org.bouncycastle.cert.path.validations
Class CRLValidation

java.lang.Object
  org.bouncycastle.cert.path.validations.CRLValidation

All Implemented Interfaces:

CertPathValidation, org.bouncycastle.util.Memoable

public class CRLValidation

extends java.lang.Object

implements CertPathValidation

Constructor Summary

CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName, org.bouncycastle.util.Store crls)
Deprecated. this constructor cannot verify CRL signatures, so a matched CRL is rejected (fail-closed) rather than trusted. Use CRLValidation(X500Name, SubjectPublicKeyInfo, X509ContentVerifierProviderBuilder, Store) so CRLs are checked against the issuer's key.

CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo trustAnchorKey, X509ContentVerifierProviderBuilder contentVerifierProvider, org.bouncycastle.util.Store crls)
Base constructor for CRL based revocation checking with CRL signature verification.

Method Summary

org.bouncycastle.util.Memoable	copy()
void	reset(org.bouncycastle.util.Memoable other)
void	validate(CertPathValidationContext context, X509CertificateHolder certificate)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CRLValidation

public CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName,
                     org.bouncycastle.asn1.x509.SubjectPublicKeyInfo trustAnchorKey,
                     X509ContentVerifierProviderBuilder contentVerifierProvider,
                     org.bouncycastle.util.Store crls)

Base constructor for CRL based revocation checking with CRL signature verification.

Parameters:

trustAnchorName - the name of the trust anchor the path starts from.

trustAnchorKey - the public key of the trust anchor, used to verify the first CRL.

contentVerifierProvider - builder for the verifier used to check CRL signatures.

crls - a Store of the CRLs to consult.

CRLValidation

public CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName,
                     org.bouncycastle.util.Store crls)

Deprecated. this constructor cannot verify CRL signatures, so a matched CRL is rejected (fail-closed) rather than trusted. Use CRLValidation(X500Name, SubjectPublicKeyInfo, X509ContentVerifierProviderBuilder, Store) so CRLs are checked against the issuer's key.

Method Detail

validate

public void validate(CertPathValidationContext context,
                     X509CertificateHolder certificate)
              throws CertPathValidationException

Specified by:

validate in interface CertPathValidation

Throws:

CertPathValidationException

copy

public org.bouncycastle.util.Memoable copy()

Specified by:

copy in interface org.bouncycastle.util.Memoable

reset

public void reset(org.bouncycastle.util.Memoable other)

Specified by:

reset in interface org.bouncycastle.util.Memoable