Top Fields Constructors Methods
org.bouncycastle.jce.provider

pack-priv Class ProvOcspRevocationChecker

extends Object
implements PKIXCertRevocationChecker
Class Inheritance
All Implemented Interfaces
org.bouncycastle.jcajce.PKIXCertRevocationChecker
Imports
java.io.ByteArrayInputStream, .IOException, java.net.URI, .URISyntaxException, java.security.GeneralSecurityException, .MessageDigest, .NoSuchAlgorithmException, .NoSuchProviderException, .PublicKey, .Signature, java.security.cert.CertPathValidatorException, .Certificate, .CertificateFactory, .Extension, .X509Certificate, java.util.HashMap, .List, .Map, .Set, org.bouncycastle.asn1.ASN1Encodable, .ASN1Encoding, .ASN1GeneralizedTime, .ASN1Integer, .ASN1ObjectIdentifier, .ASN1OctetString, .ASN1Sequence, .ASN1String, .DERNull, .DEROctetString, org.bouncycastle.asn1.cryptopro.CryptoProObjectIdentifiers, org.bouncycastle.asn1.nist.NISTObjectIdentifiers, org.bouncycastle.asn1.ocsp.BasicOCSPResponse, .CertID, .OCSPObjectIdentifiers, .OCSPResponse, .OCSPResponseStatus, .ResponderID, .ResponseBytes, .ResponseData, .RevokedInfo, .SingleResponse, org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers, .RSASSAPSSparams, org.bouncycastle.asn1.x500.X500Name, org.bouncycastle.asn1.x500.style.BCStrictStyle, org.bouncycastle.asn1.x509.AccessDescription, .AlgorithmIdentifier, .AuthorityInformationAccess, .CRLReason, .Extensions, .GeneralName, .KeyPurposeId, .SubjectPublicKeyInfo, org.bouncycastle.asn1.x9.X9ObjectIdentifiers, org.bouncycastle.internal.asn1.bsi.BSIObjectIdentifiers, org.bouncycastle.internal.asn1.eac.EACObjectIdentifiers, org.bouncycastle.internal.asn1.isara.IsaraObjectIdentifiers, org.bouncycastle.internal.asn1.oiw.OIWObjectIdentifiers, org.bouncycastle.internal.asn1.rosstandart.RosstandartObjectIdentifiers, org.bouncycastle.jcajce.PKIXCertRevocationChecker, .PKIXCertRevocationCheckerParameters, org.bouncycastle.jcajce.util.JcaJceHelper, .MessageDigestUtils, org.bouncycastle.jce.exception.ExtCertPathValidatorException, org.bouncycastle.util.Arrays, .Properties

Field Summary

Modifier and TypeField and Description
private static final int
DEFAULT_OCSP_MAX_RESPONSE_SIZE

private static final int
DEFAULT_OCSP_TIMEOUT

private final JcaJceHelper
helper

private boolean
isEnabledOCSP

private String
ocspURL

private static final Map<K, V>
oids

private PKIXCertRevocationCheckerParameters
parameters

private final ProvRevocationChecker
parent

Constructor Summary

AccessConstructor and Description
public
ProvOcspRevocationChecker(ProvRevocationChecker parent, JcaJceHelper helper)

Method Summary

Modifier and TypeMethod and Description
private static byte[]
calcKeyHash(MessageDigest digest, PublicKey key)

public void
check(Certificate certificate)

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.check.

private CertID
createCertID(CertID base, Certificate issuer, ASN1Integer serialNumber)

private CertID
createCertID(AlgorithmIdentifier digestAlg, Certificate issuer, ASN1Integer serialNumber)

private Certificate
extractCert()

private static String
getDigestName(ASN1ObjectIdentifier oid)

pack-priv static URI
getOcspResponderURI(X509Certificate cert)

private static String
getSignatureName(AlgorithmIdentifier sigAlgId)

private static X509Certificate
getSignerCert(BasicOCSPResponse basicResp, X509Certificate signingCert, X509Certificate responderCert, JcaJceHelper helper)

public List<CertPathValidatorException>
getSoftFailExceptions()

public Set<String>
getSupportedExtensions()

public void
init(boolean forForward)

public void
initialize(PKIXCertRevocationCheckerParameters parameters)

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.initialize.

private static boolean
isEqualAlgId(AlgorithmIdentifier a, AlgorithmIdentifier b)

public boolean
isForwardCheckingSupported()

private static boolean
responderMatches(ResponderID responderID, X509Certificate certificate, JcaJceHelper helper)

public void
setParameter(String name, Object value)

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.setParameter.

pack-priv static boolean
validatedOcspResponse(BasicOCSPResponse basicResp, PKIXCertRevocationCheckerParameters parameters, byte[] nonce, X509Certificate responderCert, JcaJceHelper helper)

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait

Field Detail

DEFAULT_OCSP_MAX_RESPONSE_SIZEback to summary
private static final int DEFAULT_OCSP_MAX_RESPONSE_SIZE
DEFAULT_OCSP_TIMEOUTback to summary
private static final int DEFAULT_OCSP_TIMEOUT
helperback to summary
private final JcaJceHelper helper
isEnabledOCSPback to summary
private boolean isEnabledOCSP
ocspURLback to summary
private String ocspURL
oidsback to summary
private static final Map<K, V> oids
parametersback to summary
private PKIXCertRevocationCheckerParameters parameters
parentback to summary
private final ProvRevocationChecker parent

Constructor Detail

ProvOcspRevocationCheckerback to summary
public ProvOcspRevocationChecker(ProvRevocationChecker parent, JcaJceHelper helper)

Method Detail

calcKeyHashback to summary
private static byte[] calcKeyHash(MessageDigest digest, PublicKey key)
checkback to summary
public void check(Certificate certificate) throws CertPathValidatorException

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.check.

createCertIDback to summary
private CertID createCertID(CertID base, Certificate issuer, ASN1Integer serialNumber) throws CertPathValidatorException
createCertIDback to summary
private CertID createCertID(AlgorithmIdentifier digestAlg, Certificate issuer, ASN1Integer serialNumber) throws CertPathValidatorException
extractCertback to summary
private Certificate extractCert() throws CertPathValidatorException
getDigestNameback to summary
private static String getDigestName(ASN1ObjectIdentifier oid)
getOcspResponderURIback to summary
pack-priv static URI getOcspResponderURI(X509Certificate cert)
getSignatureNameback to summary
private static String getSignatureName(AlgorithmIdentifier sigAlgId)
getSignerCertback to summary
private static X509Certificate getSignerCert(BasicOCSPResponse basicResp, X509Certificate signingCert, X509Certificate responderCert, JcaJceHelper helper) throws NoSuchProviderException, NoSuchAlgorithmException
getSoftFailExceptionsback to summary
public List<CertPathValidatorException> getSoftFailExceptions()
getSupportedExtensionsback to summary
public Set<String> getSupportedExtensions()
initback to summary
public void init(boolean forForward) throws CertPathValidatorException
initializeback to summary
public void initialize(PKIXCertRevocationCheckerParameters parameters)

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.initialize.

isEqualAlgIdback to summary
private static boolean isEqualAlgId(AlgorithmIdentifier a, AlgorithmIdentifier b)
isForwardCheckingSupportedback to summary
public boolean isForwardCheckingSupported()
responderMatchesback to summary
private static boolean responderMatches(ResponderID responderID, X509Certificate certificate, JcaJceHelper helper) throws NoSuchProviderException, NoSuchAlgorithmException
setParameterback to summary
public void setParameter(String name, Object value)

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.setParameter.

validatedOcspResponseback to summary
pack-priv static boolean validatedOcspResponse(BasicOCSPResponse basicResp, PKIXCertRevocationCheckerParameters parameters, byte[] nonce, X509Certificate responderCert, JcaJceHelper helper) throws CertPathValidatorException