net.maritimecloud.pki

Class CRLVerifier

java.lang.Object

net.maritimecloud.pki.CRLVerifier

public final class CRLVerifier
extends Object

Constructor Summary

Constructors

Constructor and Description
CRLVerifier()

Method Summary

Modifier and Type	Method and Description
static X509CRL	downloadCRL(String crlURL) Downloads CRL from given URL.
static X509CRL	downloadCRLFromLDAP(String ldapURL) Downloads a CRL from given LDAP url, e.g.
static X509CRL	downloadCRLFromWeb(String crlURL) Downloads a CRL from given HTTP/HTTPS/FTP URL, e.g.
static List<String>	getCrlDistributionPoints(X509Certificate cert) Extracts all CRL distribution point URLs from the "CRL Distribution Point" extension in a X.509 certificate.
static X509CRL	loadCRLFromFile(String path) Load a CRL from given file
static RevocationInfo	verifyCertificateCRL(X509Certificate cert) Extracts the CRL distribution points from the certificate (if available) and checks the certificate revocation status against the CRLs coming from the distribution points.
static RevocationInfo	verifyCertificateCRL(X509Certificate cert, X509CRL crl) Verifies the revocation status of a certificate against a CRL

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CRLVerifier

public CRLVerifier()

Method Detail

verifyCertificateCRL

public static RevocationInfo verifyCertificateCRL(X509Certificate cert)

Extracts the CRL distribution points from the certificate (if available) and checks the certificate revocation status against the CRLs coming from the distribution points. Supports HTTP, HTTPS, FTP and LDAP based URLs.

Parameters:

cert - Certificate to verify

Returns:

a RevocationInfo object with the validation result

verifyCertificateCRL

public static RevocationInfo verifyCertificateCRL(X509Certificate cert,
                                                  X509CRL crl)

Verifies the revocation status of a certificate against a CRL

Parameters:

cert - The certificate to verify

crl - The CRL to use for verifying

Returns:

a RevocationInfo object with the validation result

downloadCRL

public static X509CRL downloadCRL(String crlURL)
                           throws IOException,
                                  CertificateException,
                                  NamingException,
                                  CRLException

Downloads CRL from given URL. Supports http, https, ftp and ldap based URLs.

Throws:

IOException

CertificateException

NamingException

CRLException

downloadCRLFromLDAP

public static X509CRL downloadCRLFromLDAP(String ldapURL)
                                   throws NamingException,
                                          CertificateException,
                                          CRLException

Downloads a CRL from given LDAP url, e.g. ldap://ldap.infonotary.com/dc=identity-ca,dc=infonotary,dc=com

Throws:

NamingException

CertificateException

CRLException

downloadCRLFromWeb

public static X509CRL downloadCRLFromWeb(String crlURL)
                                  throws IOException,
                                         CRLException,
                                         CertificateException

Downloads a CRL from given HTTP/HTTPS/FTP URL, e.g. http://crl.infonotary.com/crl/identity-ca.crl

Throws:

IOException

CRLException

CertificateException

loadCRLFromFile

public static X509CRL loadCRLFromFile(String path)
                               throws IOException,
                                      CRLException,
                                      CertificateException

Load a CRL from given file

Throws:

IOException

CRLException

CertificateException

getCrlDistributionPoints

public static List<String> getCrlDistributionPoints(X509Certificate cert)
                                             throws CertificateParsingException,
                                                    IOException

Extracts all CRL distribution point URLs from the "CRL Distribution Point" extension in a X.509 certificate. If CRL distribution point extension is unavailable, returns an empty list.

Throws:

CertificateParsingException

IOException