Package org.codice.ddf.security.ocsp.checker

Class OcspChecker

java.lang.Object

org.codice.ddf.security.ocsp.checker.OcspChecker

All Implemented Interfaces:

org.codice.ddf.security.OcspService

public class OcspChecker
extends Object
implements org.codice.ddf.security.OcspService

Constructor Summary

Constructors

Constructor	Description
OcspChecker(org.codice.ddf.cxf.client.ClientBuilderFactory factory, org.osgi.service.event.EventAdmin eventAdmin)

Method Summary

Modifier and Type	Method	Description
boolean	passesOcspCheck(X509Certificate[] certs)	Checks whether the given are revoked or not against the configured OCSP server urls + the optionally given OCSP server url in the given .
void	setOcspEnabled(boolean ocspEnabled)
void	setOcspServerUrls(List<String> ocspServerUrls)
void	setSecurityLogger(ddf.security.audit.SecurityLogger securityLogger)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OcspChecker

public OcspChecker(org.codice.ddf.cxf.client.ClientBuilderFactory factory,
 org.osgi.service.event.EventAdmin eventAdmin)

Method Details

passesOcspCheck

public boolean passesOcspCheck(X509Certificate[] certs)

Checks whether the given are revoked or not against the configured OCSP server urls + the optionally given OCSP server url in the given .

Specified by:

passesOcspCheck in interface org.codice.ddf.security.OcspService

Parameters:

certs - - an array of certificates to verify.

Returns:

true if the certificates are good or if they could not be properly checked against the OCSP server. Returns false if any of them are revoked.

setOcspEnabled

public void setOcspEnabled(boolean ocspEnabled)

setOcspServerUrls

public void setOcspServerUrls(List<String> ocspServerUrls)

setSecurityLogger

public void setSecurityLogger(ddf.security.audit.SecurityLogger securityLogger)