Package com.itextpdf.signatures.validation

Class RevocationDataValidator

java.lang.Object

com.itextpdf.signatures.validation.RevocationDataValidator

       public class RevocationDataValidator extends Object
      

Class that allows you to fetch and validate revocation data for the certificate.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	RevocationDataValidator.CrlValidationInfo	Class which contains validation related information about CRL response.
static class	RevocationDataValidator.OcspResponseValidationInfo	Class which contains validation related information about single OCSP response.

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	RevocationDataValidator(ValidatorChainBuilder builder)	Creates new RevocationDataValidator instance to validate certificate revocation data.

Method Summary

Modifier and Type	Method	Description
RevocationDataValidator	addCrlClient(ICrlClient crlClient)	Add ICrlClient to be used for CRL responses receiving.
RevocationDataValidator	addOcspClient(IOcspClient ocspClient)	Add IOcspClient to be used for OCSP responses receiving.
void	validate(ValidationReport report, ValidationContext context, X509Certificate certificate, Date validationDate)	Validates revocation data (Certificate Revocation List (CRL) Responses and OCSP Responses) of the certificate.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

RevocationDataValidator

             protected RevocationDataValidator
             (ValidatorChainBuilder builder)
            

Creates new RevocationDataValidator instance to validate certificate revocation data.

Parameters:

builder - See ValidatorChainBuilder

Method Details

addCrlClient

             public RevocationDataValidator addCrlClient
             (ICrlClient crlClient)
            

Add ICrlClient to be used for CRL responses receiving. These clients will be used regardless of the SignatureValidationProperties.OnlineFetching settings

Parameters:

crlClient - ICrlClient to be used for CRL responses receiving

Returns:

same instance of RevocationDataValidator.

addOcspClient

             public RevocationDataValidator addOcspClient
             (IOcspClient ocspClient)
            

Add IOcspClient to be used for OCSP responses receiving. These clients will be used regardless of the SignatureValidationProperties.OnlineFetching settings

Parameters:

ocspClient - IOcspClient to be used for OCSP responses receiving

Returns:

same instance of RevocationDataValidator.

validate

             public void validate
             (ValidationReport report, ValidationContext context, X509Certificate certificate, Date validationDate)
            

Validates revocation data (Certificate Revocation List (CRL) Responses and OCSP Responses) of the certificate.

Parameters:

report - to store all the verification results

context - ValidationContext the context

certificate - the certificate to check revocation data for

validationDate - validation date to check for