Top Fields Constructors Methods
org.bouncycastle.jce.provider

pack-priv Class ProvRevocationChecker

extends PKIXRevocationChecker
implements PKIXCertRevocationChecker
Class Inheritance
All Implemented Interfaces
org.bouncycastle.jcajce.PKIXCertRevocationChecker
Imports
java.security.cert.CertPathValidatorException, .Certificate, .PKIXRevocationChecker, .X509Certificate, java.util.Collection, .HashMap, .List, .Map, .Set, org.bouncycastle.asn1.ASN1ObjectIdentifier, org.bouncycastle.internal.asn1.bsi.BSIObjectIdentifiers, org.bouncycastle.asn1.cryptopro.CryptoProObjectIdentifiers, org.bouncycastle.internal.asn1.eac.EACObjectIdentifiers, org.bouncycastle.asn1.isara.IsaraObjectIdentifiers, org.bouncycastle.asn1.nist.NISTObjectIdentifiers, org.bouncycastle.asn1.oiw.OIWObjectIdentifiers, org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers, org.bouncycastle.asn1.rosstandart.RosstandartObjectIdentifiers, org.bouncycastle.asn1.x9.X9ObjectIdentifiers, org.bouncycastle.jcajce.PKIXCertRevocationChecker, .PKIXCertRevocationCheckerParameters, org.bouncycastle.jcajce.util.JcaJceHelper

Field Summary

Modifier and TypeField and Description
private final ProvCrlRevocationChecker
crlChecker

private static final int
DEFAULT_OCSP_MAX_RESPONSE_SIZE

private static final int
DEFAULT_OCSP_TIMEOUT

private final JcaJceHelper
helper

private final ProvOcspRevocationChecker
ocspChecker

private static final Map<K, V>
oids

private PKIXCertRevocationCheckerParameters
parameters

Constructor Summary

AccessConstructor and Description
public
ProvRevocationChecker(JcaJceHelper helper)

Method Summary

Modifier and TypeMethod and Description
public void
check(Certificate
the Certificate to be checked
certificate, Collection<String>
a Collection of OID strings representing the current set of unresolved critical extensions
collection)

Implements abstract java.security.cert.PKIXCertPathChecker.check.

Performs the check(s) on the specified certificate using its internal state and removes any critical extensions that it processes from the specified collection of OID strings that represent the unresolved critical extensions.
public List<CertPathValidatorException>
getSoftFailExceptions()

Implements abstract java.security.cert.PKIXRevocationChecker.getSoftFailExceptions.

Returns a list containing the exceptions that are ignored by the revocation checker when the SOFT_FAIL option is set.
public Set<String>
getSupportedExtensions()

Implements abstract java.security.cert.PKIXCertPathChecker.getSupportedExtensions.

Returns an immutable Set of X.509 certificate extensions that this PKIXCertPathChecker supports (i.e. recognizes, is able to process), or null if no extensions are supported.
private boolean
hasOption(PKIXRevocationChecker.Option option)

public void
init(boolean
the order that certificates are presented to the check method. If true, certificates are presented from target to most-trusted CA (forward); if false, from most-trusted CA to target (reverse).
forForward)

Implements abstract java.security.cert.PKIXCertPathChecker.init.

Implements java.security.cert.CertPathChecker.init.

Initializes the internal state of this PKIXCertPathChecker.
public void
initialize(PKIXCertRevocationCheckerParameters parameters)

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.initialize.

public boolean
isForwardCheckingSupported()

Implements abstract java.security.cert.PKIXCertPathChecker.isForwardCheckingSupported.

Implements java.security.cert.CertPathChecker.isForwardCheckingSupported.

Indicates if forward checking is supported.
public void
setParameter(String name, Object value)

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.setParameter.

Inherited from java.security.cert.PKIXRevocationChecker:
clonegetOcspExtensionsgetOcspRespondergetOcspResponderCertgetOcspResponsesgetOptionssetOcspExtensionssetOcspRespondersetOcspResponderCertsetOcspResponsessetOptions

Field Detail

crlCheckerback to summary
private final ProvCrlRevocationChecker crlChecker
DEFAULT_OCSP_MAX_RESPONSE_SIZEback to summary
private static final int DEFAULT_OCSP_MAX_RESPONSE_SIZE
DEFAULT_OCSP_TIMEOUTback to summary
private static final int DEFAULT_OCSP_TIMEOUT
helperback to summary
private final JcaJceHelper helper
ocspCheckerback to summary
private final ProvOcspRevocationChecker ocspChecker
oidsback to summary
private static final Map<K, V> oids
parametersback to summary
private PKIXCertRevocationCheckerParameters parameters

Constructor Detail

ProvRevocationCheckerback to summary
public ProvRevocationChecker(JcaJceHelper helper)

Method Detail

checkback to summary
public void check(Certificate certificate, Collection<String> collection) throws CertPathValidatorException

Implements abstract java.security.cert.PKIXCertPathChecker.check.

Doc from java.security.cert.PKIXCertPathChecker.check.

Performs the check(s) on the specified certificate using its internal state and removes any critical extensions that it processes from the specified collection of OID strings that represent the unresolved critical extensions. The certificates are presented in the order specified by the init method.

Parameters
certificate:Certificate

the Certificate to be checked

collection:Collection<String>

a Collection of OID strings representing the current set of unresolved critical extensions

Exceptions
CertPathValidatorException:
if the specified certificate does not pass the check
getSoftFailExceptionsback to summary
public List<CertPathValidatorException> getSoftFailExceptions()

Implements abstract java.security.cert.PKIXRevocationChecker.getSoftFailExceptions.

Doc from java.security.cert.PKIXRevocationChecker.getSoftFailExceptions.

Returns a list containing the exceptions that are ignored by the revocation checker when the SOFT_FAIL option is set. The list is cleared each time init is called. The list is ordered in ascending order according to the certificate index returned by getIndex method of each entry.

An implementation of PKIXRevocationChecker is responsible for adding the ignored exceptions to the list.

Returns:List<CertPathValidatorException>

an unmodifiable list containing the ignored exceptions. The list is empty if no exceptions have been ignored.

getSupportedExtensionsback to summary
public Set<String> getSupportedExtensions()

Implements abstract java.security.cert.PKIXCertPathChecker.getSupportedExtensions.

Doc from java.security.cert.PKIXCertPathChecker.getSupportedExtensions.

Returns an immutable Set of X.509 certificate extensions that this PKIXCertPathChecker supports (i.e. recognizes, is able to process), or null if no extensions are supported.

Each element of the set is a String representing the Object Identifier (OID) of the X.509 extension that is supported. The OID is represented by a set of nonnegative integers separated by periods.

All X.509 certificate extensions that a PKIXCertPathChecker might possibly be able to process should be included in the set.

Returns:Set<String>

an immutable Set of X.509 extension OIDs (in String format) supported by this PKIXCertPathChecker, or null if no extensions are supported

hasOptionback to summary
private boolean hasOption(PKIXRevocationChecker.Option option)
initback to summary
public void init(boolean forForward) throws CertPathValidatorException

Implements abstract java.security.cert.PKIXCertPathChecker.init.

Implements java.security.cert.CertPathChecker.init.

Doc from java.security.cert.PKIXCertPathChecker.init.

Initializes the internal state of this PKIXCertPathChecker.

The forward flag specifies the order that certificates will be passed to the check method (forward or reverse). A PKIXCertPathChecker must support reverse checking and may support forward checking.

Parameters
forForward:boolean

the order that certificates are presented to the check method. If true, certificates are presented from target to most-trusted CA (forward); if false, from most-trusted CA to target (reverse).

Exceptions
CertPathValidatorException:
if this PKIXCertPathChecker is unable to check certificates in the specified order; it should never be thrown if the forward flag is false since reverse checking must be supported
initializeback to summary
public void initialize(PKIXCertRevocationCheckerParameters parameters)

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.initialize.

isForwardCheckingSupportedback to summary
public boolean isForwardCheckingSupported()

Implements abstract java.security.cert.PKIXCertPathChecker.isForwardCheckingSupported.

Implements java.security.cert.CertPathChecker.isForwardCheckingSupported.

Doc from java.security.cert.PKIXCertPathChecker.isForwardCheckingSupported.

Indicates if forward checking is supported. Forward checking refers to the ability of the PKIXCertPathChecker to perform its checks when certificates are presented to the check method in the forward direction (from target to most-trusted CA).

Returns:boolean

true if forward checking is supported, false otherwise

setParameterback to summary
public void setParameter(String name, Object value)

Implements org.bouncycastle.jcajce.PKIXCertRevocationChecker.setParameter.