org.wso2.transport.http.netty.contractimpl.common.certificatevalidation

Class RevocationVerificationManager

java.lang.Object

org.wso2.transport.http.netty.contractimpl.common.certificatevalidation.RevocationVerificationManager

public class RevocationVerificationManager
extends Object

Manager class responsible for verifying certificates. This class will use the available verifiers according to a predefined policy (First check with OCSP access end point and then move to CRL distribution point to validate).

Constructor Summary

Constructors

Constructor and Description
RevocationVerificationManager(Integer cacheAllocatedSize, Integer cacheDelayMins)

Method Summary

Modifier and Type	Method and Description
boolean	verifyRevocationStatus(X509Certificate[] peerCertificates) This method first tries to verify the given certificate chain using OCSP since OCSP verification is faster.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RevocationVerificationManager

public RevocationVerificationManager(Integer cacheAllocatedSize,
                                     Integer cacheDelayMins)

Method Detail

verifyRevocationStatus

public boolean verifyRevocationStatus(X509Certificate[] peerCertificates)
                               throws CertificateVerificationException

This method first tries to verify the given certificate chain using OCSP since OCSP verification is faster. If that fails it tries to do the verification using CRL.

Parameters:

peerCertificates - javax.security.cert.X509Certificate[] array of peer certificate chain from peer/client.

Returns:

true If the process of certificate revocation becomes successful.

Throws:

CertificateVerificationException - Occurs when certificate fails to be validated from both OCSP and CRL.