com.saperion.cert

Class CRLVerifier

java.lang.Object

com.saperion.cert.CRLVerifier

public final class CRLVerifier
extends Object

Class that verifies CRLs for given X509 certificate. Extracts the CRL distribution points from the certificate (if available) and checks the certificate revocation status against the CRLs coming from the distribution points. Supports HTTP, HTTPS, FTP and LDAP based URLs.

Author:

Svetlin Nakov

Method Summary

Modifier and Type	Method and Description
static List<String>	getCrlDistributionPoints(X509Certificate cert) Extracts all CRL distribution point URLs from the "CRL Distribution Point" extension in a X.509 certificate.
static void	verifyCertificateCRLs(X509Certificate cert) Extracts the CRL distribution points from the certificate (if available) and checks the certificate revocation status against the CRLs coming from the distribution points.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

verifyCertificateCRLs

public static void verifyCertificateCRLs(X509Certificate cert)
                                  throws CertificateVerificationException

Extracts the CRL distribution points from the certificate (if available) and checks the certificate revocation status against the CRLs coming from the distribution points. Supports HTTP, HTTPS, FTP and LDAP based URLs.

Parameters:

cert - the certificate to be checked for revocation

Throws:

CertificateVerificationException - if the certificate is revoked

getCrlDistributionPoints

public static List<String> getCrlDistributionPoints(X509Certificate cert)
                                             throws CertificateParsingException,
                                                    IOException

Extracts all CRL distribution point URLs from the "CRL Distribution Point" extension in a X.509 certificate. If CRL distribution point extension is unavailable, returns an empty list.

Parameters:

cert - Certificate

Returns:

CRL list

Throws:

CertificateParsingException - Parsing exception

IOException - IO exception