org.openoces.ooapi.validation.cert
Class PartitionedCRLCertificateValidator

java.lang.Object
  org.openoces.ooapi.validation.cert.PartitionedCRLCertificateValidator

All Implemented Interfaces:

RevocationCheckerEngine

public class PartitionedCRLCertificateValidator

extends java.lang.Object

implements RevocationCheckerEngine

This class implements a revocation checker engine based on partitioned crls. The partitioned crl to be used is extracted from the certificate being validated. Once a partitioned crl has been downloaded it is not updated until the current time is after the next-update timestamp indicated by the partitioned crl.

Author:

Carsten Raskgaard

Field Summary

protected static java.util.Properties	env
protected static java.lang.String	ldapServerName
protected static java.lang.String	rootContext

Constructor Summary

PartitionedCRLCertificateValidator()

Method Summary

protected void	checkCRLUpdateFields(java.security.cert.X509CRL crl)
protected static java.security.cert.X509CRL	downloadCRL(java.lang.String location)
boolean	isRevoked(OcesCertificate c)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

env

protected static java.util.Properties env

ldapServerName

protected static java.lang.String ldapServerName

rootContext

protected static java.lang.String rootContext

Constructor Detail

PartitionedCRLCertificateValidator

public PartitionedCRLCertificateValidator()

Method Detail

downloadCRL

protected static java.security.cert.X509CRL downloadCRL(java.lang.String location)

checkCRLUpdateFields

protected void checkCRLUpdateFields(java.security.cert.X509CRL crl)
                             throws CRLExpiredException,
                                    CRLNotYetValidException

Throws:

CRLExpiredException

CRLNotYetValidException

isRevoked

public boolean isRevoked(OcesCertificate c)
                  throws CRLExpiredException,
                         CRLNotYetValidException

Specified by:

isRevoked in interface RevocationCheckerEngine

Throws:

CRLExpiredException

CRLNotYetValidException