Top Description Interfaces Classes
module bcpkix

Package org.bouncycastle.cert.ocsp


Basic support package for handling and creating OCSP (RFC 2560) online certificate status requests.

Interface Summary

Modifier and TypeInterface and Description
public interface

Class Summary

Modifier and TypeClass and Description
public class
BasicOCSPResp

OCSP RFC 2560, RFC 6960

BasicOCSPResponse       ::= SEQUENCE {
   tbsResponseData      ResponseData,
   signatureAlgorithm   AlgorithmIdentifier,
   signature            BIT STRING,
   certs                [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL }
public class
BasicOCSPRespBuilder

Generator for basic OCSP response objects.

public class
public class
public class
OCSPReq

OCSPRequest     ::=     SEQUENCE {
      tbsRequest                  TBSRequest,
      optionalSignature   [0]     EXPLICIT Signature OPTIONAL }

  TBSRequest      ::=     SEQUENCE {
      version             [0]     EXPLICIT Version DEFAULT v1,
      requestorName       [1]     EXPLICIT GeneralName OPTIONAL,
      requestList                 SEQUENCE OF Request,
      requestExtensions   [2]     EXPLICIT Extensions OPTIONAL }

  Signature       ::=     SEQUENCE {
      signatureAlgorithm      AlgorithmIdentifier,
      signature               BIT STRING,
      certs               [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL}

  Version         ::=             INTEGER  {  v1(0) }

  Request         ::=     SEQUENCE {
      reqCert                     CertID,
      singleRequestExtensions     [0] EXPLICIT Extensions OPTIONAL }

  CertID          ::=     SEQUENCE {
      hashAlgorithm       AlgorithmIdentifier,
      issuerNameHash      OCTET STRING, -- Hash of Issuer's DN
      issuerKeyHash       OCTET STRING, -- Hash of Issuers public key
      serialNumber        CertificateSerialNumber }
public class
public class
public class
OCSPRespBuilder

base generator for an OCSP response - at the moment this only supports the generation of responses containing BasicOCSP responses.

pack-priv class
public class
public class
RespData

OCSP RFC 2560, RFC 6960

ResponseData ::= SEQUENCE {
    version              [0] EXPLICIT Version DEFAULT v1,
    responderID              ResponderID,
    producedAt               GeneralizedTime,
    responses                SEQUENCE OF SingleResponse,
    responseExtensions   [1] EXPLICIT Extensions OPTIONAL }
public class
RespID

Carrier for a ResponderID.

public class
RevokedStatus

wrapper for the RevokedInfo object

public class
public class
UnknownStatus

wrapper for the UnknownInfo object