Package com.itextpdf.signatures

Interface IIssuingCertificateRetriever

All Known Implementing Classes:
IssuingCertificateRetriever
public interface IIssuingCertificateRetriever
Interface helper to support retrieving CAIssuers certificates from Authority Information Access (AIA) Extension in order to support certificate chains with missing certificates and getting CRL response issuer certificates.

  • Method Details

    • retrieveMissingCertificates

      Certificate[] retrieveMissingCertificates (Certificate[] chain)
      Retrieves missing certificates in chain using certificate Authority Information Access (AIA) Extension.
      Parameters:
      chain - certificate chain to restore with at least signing certificate.
      Returns:
      full chain of trust or maximum chain that could be restored in case missing certificates cannot be retrieved from AIA extension.

    • getCrlIssuerCertificates

      Certificate[] getCrlIssuerCertificates (CRL crl)
      Retrieves certificates that can be used to verify the signature on the CRL response using CRL Authority Information Access (AIA) Extension.
      Parameters:
      crl - CRL response to retrieve issuer for.
      Returns:
      certificates retrieved from CRL AIA extension or an empty list in case certificates cannot be retrieved.

    • setTrustedCertificates

      void setTrustedCertificates (Collection<Certificate> certificates)
      Sets trusted certificate list to be used for the missing certificates retrieving by the issuer name.
      Parameters:
      certificates - certificate list for getting missing certificates in chain or CRL response issuer certificates.