com.itextpdf.signatures.validation

Class ValidationOcspClient

java.lang.Object

com.itextpdf.signatures.validation.ValidationOcspClient

All Implemented Interfaces:

IOcspClient

public class ValidationOcspClient
extends Object
implements IOcspClient

OCSP client which is expected to be used in case OCSP responses shall be linked with generation date.

Constructor Summary

Constructors

Constructor and Description
ValidationOcspClient() Create new ValidationOcspClient instance.

Method Summary

Modifier and Type	Method and Description
void	addResponse(com.itextpdf.commons.bouncycastle.cert.ocsp.IBasicOCSPResp response, Date date, TimeBasedContext context) Add OCSP response which is linked with generation date.
byte[]	getEncoded(X509Certificate checkCert, X509Certificate issuerCert, String url) Fetch a DER-encoded BasicOCSPResponse from an OCSP responder.
Map<com.itextpdf.commons.bouncycastle.cert.ocsp.IBasicOCSPResp,RevocationDataValidator.OcspResponseValidationInfo>	getResponses() Get all the OCSP responses linked with generation dates.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ValidationOcspClient

public ValidationOcspClient()

Create new ValidationOcspClient instance.

Method Detail

addResponse

public void addResponse(com.itextpdf.commons.bouncycastle.cert.ocsp.IBasicOCSPResp response,
                        Date date,
                        TimeBasedContext context)

Add OCSP response which is linked with generation date.

Parameters:

response - IBasicOCSPResp response to be added

date - Date to be linked with the response

context - TimeBasedContext time based context which corresponds to generation date

getResponses

public Map<com.itextpdf.commons.bouncycastle.cert.ocsp.IBasicOCSPResp,RevocationDataValidator.OcspResponseValidationInfo> getResponses()

Get all the OCSP responses linked with generation dates.

Returns:

all the OCSP responses linked with generation dates

getEncoded

public byte[] getEncoded(X509Certificate checkCert,
                         X509Certificate issuerCert,
                         String url)

Fetch a DER-encoded BasicOCSPResponse from an OCSP responder. The method should not throw an exception.

Note: do not pass in the full DER-encoded OCSPResponse object obtained from the responder, only the DER-encoded BasicOCSPResponse value contained in the response data..

Specified by:

getEncoded in interface IOcspClient

Parameters:

checkCert - Certificate to check.

issuerCert - The parent certificate.

url - The URL of the OCSP responder endpoint. If null, implementations can attempt to obtain a URL from the AuthorityInformationAccess extension of the certificate, or from another implementation-specific source.

Returns:

a byte array containing a DER-encoded BasicOCSPResponse structure or null if one could not be obtained

See Also:

RFC 6960 § 4.2.1