Package org.codice.ddf.security.handler.pki

Class CrlChecker

java.lang.Object

org.codice.ddf.security.handler.pki.CrlChecker

public class CrlChecker
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CRL_PROPERTY_KEY

Constructor Summary

Constructors

Constructor	Description
CrlChecker(ddf.security.audit.SecurityLogger securityLogger)

Method Summary

Modifier and Type	Method	Description
boolean	passesCrlCheck(X509Certificate[] certs)	Checks the given certs against the CRL.
void	setCrlLocation(String location)	Sets the location of the CRL.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CRL_PROPERTY_KEY

public static final String CRL_PROPERTY_KEY

See Also:

• Constant Field Values

Constructor Details

CrlChecker

public CrlChecker(ddf.security.audit.SecurityLogger securityLogger)

Method Details

passesCrlCheck

public boolean passesCrlCheck(X509Certificate[] certs)

Checks the given certs against the CRL. The CRL is configured in this class's constructor method.

Parameters:

certs - certificates to be checked against the CRL

Returns:

true if one of the certs passes the CRL or if CRL revocation is disabled, false if they are all revoked.

setCrlLocation

public void setCrlLocation(String location)

Sets the location of the CRL. Enables CRL checking if property is set, disables it otherwise

Parameters:

location - Location of the DER-encoded CRL file that should be used to check certificate revocation.