com.itextpdf.signatures

Class OcspClientBouncyCastle

java.lang.Object

com.itextpdf.signatures.OcspClientBouncyCastle

All Implemented Interfaces:

IOcspClient

public class OcspClientBouncyCastle
extends Object
implements IOcspClient

OcspClient implementation using BouncyCastle.

Author:

Paulo Soarees

Constructor Summary

Constructors

Constructor and Description
OcspClientBouncyCastle(OCSPVerifier verifier) Create OcspClient

Method Summary

Modifier and Type	Method and Description
org.bouncycastle.cert.ocsp.BasicOCSPResp	getBasicOCSPResp(X509Certificate checkCert, X509Certificate rootCert, String url) Gets OCSP response.
byte[]	getEncoded(X509Certificate checkCert, X509Certificate rootCert, String url) Gets an encoded byte array with OCSP validation.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OcspClientBouncyCastle

public OcspClientBouncyCastle(OCSPVerifier verifier)

Create OcspClient

Parameters:

verifier - will be used for response verification.

See Also:

OCSPVerifier

Method Detail

getBasicOCSPResp

public org.bouncycastle.cert.ocsp.BasicOCSPResp getBasicOCSPResp(X509Certificate checkCert,
                                                                 X509Certificate rootCert,
                                                                 String url)

Gets OCSP response. If OCSPVerifier was set, the response will be checked.

Parameters:

checkCert - to certificate to check

rootCert - the parent certificate

url - to get the verification

getEncoded

public byte[] getEncoded(X509Certificate checkCert,
                         X509Certificate rootCert,
                         String url)

Gets an encoded byte array with OCSP validation. The method should not throw an exception.

Specified by:

getEncoded in interface IOcspClient

Parameters:

checkCert - to certificate to check

rootCert - the parent certificate

url - to get the verification. It it's null it will be taken from the check cert or from other implementation specific source

Returns:

a byte array with the validation or null if the validation could not be obtained