Class CRLValidation

java.lang.Object
org.bouncycastle.cert.path.validations.CRLValidation
All Implemented Interfaces:
CertPathValidation, org.bouncycastle.util.Memoable
public class CRLValidation extends Object implements CertPathValidation

  • Constructor Summary

    Constructors
    Constructor
    Description
    CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo trustAnchorKey, X509ContentVerifierProviderBuilder contentVerifierProvider, org.bouncycastle.util.Store crls)
    Base constructor for CRL based revocation checking with CRL signature verification.
    CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName, org.bouncycastle.util.Store crls)
    Deprecated.
    this constructor cannot verify CRL signatures, so a matched CRL is rejected (fail-closed) rather than trusted.

  • Method Summary

    Modifier and Type
    Method
    Description
    org.bouncycastle.util.Memoable
    copy()
     
    void
    reset(org.bouncycastle.util.Memoable other)
     
    void
    validate(CertPathValidationContext context, X509CertificateHolder certificate)
     

    Methods inherited from class Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Constructor Details

    • CRLValidation

      public CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo trustAnchorKey, X509ContentVerifierProviderBuilder contentVerifierProvider, org.bouncycastle.util.Store crls)
      Base constructor for CRL based revocation checking with CRL signature verification.
      Parameters:
      trustAnchorName - the name of the trust anchor the path starts from.
      trustAnchorKey - the public key of the trust anchor, used to verify the first CRL.
      contentVerifierProvider - builder for the verifier used to check CRL signatures.
      crls - a Store of the CRLs to consult.

    • CRLValidation

      public CRLValidation(org.bouncycastle.asn1.x500.X500Name trustAnchorName, org.bouncycastle.util.Store crls)
      Deprecated.
      this constructor cannot verify CRL signatures, so a matched CRL is rejected (fail-closed) rather than trusted. Use CRLValidation(X500Name, SubjectPublicKeyInfo, X509ContentVerifierProviderBuilder, Store) so CRLs are checked against the issuer's key.

  • Method Details