This class contains a series of static methods that allow you to retrieve information from a Certificate. More...

Static Public Member Functions
static IX509Crl	GetCRL (IX509Certificate certificate)
	Gets a CRL from an X509 certificate. More...

static String	GetCRLURL (IX509Certificate certificate)
	Gets the URL of the Certificate Revocation List for a Certificate More...

static IX509Crl	GetCRL (String url)
	Gets the CRL object using a CRL URL. More...

static String	GetIssuerCertURL (IX509Crl crl)
	Retrieves the URL for the issuer certificate for the given CRL. More...

static String	GetOCSPURL (IX509Certificate certificate)
	Retrieves the OCSP URL from the given certificate. More...

static String	GetIssuerCertURL (IX509Certificate certificate)
	Retrieves the URL for the issuer lists certificates for the given certificate. More...

static String	GetTSAURL (IX509Certificate certificate)
	Gets the URL of the TSA if it's available on the certificate More...

static IX509Certificate	GenerateCertificate (Stream data)
	Generates a certificate object and initializes it with the data read from the input stream inStream. More...

static void	RetrieveRevocationInfoFromSignedData (IAsn1TaggedObject taggedObj, ICollection< IX509Crl > crls, ICollection< IBasicOcspResponse > ocsps, ICollection< IAsn1Sequence > otherRevocationInfoFormats)
	Try to retrieve CRL and OCSP responses from the signed data crls field. More...

static IDerSet	CreateRevocationInfoChoices (ICollection< IX509Crl > crls, ICollection< IBasicOcspResponse > ocsps, ICollection< IAsn1Sequence > otherRevocationInfoFormats)
	Creates the revocation info (crls field) for SignedData structure: RevocationInfoChoices ::= SET OF RevocationInfoChoice RevocationInfoChoice ::= CHOICE { crl CertificateList, other [1] IMPLICIT OtherRevocationInfoFormat } OtherRevocationInfoFormat ::= SEQUENCE { otherRevInfoFormat OBJECT IDENTIFIER, otherRevInfo ANY DEFINED BY otherRevInfoFormat } CertificateList ::= SEQUENCE { tbsCertList TBSCertList, signatureAlgorithm AlgorithmIdentifier, signatureValue BIT STRING } More...

static IAsn1Object	GetExtensionValue (IX509Certificate certificate, String oid)

Detailed Description

This class contains a series of static methods that allow you to retrieve information from a Certificate.

Member Function Documentation

◆ CreateRevocationInfoChoices()

static IDerSet iText.Signatures.CertificateUtil.CreateRevocationInfoChoices	(	ICollection< IX509Crl >	crls,
		ICollection< IBasicOcspResponse >	ocsps,
		ICollection< IAsn1Sequence >	otherRevocationInfoFormats
	)

inlinestatic

Creates the revocation info (crls field) for SignedData structure: RevocationInfoChoices ::= SET OF RevocationInfoChoice RevocationInfoChoice ::= CHOICE { crl CertificateList, other [1] IMPLICIT OtherRevocationInfoFormat } OtherRevocationInfoFormat ::= SEQUENCE { otherRevInfoFormat OBJECT IDENTIFIER, otherRevInfo ANY DEFINED BY otherRevInfoFormat } CertificateList ::= SEQUENCE { tbsCertList TBSCertList, signatureAlgorithm AlgorithmIdentifier, signatureValue BIT STRING }

RFC 5652 §10.2.1

Parameters

crls	collection of CRL revocation status information.
ocsps	collection of OCSP revocation status information.
otherRevocationInfoFormats	collection of revocation info other than OCSP and CRL responses, e.g. SCVP Request and Response, stored as iText.Commons.Bouncycastle.Asn1.IAsn1Sequence.

Returns

crls [1] RevocationInfoChoices field of SignedData structure. Null if SignedData has no revocation data.

◆ GenerateCertificate()

static IX509Certificate iText.Signatures.CertificateUtil.GenerateCertificate ( Stream data )

inlinestatic

Generates a certificate object and initializes it with the data read from the input stream inStream.

Parameters

data	the input stream with the certificates.

Returns: a certificate object initialized with the data from the input stream.

◆ GetCRL() [1/2]

static IX509Crl iText.Signatures.CertificateUtil.GetCRL ( IX509Certificate certificate )

inlinestatic

Gets a CRL from an X509 certificate.

Parameters

certificate the X509Certificate to extract the CRL from

Returns: CRL or null if there's no CRL available

◆ GetCRL() [2/2]

static IX509Crl iText.Signatures.CertificateUtil.GetCRL ( String url )

inlinestatic

Gets the CRL object using a CRL URL.

Parameters

url	the URL where the CRL is located

Returns: CRL object

◆ GetCRLURL()

static String iText.Signatures.CertificateUtil.GetCRLURL ( IX509Certificate certificate )

inlinestatic

Gets the URL of the Certificate Revocation List for a Certificate

Parameters

certificate the Certificate

Returns: the String where you can check if the certificate was revoked

◆ GetExtensionValue()

static IAsn1Object iText.Signatures.CertificateUtil.GetExtensionValue	(	IX509Certificate	certificate,
		String	oid
	)

inlinestatic

Parameters

certificate	the certificate from which we need the ExtensionValue
oid	the Object Identifier value for the extension.

Returns: the extension value as an iText.Commons.Bouncycastle.Asn1.IAsn1Object object.

◆ GetIssuerCertURL() [1/2]

static String iText.Signatures.CertificateUtil.GetIssuerCertURL ( IX509Certificate certificate )

inlinestatic

Retrieves the URL for the issuer lists certificates for the given certificate.

Parameters

certificate the certificate

Returns: the URL or null.

◆ GetIssuerCertURL() [2/2]

static String iText.Signatures.CertificateUtil.GetIssuerCertURL ( IX509Crl crl )

inlinestatic

Retrieves the URL for the issuer certificate for the given CRL.

Parameters

crl	the CRL response

Returns: the URL or null.

◆ GetOCSPURL()

static String iText.Signatures.CertificateUtil.GetOCSPURL ( IX509Certificate certificate )

inlinestatic

Retrieves the OCSP URL from the given certificate.

Parameters

certificate the certificate

Returns: the URL or null

◆ GetTSAURL()

static String iText.Signatures.CertificateUtil.GetTSAURL ( IX509Certificate certificate )

inlinestatic

Gets the URL of the TSA if it's available on the certificate

Parameters

certificate a certificate

Returns: a TSA URL

◆ RetrieveRevocationInfoFromSignedData()

static void iText.Signatures.CertificateUtil.RetrieveRevocationInfoFromSignedData	(	IAsn1TaggedObject	taggedObj,
		ICollection< IX509Crl >	crls,
		ICollection< IBasicOcspResponse >	ocsps,
		ICollection< IAsn1Sequence >	otherRevocationInfoFormats
	)

inlinestatic

Try to retrieve CRL and OCSP responses from the signed data crls field.

Parameters

taggedObj	signed data crls field as iText.Commons.Bouncycastle.Asn1.IAsn1TaggedObject.
crls	collection to store retrieved CRL responses.
ocsps	collection of iText.Commons.Bouncycastle.Asn1.Ocsp.IBasicOcspResponse wrappers to store retrieved OCSP responses.
otherRevocationInfoFormats	collection of revocation info other than OCSP and CRL responses, e.g. SCVP Request and Response, stored as iText.Commons.Bouncycastle.Asn1.IAsn1Sequence.

Static Public Member Functions

Detailed Description

Member Function Documentation

◆ CreateRevocationInfoChoices()

◆ GenerateCertificate()

◆ GetCRL() [1/2]

◆ GetCRL() [2/2]

◆ GetCRLURL()

◆ GetExtensionValue()

◆ GetIssuerCertURL() [1/2]

◆ GetIssuerCertURL() [2/2]

◆ GetOCSPURL()

◆ GetTSAURL()

◆ RetrieveRevocationInfoFromSignedData()