Package org.bouncycastle.cert.ocsp

Basic support package for handling and creating OCSP (RFC 2560) online certificate status requests.

Interface Summary

Interface	Description
CertificateStatus

Class Summary

Class	Description
BasicOCSPResp	OCSP RFC 2560, RFC 6960 BasicOCSPResponse ::= SEQUENCE { tbsResponseData ResponseData, signatureAlgorithm AlgorithmIdentifier, signature BIT STRING, certs [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL }
BasicOCSPRespBuilder	Generator for basic OCSP response objects.
CertificateID
OCSPReq	OCSPRequest ::= SEQUENCE { tbsRequest TBSRequest, optionalSignature [0] EXPLICIT Signature OPTIONAL } TBSRequest ::= SEQUENCE { version [0] EXPLICIT Version DEFAULT v1, requestorName [1] EXPLICIT GeneralName OPTIONAL, requestList SEQUENCE OF Request, requestExtensions [2] EXPLICIT Extensions OPTIONAL } Signature ::= SEQUENCE { signatureAlgorithm AlgorithmIdentifier, signature BIT STRING, certs [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL} Version ::= INTEGER { v1(0) } Request ::= SEQUENCE { reqCert CertID, singleRequestExtensions [0] EXPLICIT Extensions OPTIONAL } CertID ::= SEQUENCE { hashAlgorithm AlgorithmIdentifier, issuerNameHash OCTET STRING, -- Hash of Issuer's DN issuerKeyHash OCTET STRING, -- Hash of Issuers public key serialNumber CertificateSerialNumber }
OCSPReqBuilder
OCSPResp
OCSPRespBuilder	base generator for an OCSP response - at the moment this only supports the generation of responses containing BasicOCSP responses.
Req
RespData	OCSP RFC 2560, RFC 6960 ResponseData ::= SEQUENCE { version [0] EXPLICIT Version DEFAULT v1, responderID ResponderID, producedAt GeneralizedTime, responses SEQUENCE OF SingleResponse, responseExtensions [1] EXPLICIT Extensions OPTIONAL }
RespID	Carrier for a ResponderID.
RevokedStatus	wrapper for the RevokedInfo object
SingleResp
UnknownStatus	wrapper for the UnknownInfo object

Exception Summary

Exception	Description
OCSPException