org.apache.synapse.transport.utils.sslcert.pathvalidation

Class CertificatePathValidator

java.lang.Object

org.apache.synapse.transport.utils.sslcert.pathvalidation.CertificatePathValidator

public class CertificatePathValidator
extends Object

Used to validate the revocation status of a certificate chain acquired from the peer. A revocation verifier (OCSP or CRL) should be given. Must be used only once when validating certificate chain for an SSLSession. Create a new instance if need to be reused because the path validation process is state-full. Not thread safe.

Constructor Summary

Constructors

Constructor and Description
CertificatePathValidator(X509Certificate[] certChainArray, RevocationVerifier verifier)

Method Summary

Modifier and Type	Method and Description
void	validatePath() Certificate Path Validation process

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertificatePathValidator

public CertificatePathValidator(X509Certificate[] certChainArray,
                                RevocationVerifier verifier)

Method Detail

validatePath

public void validatePath()
                  throws CertificateVerificationException

Certificate Path Validation process

Throws:

CertificateVerificationException - if validation process fails.