public class ValidationOcspClient extends Object implements IOcspClient
| Constructor and Description |
|---|
ValidationOcspClient()
Create new
ValidationOcspClient instance. |
| Modifier and Type | Method and Description |
|---|---|
void |
addResponse(com.itextpdf.commons.bouncycastle.cert.ocsp.IBasicOCSPResp response,
Date date,
TimeBasedContext context)
Add OCSP response which is linked with generation date.
|
byte[] |
getEncoded(X509Certificate checkCert,
X509Certificate issuerCert,
String url)
Fetch a DER-encoded BasicOCSPResponse from an OCSP responder.
|
Map<com.itextpdf.commons.bouncycastle.cert.ocsp.IBasicOCSPResp,RevocationDataValidator.OcspResponseValidationInfo> |
getResponses()
Get all the OCSP responses linked with generation dates.
|
public ValidationOcspClient()
ValidationOcspClient instance.public void addResponse(com.itextpdf.commons.bouncycastle.cert.ocsp.IBasicOCSPResp response,
Date date,
TimeBasedContext context)
response - IBasicOCSPResp response to be addeddate - Date to be linked with the responsecontext - TimeBasedContext time based context which corresponds to generation datepublic Map<com.itextpdf.commons.bouncycastle.cert.ocsp.IBasicOCSPResp,RevocationDataValidator.OcspResponseValidationInfo> getResponses()
public byte[] getEncoded(X509Certificate checkCert, X509Certificate issuerCert, String url)
Note: do not pass in the full DER-encoded OCSPResponse object obtained from the responder, only the DER-encoded BasicOCSPResponse value contained in the response data..
getEncoded in interface IOcspClientcheckCert - Certificate to check.issuerCert - The parent certificate.url - The URL of the OCSP responder endpoint. If null, implementations can
attempt to obtain a URL from the AuthorityInformationAccess extension of
the certificate, or from another implementation-specific source.Copyright © 1998–2025 Apryse Group NV. All rights reserved.