Package eu.europa.esig.dss.crl

Interface ICRLUtils

All Known Implementing Classes:
CRLUtilsStreamImpl, CRLUtilsX509CRLImpl
public interface ICRLUtils
The interface for dealing with CRLs

  • Method Summary

    Modifier and Type
    Method
    Description
    CRLBinary
    buildCRLBinary(byte[] binaries)
    Takes binaries and returns DER encoded CRLBinary
    CRLValidity
    buildCRLValidity(CRLBinary crlBinary, CertificateToken issuerToken)
    This method verifies: the signature of the CRL, the key usage of its signing certificate and the coherence between the subject names of the CRL signing certificate and the issuer name of the certificate for which the verification of the revocation data is carried out.
    X509CRLEntry
    getRevocationInfo(CRLValidity crlValidity, BigInteger serialNumber)
    This method verifies the revocation status for a given serial number

  • Method Details

    • buildCRLBinary

      CRLBinary buildCRLBinary(byte[] binaries)
      Takes binaries and returns DER encoded CRLBinary
      Parameters:
      binaries - byte array representing an encoded CRL
      Returns:
      DER encoded CRLBinary

    • buildCRLValidity

      CRLValidity buildCRLValidity(CRLBinary crlBinary, CertificateToken issuerToken) throws IOException
      This method verifies: the signature of the CRL, the key usage of its signing certificate and the coherence between the subject names of the CRL signing certificate and the issuer name of the certificate for which the verification of the revocation data is carried out. A dedicated object based on CRLValidity is created and accordingly updated.
      Parameters:
      crlBinary - (@code CRLBinary) to build the CRLValidity and verify token (cannot be null)
      issuerToken - CertificateToken used to sign the X509CRL (cannot be null)
      Returns:
      CRLValidity
      Throws:
      IOException - if an IO error occurred

    • getRevocationInfo

      X509CRLEntry getRevocationInfo(CRLValidity crlValidity, BigInteger serialNumber)
      This method verifies the revocation status for a given serial number
      Parameters:
      crlValidity - the CRL Validity
      serialNumber - the certificate serial number to search
      Returns:
      the X509CRLEntry with the revocation date, the reason, or null if the serial number is not found