public class CertificateValidator
extends java.lang.Object
Modifier and Type | Field and Description |
---|---|
private static java.util.concurrent.atomic.AtomicLong |
__aliasCount |
private java.util.Collection<? extends java.security.cert.CRL> |
_crls |
private boolean |
_enableCRLDP
CRL Distribution Points (CRLDP) support
|
private boolean |
_enableOCSP
On-Line Certificate Status Protocol (OCSP) support
|
private int |
_maxCertPathLength
Maximum certification path length (n - number of intermediate certs, -1 for unlimited)
|
private java.lang.String |
_ocspResponderURL
Location of OCSP Responder
|
private java.security.KeyStore |
_trustStore |
private static Logger |
LOG |
Constructor and Description |
---|
CertificateValidator(java.security.KeyStore trustStore,
java.util.Collection<? extends java.security.cert.CRL> crls)
creates an instance of the certificate validator
|
Modifier and Type | Method and Description |
---|---|
java.util.Collection<? extends java.security.cert.CRL> |
getCrls() |
int |
getMaxCertPathLength() |
java.lang.String |
getOcspResponderURL() |
java.security.KeyStore |
getTrustStore() |
boolean |
isEnableCRLDP() |
boolean |
isEnableOCSP() |
void |
setEnableCRLDP(boolean enableCRLDP)
Enables CRL Distribution Points Support
|
void |
setEnableOCSP(boolean enableOCSP)
Enables On-Line Certificate Status Protocol support
|
void |
setMaxCertPathLength(int maxCertPathLength) |
void |
setOcspResponderURL(java.lang.String ocspResponderURL)
Set the location of the OCSP Responder.
|
void |
validate(java.security.cert.Certificate[] certChain) |
void |
validate(java.security.KeyStore keyStore)
validates all aliases inside of a given keystore
|
void |
validate(java.security.KeyStore keyStore,
java.security.cert.Certificate cert)
validates a specific certificate inside of the keystore being passed in
|
java.lang.String |
validate(java.security.KeyStore keyStore,
java.lang.String keyAlias)
validates a specific alias inside of the keystore being passed in
|
private static final Logger LOG
private static java.util.concurrent.atomic.AtomicLong __aliasCount
private java.security.KeyStore _trustStore
private java.util.Collection<? extends java.security.cert.CRL> _crls
private int _maxCertPathLength
private boolean _enableCRLDP
private boolean _enableOCSP
private java.lang.String _ocspResponderURL
public CertificateValidator(java.security.KeyStore trustStore, java.util.Collection<? extends java.security.cert.CRL> crls)
trustStore
- the truststore to usecrls
- the Certificate Revocation List to usepublic void validate(java.security.KeyStore keyStore) throws java.security.cert.CertificateException
keyStore
- the keystore to validatejava.security.cert.CertificateException
- if keystore error and unable to validatepublic java.lang.String validate(java.security.KeyStore keyStore, java.lang.String keyAlias) throws java.security.cert.CertificateException
keyStore
- the keystore to validatekeyAlias
- the keyalias in the keystore to valid withjava.security.cert.CertificateException
- if keystore error and unable to validatepublic void validate(java.security.KeyStore keyStore, java.security.cert.Certificate cert) throws java.security.cert.CertificateException
keyStore
- the keystore to validate againstcert
- the certificate to validatejava.security.cert.CertificateException
- if keystore error and unable to validatepublic void validate(java.security.cert.Certificate[] certChain) throws java.security.cert.CertificateException
java.security.cert.CertificateException
public java.security.KeyStore getTrustStore()
public java.util.Collection<? extends java.security.cert.CRL> getCrls()
public int getMaxCertPathLength()
public void setMaxCertPathLength(int maxCertPathLength)
maxCertPathLength
- maximum number of intermediate certificates in
the certification path (-1 for unlimited)public boolean isEnableCRLDP()
public void setEnableCRLDP(boolean enableCRLDP)
enableCRLDP
- true - turn on, false - turns offpublic boolean isEnableOCSP()
public void setEnableOCSP(boolean enableOCSP)
enableOCSP
- true - turn on, false - turn offpublic java.lang.String getOcspResponderURL()
public void setOcspResponderURL(java.lang.String ocspResponderURL)
ocspResponderURL
- location of the OCSP Responder