.Object
sun.security.ssl.StatusResponseManager.StaplingParameters

Inner class used to hold stapling parameters needed by the handshaker when stapling is active.

Field Summary

Modifier and Type	Field and Description
pack-priv final Map<X509Certificate, byte[]>	responseMap
pack-priv final CertStatusExtension.CertStatusRequest	statReqData
pack-priv final CertStatusExtension.CertStatusRequestType	statReqType
pack-priv final SSLExtension	statusRespExt

Constructor Summary

Access	Constructor and Description
pack-priv	StaplingParameters(SSLExtension ext, CertStatusExtension.CertStatusRequestType type, CertStatusExtension.CertStatusRequest req, Map<X509Certificate, byte[]> responses)

Method Summary

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

responseMap	back to summary
pack-priv final Map<X509Certificate, byte[]> responseMap

statReqData	back to summary
pack-priv final CertStatusExtension.CertStatusRequest statReqData

statReqType	back to summary
pack-priv final CertStatusExtension.CertStatusRequestType statReqType

statusRespExt	back to summary
pack-priv final SSLExtension statusRespExt

Constructor Detail

StaplingParameters	back to summary
pack-priv StaplingParameters(SSLExtension ext, CertStatusExtension.CertStatusRequestType type, CertStatusExtension.CertStatusRequest req, Map<X509Certificate, byte[]> responses)

sun.security.ssl back to summary

pack-priv Class StatusResponseManager.StatusInfo

Class Inheritance

extends Object

java.lang.Object
sun.security.ssl.StatusResponseManager.StatusInfo

Inner class used to group request and response data.

Field Summary

Modifier and Type	Field and Description
pack-priv final X509Certificate	cert
pack-priv final CertId	cid
pack-priv final URI	responder
pack-priv StatusResponseManager.ResponseCacheEntry	responseData

Constructor Summary

Access	Constructor and Description
pack-priv	StatusInfo(X509Certificate the certificate to be checked for revocation subjectCert, CertId the CertId for `subjectCert` certId) Create a StatusInfo object from an existing subject certificate and its corresponding CertId.

Method Summary

Modifier and Type	Method and Description
public String	Returns: a `String` representation of this object toString() Overrides java.lang.Object.toString. Return a String representation of the `StatusInfo`

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll wait wait wait

Field Detail

cert	back to summary
pack-priv final X509Certificate cert

cid	back to summary
pack-priv final CertId cid

responder	back to summary
pack-priv final URI responder

responseData	back to summary
pack-priv StatusResponseManager.ResponseCacheEntry responseData

Constructor Detail

StatusInfo back to summary

pack-priv StatusInfo(X509Certificate subjectCert, CertId certId)

Create a StatusInfo object from an existing subject certificate and its corresponding CertId.

Parameters

subjectCert:X509Certificate: the certificate to be checked for revocation
certId:CertId: the CertId for subjectCert

Method Detail

toString back to summary

public String toString()

Overrides java.lang.Object.toString.

Return a String representation of the StatusInfo

Returns:String

a String representation of this object

Annotations

@Override

pack-priv final Class StatusResponseManager

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

pack-priv Class StatusResponseManager.OCSPFetchCall

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

pack-priv Class StatusResponseManager.ResponseCacheEntry

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

pack-priv final Class StatusResponseManager.StaplingParameters

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

pack-priv Class StatusResponseManager.StatusInfo

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail