Package eu.europa.esig.dss.validation

Class OCSPAndCRLCertificateVerifier

java.lang.Object

eu.europa.esig.dss.validation.OCSPAndCRLCertificateVerifier

All Implemented Interfaces:

CertificateStatusVerifier

public class OCSPAndCRLCertificateVerifier
extends Object
implements CertificateStatusVerifier

Fetchs revocation data from a certificate by querying an OCSP server first and then a CRL server if no OCSP response could be retrieved.

Constructor Summary

Constructors

Constructor	Description
OCSPAndCRLCertificateVerifier(RevocationSource<CRLToken> crlSource, RevocationSource<OCSPToken> ocspSource, CertificatePool validationCertPool)	Build a OCSPAndCRLCertificateVerifier that will use the provided CRLSource and OCSPSource

Method Summary

Modifier and Type	Method	Description
RevocationToken	check(CertificateToken certificateToken)	Check the validity (revocation status) of the certificate.
RevocationToken	checkCRL(CertificateToken certificateToken)
RevocationToken	checkOCSP(CertificateToken certificateToken)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OCSPAndCRLCertificateVerifier

public OCSPAndCRLCertificateVerifier(RevocationSource<CRLToken> crlSource, RevocationSource<OCSPToken> ocspSource, CertificatePool validationCertPool)

Build a OCSPAndCRLCertificateVerifier that will use the provided CRLSource and OCSPSource

Parameters:

crlSource - the used CRL Source (online or offline)

ocspSource - the used OCSP Source (online or offline)

validationCertPool - the used Certificate pool

Method Details

check

public RevocationToken check(CertificateToken certificateToken)

Description copied from interface: CertificateStatusVerifier

Check the validity (revocation status) of the certificate. The operation returns a RevocationToken.

Specified by:

check in interface CertificateStatusVerifier

Parameters:

certificateToken - The certificate to be verified

Returns:

The RevocationToken or null the check cannot be performed.

checkOCSP

public RevocationToken checkOCSP(CertificateToken certificateToken)

checkCRL

public RevocationToken checkCRL(CertificateToken certificateToken)