iaik.pdf.cmscades

Class OcspResponseUtil

java.lang.Object

iaik.pdf.cmscades.OcspResponseUtil

public class OcspResponseUtil
extends java.lang.Object

Provides methods to check revocation status of certificates via OCSP.

Constructor Summary

Constructors

Constructor and Description
OcspResponseUtil()

Method Summary

Modifier and Type	Method and Description
static iaik.x509.ocsp.OCSPResponse	createOcspResponse(java.security.cert.X509Certificate checkCert, java.security.cert.X509Certificate issuerCert, java.lang.String ocspUrl) Sends a OCSP request and evaluates and returns the received OCSP response.
static iaik.x509.ocsp.OCSPResponse	createOcspResponse(java.security.cert.X509Certificate checkCert, java.security.cert.X509Certificate issuerCert, java.lang.String ocspUrl, java.security.PrivateKey requestorKey, java.security.cert.X509Certificate[] requestorCerts) Sends a OCSP request and evaluates and returns the received OCSP response.
static iaik.x509.ocsp.CertStatus	getOCSPResponseCertStatus(iaik.x509.ocsp.OCSPResponse ocspResponse, java.security.cert.X509Certificate checkCert, java.security.cert.X509Certificate issuerCert, byte[] nonce) Parses an OCSP response and returns the certificate status.
static java.lang.String	getOcspUrl(iaik.x509.X509Certificate certificate) Extract URL to be used for checking revocation status via OCSP.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OcspResponseUtil

public OcspResponseUtil()

Method Detail

createOcspResponse

public static iaik.x509.ocsp.OCSPResponse createOcspResponse(java.security.cert.X509Certificate checkCert,
                                                             java.security.cert.X509Certificate issuerCert,
                                                             java.lang.String ocspUrl)
                                                      throws CmsCadesException

Sends a OCSP request and evaluates and returns the received OCSP response.

Parameters:

checkCert - the certificate to check

issuerCert - the certificate of the issuer of checkCert

ocspUrl - the URL to the OCSP responder for checking the certificate status

Returns:

the OCSP response, if it is valid and status good

Throws:

CmsCadesException - if OCSP request could not be created or sent, or if OCSP response could not be verified

createOcspResponse

public static iaik.x509.ocsp.OCSPResponse createOcspResponse(java.security.cert.X509Certificate checkCert,
                                                             java.security.cert.X509Certificate issuerCert,
                                                             java.lang.String ocspUrl,
                                                             java.security.PrivateKey requestorKey,
                                                             java.security.cert.X509Certificate[] requestorCerts)
                                                      throws CmsCadesException

Sends a OCSP request and evaluates and returns the received OCSP response.

Parameters:

checkCert - the certificate to check

issuerCert - the certificate of the issuer of checkCert

ocspUrl - the URL to the OCSP responder for checking the certificate status

requestorKey - key to be used for signing the OCSP request

requestorCerts - requestor's certificate chain

Returns:

the OCSP response, if it is valid and status good

Throws:

CmsCadesException - if OCSP request could not be created or sent, or if OCSP response could not be verified

getOCSPResponseCertStatus

public static iaik.x509.ocsp.CertStatus getOCSPResponseCertStatus(iaik.x509.ocsp.OCSPResponse ocspResponse,
                                                                  java.security.cert.X509Certificate checkCert,
                                                                  java.security.cert.X509Certificate issuerCert,
                                                                  byte[] nonce)
                                                           throws CmsCadesException

Parses an OCSP response and returns the certificate status.

Parameters:

ocspResponse - OCSP response to be validated

checkCert - the certificate to be checked

issuerCert - the certificate of the issuer of checkCert

nonce - the nonce of the corresponding OCSP request (or null if not available)

Returns:

the certificate status as included in the OCSP response or null if no response included for the given certificate

Throws:

CmsCadesException - if response is not valid or errors occurred during OCSP response verification

getOcspUrl

public static java.lang.String getOcspUrl(iaik.x509.X509Certificate certificate)
                                   throws java.security.GeneralSecurityException

Extract URL to be used for checking revocation status via OCSP.

Parameters:

certificate - certificate to extract the URL from

Returns:

URL to check revocation status via OCSP if included in certificate or null

Throws:

java.security.GeneralSecurityException - if the URL can't be extracted