demo.x509.ocsp
Class HttpOCSPClient

java.lang.Object
  |
  +--demo.x509.ocsp.OCSP
        |
        +--demo.x509.ocsp.HttpOCSPClient

public class HttpOCSPClient

extends OCSP

A simple OCSP client.

This client is part of the IAIK OCSP client - server demo. This class does exactly the same as demo class OCSPClient but uses class HttpOCSPRequest for connecting to the server.

The keys and certificates required for this demo are obtained from the IAIK-JCE demo keystore "jce.keystore" which may be generated by running the SetupKeyStore program.
This class extends the OCSP class for using its request creation/response parsing methods.

If you want to connect to another OCSP server than the IAIK OCSP demo server (listening on localhost, port 9999) you may specify the URL of the server and the target cert chain to be asked for revocation status when starting the client:

 java  HttpOCSPClient [responderUrl targetCertsFile]
 

The certs given in the target cert file may be in X.509 or PKCS#7 format and shall contain the target cert at index 0.

If you want to send a signed request, you additionally may specify the PKCS#12 from where to read certs and key for signing the request:

 java  HttpOCSPClient [responderUrl targetCertsFile [pkcs12File password]]
 

Version:

File Revision 15

See Also:

OCSPServer, OCSPServerThread, OCSP

Constructor Summary

HttpOCSPClient()
Default constructor.

Method Summary

static void	main(String[] argv) The main method.
void	start(String[] argv) Starts the OCSP client.

Methods inherited from class demo.x509.ocsp.OCSP

createOCSPRequest, createOCSPRequest, createOCSPResponse, parseOCSPResponse, start

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HttpOCSPClient

public HttpOCSPClient()
               throws IOException

Default constructor. Reads required keys and certificates from the dem keystore.

Throws:

IOException - if an error occurs when loading the keystore

Method Detail

start

public void start(String[] argv)
           throws OCSPException

Starts the OCSP client. If responder URL and target cert file have not been supplied via command line, a request is created for the the target certs read from the demo keystore and posted to http://localhost:9999 where the IAIK OCSP demo server is assumed to listen.

Parameters:

argv[] - responder URL and target cert file or null if connecting to localhost and reading target certs from the keystore

main

public static void main(String[] argv)
                 throws Exception

The main method. Starts the client.

Parameters:

argv[] - responder URL and target cert file or null if connecting to localhost and reading target certs from the keystore

Throws:

Exception - if an error occurs when reading required keys and certificates from files