Package org.apache.synapse.transport.certificatevalidation.pathvalidation

Class CertificatePathValidator

java.lang.Object

org.apache.synapse.transport.certificatevalidation.pathvalidation.CertificatePathValidator

public class CertificatePathValidator
extends Object

Used to validate the revocation status of a certificate chain acquired from the peer. A revocation verifier (OCSP or CRL) should be given. Must be used only once when validating certificate chain for an SSLSession. Create a new instance if need to be reused because the path validation process is state-full. Not thread safe

Constructor Summary

Constructors

Constructor	Description
CertificatePathValidator(X509Certificate[] certChainArray, RevocationVerifier verifier)

Method Summary

Modifier and Type	Method	Description
void	validatePath()	Certificate Path Validation process

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CertificatePathValidator

public CertificatePathValidator(X509Certificate[] certChainArray,
 RevocationVerifier verifier)

Method Details

validatePath

public void validatePath()
                  throws Exception

Certificate Path Validation process

Throws:

CertificateVerificationException - if validation process fails.

Exception