Package org.bouncycastle.cert.path.validations

Class CRLValidation

java.lang.Object

org.bouncycastle.cert.path.validations.CRLValidation

All Implemented Interfaces:

CertPathValidation, org.bouncycastle.util.Memoable

public class CRLValidation
extends java.lang.Object
implements CertPathValidation

Constructor Summary

Constructors

Constructor	Description
CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo trustAnchorKey, X509ContentVerifierProviderBuilder contentVerifierProvider, org.bouncycastle.util.Store crls)	Base constructor for CRL based revocation checking with CRL signature verification.
CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName, org.bouncycastle.util.Store crls)	Deprecated. this constructor cannot verify CRL signatures, so a matched CRL is rejected (fail-closed) rather than trusted.

Method Summary

Modifier and Type	Method	Description
org.bouncycastle.util.Memoable	copy()
void	reset(org.bouncycastle.util.Memoable other)
void	validate(CertPathValidationContext context, X509CertificateHolder certificate)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CRLValidation

public CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName,
                     org.bouncycastle.asn1.x509.SubjectPublicKeyInfo trustAnchorKey,
                     X509ContentVerifierProviderBuilder contentVerifierProvider,
                     org.bouncycastle.util.Store crls)

Base constructor for CRL based revocation checking with CRL signature verification.

Parameters:

trustAnchorName - the name of the trust anchor the path starts from.

trustAnchorKey - the public key of the trust anchor, used to verify the first CRL.

contentVerifierProvider - builder for the verifier used to check CRL signatures.

crls - a Store of the CRLs to consult.

CRLValidation

public CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName,
                     org.bouncycastle.util.Store crls)

Deprecated.

this constructor cannot verify CRL signatures, so a matched CRL is rejected (fail-closed) rather than trusted. Use CRLValidation(X500Name, SubjectPublicKeyInfo, X509ContentVerifierProviderBuilder, Store) so CRLs are checked against the issuer's key.

Method Detail

validate

public void validate(CertPathValidationContext context,
                     X509CertificateHolder certificate)
              throws CertPathValidationException

Specified by:

validate in interface CertPathValidation

Throws:

CertPathValidationException

copy

public org.bouncycastle.util.Memoable copy()

Specified by:

copy in interface org.bouncycastle.util.Memoable

reset

public void reset(org.bouncycastle.util.Memoable other)

Specified by:

reset in interface org.bouncycastle.util.Memoable