org.codice.ddf.security.handler.pki

Class CrlChecker

java.lang.Object

org.codice.ddf.security.handler.pki.CrlChecker

public class CrlChecker
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
static String	CRL_PROPERTY_KEY

Constructor Summary

Constructors

Constructor and Description
CrlChecker()

Method Summary

Modifier and Type	Method and Description
boolean	passesCrlCheck(X509Certificate[] certs) Checks the given certs against the CRL.
void	setCrlLocation(String location) Sets the location of the CRL.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CRL_PROPERTY_KEY

public static final String CRL_PROPERTY_KEY

See Also:

Constant Field Values

Constructor Detail

CrlChecker

public CrlChecker()

Method Detail

passesCrlCheck

public boolean passesCrlCheck(X509Certificate[] certs)

Checks the given certs against the CRL. The CRL is configured in this class's constructor method.

Parameters:

certs - certificates to be checked against the CRL

Returns:

true if one of the certs passes the CRL or if CRL revocation is disabled, false if they are all revoked.

setCrlLocation

public void setCrlLocation(String location)

Sets the location of the CRL. Enables CRL checking if property is set, disables it otherwise

Parameters:

location - Location of the DER-encoded CRL file that should be used to check certificate revocation.