iText 9.0.0 API
iText.Signatures.IIssuingCertificateRetriever Interface Reference

Interface helper to support retrieving CAIssuers certificates from Authority Information Access (AIA) Extension in order to support certificate chains with missing certificates and getting CRL response issuer certificates. More...

Inheritance diagram for iText.Signatures.IIssuingCertificateRetriever:
iText.Signatures.IssuingCertificateRetriever

Public Member Functions

IX509Certificate[]  RetrieveMissingCertificates (IX509Certificate[] chain)
  Retrieves missing certificates in chain using certificate Authority Information Access (AIA) Extension. More...
 
IX509Certificate[]  GetCrlIssuerCertificates (IX509Crl crl)
  Retrieves the certificate chain for the certificate that should be used to verify the signature on the CRL response using CRL Authority Information Access (AIA) Extension and known certificates. More...
 
IX509Certificate[][]  GetCrlIssuerCertificatesByName (IX509Crl crl)
  Retrieves the certificate chaind for the certificates that could be used to verify the signature on the CRL response using CRL Authority Information Access (AIA) Extension and known certificates. More...
 
void  SetTrustedCertificates (ICollection< IX509Certificate > certificates)
  Sets trusted certificate list to be used for the missing certificates retrieving by the issuer name. More...
 

Detailed Description

Interface helper to support retrieving CAIssuers certificates from Authority Information Access (AIA) Extension in order to support certificate chains with missing certificates and getting CRL response issuer certificates.

Member Function Documentation

◆ GetCrlIssuerCertificates()

IX509Certificate [] iText.Signatures.IIssuingCertificateRetriever.GetCrlIssuerCertificates ( IX509Crl  crl )

Retrieves the certificate chain for the certificate that should be used to verify the signature on the CRL response using CRL Authority Information Access (AIA) Extension and known certificates.

Parameters
crl CRL response to retrieve issuer for.
Returns
certificates retrieved from CRL AIA extension or an empty list in case certificates cannot be retrieved.

Implemented in iText.Signatures.IssuingCertificateRetriever.

◆ GetCrlIssuerCertificatesByName()

IX509Certificate [][] iText.Signatures.IIssuingCertificateRetriever.GetCrlIssuerCertificatesByName ( IX509Crl  crl )

Retrieves the certificate chaind for the certificates that could be used to verify the signature on the CRL response using CRL Authority Information Access (AIA) Extension and known certificates.

Parameters
crl CRL response to retrieve issuer for.
Returns
certificates retrieved from CRL AIA extension or an empty list in case certificates cannot be retrieved.

Implemented in iText.Signatures.IssuingCertificateRetriever.

◆ RetrieveMissingCertificates()

IX509Certificate [] iText.Signatures.IIssuingCertificateRetriever.RetrieveMissingCertificates ( IX509Certificate[]  chain )

Retrieves missing certificates in chain using certificate Authority Information Access (AIA) Extension.

Parameters
chain certificate chain to restore with at least signing certificate.
Returns
full chain of trust or maximum chain that could be restored in case missing certificates cannot be retrieved from AIA extension.

Implemented in iText.Signatures.IssuingCertificateRetriever.

◆ SetTrustedCertificates()

void iText.Signatures.IIssuingCertificateRetriever.SetTrustedCertificates ( ICollection< IX509Certificate certificates )

Sets trusted certificate list to be used for the missing certificates retrieving by the issuer name.

Parameters
certificates certificate list for getting missing certificates in chain or CRL response issuer certificates.

Implemented in iText.Signatures.IssuingCertificateRetriever.