org.apache.synapse.transport.certificatevalidation.crl

## Class CRLVerifier

- java.lang.Object
- - org.apache.synapse.transport.certificatevalidation.crl.CRLVerifier

- All Implemented Interfaces:
    RevocationVerifier

      public class CRLVerifier
      extends Object
      implements RevocationVerifier

  This is used to verify a certificate is revoked or not by using the Certificate Revocation List published by the CA.

- - ### Constructor Summary

    Constructors
    Constructor and Description
    `CRLVerifier(CRLCache cache)`

  - ### Method Summary

    All Methods Instance Methods Concrete Methods
    Modifier and Type | Method and Description
    --- | ---
    `RevocationStatus` | `checkRevocationStatus(X509Certificate peerCert, X509Certificate issuerCert)` Checks revocation status (Good, Revoked) of the peer certificate.
    `protected X509CRL` | `downloadCRLFromWeb(String crlURL)` Downloads CRL from the crlUrl.

    - ### Methods inherited from class java.lang.Object

      `clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

- - ### Constructor Detail

    - #### CRLVerifier

          public CRLVerifier(CRLCache cache)

  - ### Method Detail

    - #### checkRevocationStatus

          public RevocationStatus checkRevocationStatus(X509Certificate peerCert,
                                                        X509Certificate issuerCert)
                                                 throws CertificateVerificationException

      Checks revocation status (Good, Revoked) of the peer certificate. IssuerCertificate can be used to check if the CRL URL has the Issuers Domain name. But this is not implemented at the moment.
      Specified by:
        `checkRevocationStatus` in interface `RevocationVerifier`
      Parameters:
        `peerCert` - peer certificate
        `issuerCert` - issuer certificate of the peer. not used currently.
      Returns:
        revocation status of the peer certificate.
      Throws:
        `CertificateVerificationException`

    - #### downloadCRLFromWeb

          protected X509CRL downloadCRLFromWeb(String crlURL)
                                        throws IOException,
                                               CertificateVerificationException

      Downloads CRL from the crlUrl. Does not support HTTPS
      Throws:
        `IOException`
        `CertificateVerificationException`

Copyright © 2005–2023 Apache Software Foundation. All rights reserved.