Package net.maritimeconnectivity.pki

Class OCSPVerifier

java.lang.Object

net.maritimeconnectivity.pki.OCSPVerifier

public class OCSPVerifier
extends Object

Method Summary

Modifier and Type	Method	Description
static RevocationInfo	verifyCertificateOCSP(X509Certificate cert, X509Certificate issuerCert)	Verifies a certificate against an issuer using OCSP.
static RevocationInfo	verifyCertificateOCSP(X509Certificate cert, KeyStore trustStore)	Verifies a certificate against its issuer using OCSP.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

verifyCertificateOCSP

public static RevocationInfo verifyCertificateOCSP(X509Certificate cert,
                                                   KeyStore trustStore)
                                            throws KeyStoreException,
                                                   OCSPValidationException

Verifies a certificate against its issuer using OCSP. In most cases you should probably use verifyCertificateChain instead to verify the complete chain.

Parameters:

cert - Certificate to validate

trustStore - Truststore containing the issuer certificate

Returns:

an OCSP result

Throws:

KeyStoreException - if the issuing CA certificate cannot be found

OCSPValidationException - if the certificate cannot be verified using OCSP

verifyCertificateOCSP

public static RevocationInfo verifyCertificateOCSP(X509Certificate cert,
                                                   X509Certificate issuerCert)
                                            throws OCSPValidationException

Verifies a certificate against an issuer using OCSP. In most cases you should probably use verifyCertificateChain instead to verify the complete chain.

Parameters:

cert - Certificate to validate

issuerCert - The issuer certificate

Returns:

an OCSP result

Throws:

OCSPValidationException - if the certificate cannot be verified using OCSP