org.mule.runtime.api.tls

Interface TlsRevocationCheckBuilder

@NoImplement
public interface TlsRevocationCheckBuilder

Factory for creating currently supported certificate revocation mechanisms.

Since:

4.1

Method Summary

Modifier and Type	Method and Description
TlsContextFactoryBuilder	crlFile(String path) Configures a revocation checking implementation based on a local CRL file.
TlsContextFactoryBuilder	customOcsp(String url, String certAlias) Configures a revocation checking implementation based on a custom OCSP responder.
TlsContextFactoryBuilder	standard(boolean onlyEndEntities, boolean preferCrls, boolean noFallback, boolean softFail) Configures a revocation checking mechanism based on standard CRLDP and OCSP extension points in the certificate.

Method Detail

standard

TlsContextFactoryBuilder standard(boolean onlyEndEntities,
                                  boolean preferCrls,
                                  boolean noFallback,
                                  boolean softFail)

Configures a revocation checking mechanism based on standard CRLDP and OCSP extension points in the certificate.

Parameters:

onlyEndEntities - only verify last element of the certificate chain, false by default

preferCrls - try CRL instead of OCSP first, false by default

noFallback - do not use the secondary checking method (the one not selected before), false by default

softFail - avoid verification failure when the revocation server can not be reached or is busy, false by default

Returns:

the configured factory builder

customOcsp

TlsContextFactoryBuilder customOcsp(String url,
                                    String certAlias)

Configures a revocation checking implementation based on a custom OCSP responder.

Parameters:

url - the URL of the responder

certAlias - alias of the signing certificate for the OCSP response (must be in the trust store), or null if not present

Returns:

the configured factory builder

crlFile

TlsContextFactoryBuilder crlFile(String path)

Configures a revocation checking implementation based on a local CRL file.

Parameters:

path - the path to the CRL file

Returns:

the configured factory builder