com.itextpdf.signatures

Class CertificateUtil

java.lang.Object

com.itextpdf.signatures.CertificateUtil

public class CertificateUtil
extends Object

This class contains a series of static methods that allow you to retrieve information from a Certificate.

Constructor Summary

Constructors

Constructor and Description
CertificateUtil()

Method Summary

Modifier and Type	Method and Description
static CRL	getCRL(String url) Gets the CRL object using a CRL URL.
static CRL	getCRL(X509Certificate certificate) Gets a CRL from an X509 certificate.
static String	getCRLURL(X509Certificate certificate) Gets the URL of the Certificate Revocation List for a Certificate
static String	getOCSPURL(X509Certificate certificate) Retrieves the OCSP URL from the given certificate.
static String	getTSAURL(X509Certificate certificate) Gets the URL of the TSA if it's available on the certificate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertificateUtil

public CertificateUtil()

Method Detail

getCRL

public static CRL getCRL(X509Certificate certificate)
                  throws CertificateException,
                         CRLException,
                         IOException

Gets a CRL from an X509 certificate.

Parameters:

certificate - the X509Certificate to extract the CRL from

Returns:

CRL or null if there's no CRL available

Throws:

IOException - thrown when the URL couldn't be opened properly.

CertificateException - thrown if there's no X509 implementation in the provider.

CRLException - thrown when encountering errors when parsing the CRL.

getCRLURL

public static String getCRLURL(X509Certificate certificate)
                        throws CertificateParsingException

Gets the URL of the Certificate Revocation List for a Certificate

Parameters:

certificate - the Certificate

Returns:

the String where you can check if the certificate was revoked

Throws:

CertificateParsingException - throws if invalid DER-encoded certificate is parsed or unsupported DER features are found in the certificate

getCRL

public static CRL getCRL(String url)
                  throws IOException,
                         CertificateException,
                         CRLException

Gets the CRL object using a CRL URL.

Parameters:

url - the URL where the CRL is located

Returns:

CRL object

Throws:

IOException - thrown when the URL couldn't be opened properly.

CertificateException - thrown if there's no X509 implementation in the provider.

CRLException - thrown when encountering errors when parsing the CRL.

getOCSPURL

public static String getOCSPURL(X509Certificate certificate)

Retrieves the OCSP URL from the given certificate.

Parameters:

certificate - the certificate

Returns:

the URL or null

getTSAURL

public static String getTSAURL(X509Certificate certificate)

Gets the URL of the TSA if it's available on the certificate

Parameters:

certificate - a certificate

Returns:

a TSA URL