Package com.sun.identity.security.cert

Class CRLValidator

java.lang.Object

com.sun.identity.security.cert.CRLValidator

public class CRLValidator
extends Object

This interface is for CRLValidator that is representing configued X509CRLValidator

Constructor Summary

Constructors

Constructor	Description
CRLValidator()

Method Summary

Modifier and Type	Method	Description
static X509CRL	getCRL(X509Certificate cert)	Deprecated. Has no callers.
static boolean	isCRLCheckEnabled()
static boolean	validateCertificate(X509Certificate cert, boolean checkCAStatus)	Validate certificate against configured crl

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CRLValidator

public CRLValidator()

Method Detail

validateCertificate

public static boolean validateCertificate(X509Certificate cert,
                                          boolean checkCAStatus)

Validate certificate against configured crl

Parameters:

cert - cert to be validated

Returns:

true if certificate is not in crl

getCRL

@Deprecated
public static X509CRL getCRL(X509Certificate cert)

Deprecated.

Has no callers. Use validateCertificate(X509Certificate, boolean) instead; a CRL Distribution Point fetch must never run for a certificate that has not passed the trust-chain check.

Get certificate revocation list from cofigured ldap store

Parameters:

cert - cert to be validated

Returns:

crl if ldap store configured with crl

isCRLCheckEnabled

public static boolean isCRLCheckEnabled()