org.eclipse.jetty.util.security
类 CertificateValidator

java.lang.Object
  org.eclipse.jetty.util.security.CertificateValidator

public class CertificateValidator
extends Object

Convenience class to handle validation of certificates, aliases and keystores Allows specifying Certificate Revocation List (CRL), as well as enabling CRL Distribution Points Protocol (CRLDP) certificate extension support, and also enabling On-Line Certificate Status Protocol (OCSP) support. IMPORTANT: at least one of the above mechanisms *MUST* be configured and operational, otherwise certificate validation *WILL FAIL* unconditionally.

构造方法摘要

CertificateValidator(KeyStore trustStore, Collection<? extends CRL> crls)
creates an instance of the certificate validator

方法摘要

Collection<? extends CRL>	getCrls()
int	getMaxCertPathLength()
String	getOcspResponderURL()
KeyStore	getTrustStore()
boolean	isEnableCRLDP()
boolean	isEnableOCSP()
void	setEnableCRLDP(boolean enableCRLDP) Enables CRL Distribution Points Support
void	setEnableOCSP(boolean enableOCSP) Enables On-Line Certificate Status Protocol support
void	setMaxCertPathLength(int maxCertPathLength)
void	setOcspResponderURL(String ocspResponderURL) Set the location of the OCSP Responder.
void	validate(Certificate[] certChain)
void	validate(KeyStore keyStore) validates all aliases inside of a given keystore
void	validate(KeyStore keyStore, Certificate cert) validates a specific certificate inside of the keystore being passed in
String	validate(KeyStore keyStore, String keyAlias) validates a specific alias inside of the keystore being passed in

从类 java.lang.Object 继承的方法

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造方法详细信息

CertificateValidator

public CertificateValidator(KeyStore trustStore,
                            Collection<? extends CRL> crls)

creates an instance of the certificate validator

参数：

trustStore -

crls -

方法详细信息

validate

public void validate(KeyStore keyStore)
              throws CertificateException

validates all aliases inside of a given keystore

参数：

keyStore -

抛出：

CertificateException

validate

public String validate(KeyStore keyStore,
                       String keyAlias)
                throws CertificateException

validates a specific alias inside of the keystore being passed in

参数：

keyStore -

keyAlias -

返回：

the keyAlias if valid

抛出：

CertificateException

validate

public void validate(KeyStore keyStore,
                     Certificate cert)
              throws CertificateException

validates a specific certificate inside of the keystore being passed in

参数：

keyStore -

cert -

抛出：

CertificateException

validate

public void validate(Certificate[] certChain)
              throws CertificateException

抛出：

CertificateException

getTrustStore

public KeyStore getTrustStore()

getCrls

public Collection<? extends CRL> getCrls()

getMaxCertPathLength

public int getMaxCertPathLength()

返回：

Maximum number of intermediate certificates in the certification path (-1 for unlimited)

setMaxCertPathLength

public void setMaxCertPathLength(int maxCertPathLength)

参数：

maxCertPathLength - maximum number of intermediate certificates in the certification path (-1 for unlimited)

isEnableCRLDP

public boolean isEnableCRLDP()

返回：

true if CRL Distribution Points support is enabled

setEnableCRLDP

public void setEnableCRLDP(boolean enableCRLDP)

Enables CRL Distribution Points Support

参数：

enableCRLDP - true - turn on, false - turns off

isEnableOCSP

public boolean isEnableOCSP()

返回：

true if On-Line Certificate Status Protocol support is enabled

setEnableOCSP

public void setEnableOCSP(boolean enableOCSP)

Enables On-Line Certificate Status Protocol support

参数：

enableOCSP - true - turn on, false - turn off

getOcspResponderURL

public String getOcspResponderURL()

返回：

Location of the OCSP Responder

setOcspResponderURL

public void setOcspResponderURL(String ocspResponderURL)

Set the location of the OCSP Responder.

参数：

ocspResponderURL - location of the OCSP Responder