es.gob.afirma.cert.certvalidation

Class CertificateVerifier

java.lang.Object

es.gob.afirma.cert.certvalidation.CertificateVerifier

All Implemented Interfaces:

CertificateVerificable

Direct Known Subclasses:

CrlCertificateVerifier, OcspCertificateVerifier

public abstract class CertificateVerifier
extends Object
implements CertificateVerificable

Validador genérico de certificados X.509. Como clase base comprueba únicamente el periodo de validez contra el reloj del sistema y la firma por parte de la CA. Clase cedida por YoHago.

Author:

Tomás García-Merás

Field Summary

Fields

Modifier and Type	Field and Description
protected static Logger	LOGGER

Constructor Summary

Constructors

Constructor and Description
CertificateVerifier()

Method Summary

Modifier and Type	Method and Description
protected X509Certificate	getCertificate()
protected X509Certificate	getIssuerCert()
protected Properties	getValidationProperties()
void	setIssuerCert(X509Certificate cert) Define el emisor del certificado X.509v3.
void	setSubjectCert(X509Certificate c) Define el certificado X.509v3.
void	setValidationProperties(String confFile) Define las propiedades del certificado X.509v3.
ValidationResult	validateCertificate() Valida el certificado X.509v3 que se ha proporcionado en el constructor.
ValidationResult	validateCertificate(X509Certificate cert) Valida un certificado X.509v3.
void	verifyIssuer(X509Certificate cert) Valida el emisor del certificado X.509v3.
abstract ValidationResult	verifyRevocation(X509Certificate cert) Valida si el certificado X.509v3 que se ha proporcionado en el constructor está revocado.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOGGER

protected static final Logger LOGGER

Constructor Detail

CertificateVerifier

public CertificateVerifier()

Method Detail

setSubjectCert

public void setSubjectCert(X509Certificate c)

Description copied from interface: CertificateVerificable

Define el certificado X.509v3.

Specified by:

setSubjectCert in interface CertificateVerificable

Parameters:

c - Certificado a definir.

getCertificate

protected X509Certificate getCertificate()

getValidationProperties

protected Properties getValidationProperties()

setValidationProperties

public void setValidationProperties(String confFile)

Description copied from interface: CertificateVerificable

Define las propiedades del certificado X.509v3.

Specified by:

setValidationProperties in interface CertificateVerificable

Parameters:

confFile - Propiedades a definir.

setIssuerCert

public void setIssuerCert(X509Certificate cert)

Description copied from interface: CertificateVerificable

Define el emisor del certificado X.509v3.

Specified by:

setIssuerCert in interface CertificateVerificable

Parameters:

cert - Certificado del emimsor a definir.

getIssuerCert

protected X509Certificate getIssuerCert()

validateCertificate

public ValidationResult validateCertificate()

Valida el certificado X.509v3 que se ha proporcionado en el constructor.

Specified by:

validateCertificate in interface CertificateVerificable

Returns:

Resultado de la validación

verifyRevocation

public abstract ValidationResult verifyRevocation(X509Certificate cert)

Description copied from interface: CertificateVerificable

Valida si el certificado X.509v3 que se ha proporcionado en el constructor está revocado.

Specified by:

verifyRevocation in interface CertificateVerificable

Parameters:

cert - Certificado a validar.

Returns:

Resultado de la validación.

verifyIssuer

public void verifyIssuer(X509Certificate cert)
                  throws CertificateException,
                         SignatureException

Description copied from interface: CertificateVerificable

Valida el emisor del certificado X.509v3.

Specified by:

verifyIssuer in interface CertificateVerificable

Parameters:

cert - Certificado a validar.

Throws:

CertificateException - Si el certificado o la firma no son válidos.

SignatureException - Fallo en la verificación del emisor.

validateCertificate

public ValidationResult validateCertificate(X509Certificate cert)

Valida un certificado X.509v3.

Specified by:

validateCertificate in interface CertificateVerificable

Parameters:

cert - Certificado a validar

Returns:

Resultado de la validación