static void |
CRLVerifier.checkRevocation(java.security.cert.X509CRL crl,
java.security.cert.X509Certificate cert,
java.util.Date signDate,
java.lang.String crlDistributionPointsURL) |
Check whether the certificate was revoked at signing time.
|
private static void |
CertificateVerifier.checkRevocations(java.security.cert.X509Certificate cert,
java.util.Set<java.security.cert.X509Certificate> additionalCerts,
java.util.Date signDate) |
|
private static void |
CertificateVerifier.checkRevocationsWithIssuer(java.security.cert.X509Certificate cert,
java.security.cert.X509Certificate issuerCert,
java.util.Set<java.security.cert.X509Certificate> additionalCerts,
java.util.Date signDate) |
|
org.bouncycastle.cert.ocsp.OCSPResp |
OcspHelper.getResponseOcsp() |
Performs and verifies the OCSP-Request
|
static void |
CRLVerifier.verifyCertificateCRLs(java.security.cert.X509Certificate cert,
java.util.Date signDate,
java.util.Set<java.security.cert.X509Certificate> additionalCerts) |
Extracts the CRL distribution points from the certificate (if available)
and checks the certificate revocation status against the CRLs coming from
the distribution points.
|
private static void |
CertificateVerifier.verifyOCSP(OcspHelper ocspHelper,
java.util.Set<java.security.cert.X509Certificate> additionalCerts) |
Verify whether the certificate has been revoked at signing date, and verify whether
the certificate of the responder has been revoked now.
|
private void |
OcspHelper.verifyOcspResponse(org.bouncycastle.cert.ocsp.OCSPResp ocspResponse) |
Verifies the status and the response itself (including nonce), but not the signature.
|