org.apache.synapse.transport.utils.sslcert.crl

Class CRLVerifier

java.lang.Object

org.apache.synapse.transport.utils.sslcert.crl.CRLVerifier

All Implemented Interfaces:

RevocationVerifier

public class CRLVerifier
extends Object
implements RevocationVerifier

This is used to verify a certificate is revoked or not by using the Certificate Revocation List published by the CA.

Constructor Summary

Constructors

Constructor and Description
CRLVerifier(CRLCache cache)

Method Summary

Modifier and Type	Method and Description
RevocationStatus	checkRevocationStatus(X509Certificate peerCert, X509Certificate issuerCert) Checks revocation status (Good, Revoked) of the peer certificate.
protected X509CRL	downloadCRLFromWeb(String crlURL) Downloads CRL from the crlUrl.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CRLVerifier

public CRLVerifier(CRLCache cache)

Method Detail

checkRevocationStatus

public RevocationStatus checkRevocationStatus(X509Certificate peerCert,
                                              X509Certificate issuerCert)
                                       throws CertificateVerificationException

Checks revocation status (Good, Revoked) of the peer certificate.

Specified by:

checkRevocationStatus in interface RevocationVerifier

Parameters:

peerCert - peer certificate

issuerCert - issuer certificate of the peer. not used currently.

Returns:

revocation status of the peer certificate.

Throws:

CertificateVerificationException

downloadCRLFromWeb

protected X509CRL downloadCRLFromWeb(String crlURL)
                              throws IOException,
                                     CertificateVerificationException

Downloads CRL from the crlUrl. Does not support HTTPS

Throws:

IOException

CertificateVerificationException