com.tencent.kona.sun.security.provider.certpath

Class OCSP

java.lang.Object

com.tencent.kona.sun.security.provider.certpath.OCSP

public final class OCSP
extends java.lang.Object

This is a class that checks the revocation status of a certificate(s) using OCSP. It is not a PKIXCertPathChecker and therefore can be used outside the CertPathValidator framework. It is useful when you want to just check the revocation status of a certificate, and you don't want to incur the overhead of validating all the certificates in the associated certificate chain.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static interface	OCSP.RevocationStatus The Revocation Status of a certificate.

Method Summary

Modifier and Type	Method and Description
static byte[]	getOCSPBytes(java.util.List<CertId> certIds, java.net.URI responderURI, java.util.List<java.security.cert.Extension> extensions) Send an OCSP request, then read and return the OCSP response bytes.
static java.net.URI	getResponderURI(java.security.cert.X509Certificate cert) Returns the URI of the OCSP Responder as specified in the certificate's Authority Information Access extension, or null if not specified.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getOCSPBytes

public static byte[] getOCSPBytes(java.util.List<CertId> certIds,
                                  java.net.URI responderURI,
                                  java.util.List<java.security.cert.Extension> extensions)
                           throws java.io.IOException

Send an OCSP request, then read and return the OCSP response bytes.

Parameters:

certIds - the CertIds to be checked

responderURI - the URI of the OCSP responder

extensions - zero or more OCSP extensions to be included in the request. If no extensions are requested, an empty List must be used. A null value is not allowed.

Returns:

the OCSP response bytes

Throws:

java.io.IOException - if there is an exception connecting to or communicating with the OCSP responder

getResponderURI

public static java.net.URI getResponderURI(java.security.cert.X509Certificate cert)

Returns the URI of the OCSP Responder as specified in the certificate's Authority Information Access extension, or null if not specified.

Parameters:

cert - the certificate

Returns:

the URI of the OCSP Responder, or null if not specified