com.itextpdf.signatures.validation

Class RevocationDataValidator

java.lang.Object

com.itextpdf.signatures.validation.RevocationDataValidator

public class RevocationDataValidator
extends Object

Class that allows you to fetch and validate revocation data for the certificate.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	RevocationDataValidator.CrlValidationInfo Class which contains validation related information about CRL response.
static class	RevocationDataValidator.OcspResponseValidationInfo Class which contains validation related information about single OCSP response.

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	RevocationDataValidator(ValidatorChainBuilder builder) Creates new RevocationDataValidator instance to validate certificate revocation data.

Method Summary

Modifier and Type	Method and Description
RevocationDataValidator	addCrlClient(ICrlClient crlClient) Add ICrlClient to be used for CRL responses receiving.
RevocationDataValidator	addOcspClient(IOcspClient ocspClient) Add IOcspClient to be used for OCSP responses receiving.
void	validate(ValidationReport report, ValidationContext context, X509Certificate certificate, Date validationDate) Validates revocation data (Certificate Revocation List (CRL) Responses and OCSP Responses) of the certificate.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RevocationDataValidator

protected RevocationDataValidator(ValidatorChainBuilder builder)

Creates new RevocationDataValidator instance to validate certificate revocation data.

Parameters:

builder - See ValidatorChainBuilder

Method Detail

addCrlClient

public RevocationDataValidator addCrlClient(ICrlClient crlClient)

Add ICrlClient to be used for CRL responses receiving. These clients will be used regardless of the SignatureValidationProperties.OnlineFetching settings

Parameters:

crlClient - ICrlClient to be used for CRL responses receiving

Returns:

same instance of RevocationDataValidator.

addOcspClient

public RevocationDataValidator addOcspClient(IOcspClient ocspClient)

Add IOcspClient to be used for OCSP responses receiving. These clients will be used regardless of the SignatureValidationProperties.OnlineFetching settings

Parameters:

ocspClient - IOcspClient to be used for OCSP responses receiving

Returns:

same instance of RevocationDataValidator.

validate

public void validate(ValidationReport report,
                     ValidationContext context,
                     X509Certificate certificate,
                     Date validationDate)

Validates revocation data (Certificate Revocation List (CRL) Responses and OCSP Responses) of the certificate.

Parameters:

report - to store all the verification results

context - ValidationContext the context

certificate - the certificate to check revocation data for

validationDate - validation date to check for