Package eu.europa.esig.dss.crl.x509.impl

Class CRLUtilsX509CRLImpl

java.lang.Object

eu.europa.esig.dss.crl.AbstractCRLUtils

eu.europa.esig.dss.crl.x509.impl.CRLUtilsX509CRLImpl

All Implemented Interfaces:

ICRLUtils

public class CRLUtilsX509CRLImpl
extends AbstractCRLUtils
implements ICRLUtils

The implementation of ICRLUtils with java.security classes

Constructor Summary

Constructors

Constructor	Description
CRLUtilsX509CRLImpl()	Default constructor

Method Summary

Modifier and Type	Method	Description
CRLValidity	buildCRLValidity(CRLBinary crlBinary, CertificateToken issuerToken)	This method verifies: the signature of the CRL, the key usage of its signing certificate and the coherence between the subject names of the CRL signing certificate and the issuer name of the certificate for which the verification of the revocation data is carried out.
X509CRLEntry	getRevocationInfo(CRLValidity crlValidity, BigInteger serialNumber)	This method verifies the revocation status for a given serial number

Methods inherited from class eu.europa.esig.dss.crl.AbstractCRLUtils

buildCRLBinary, extractExpiredCertsOnCRL, extractIssuingDistributionPointBinary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface eu.europa.esig.dss.crl.ICRLUtils

buildCRLBinary

Constructor Details

CRLUtilsX509CRLImpl

public CRLUtilsX509CRLImpl()

Default constructor

Method Details

buildCRLValidity

public CRLValidity buildCRLValidity(CRLBinary crlBinary,
 CertificateToken issuerToken)
                             throws IOException

This method verifies: the signature of the CRL, the key usage of its signing certificate and the coherence between the subject names of the CRL signing certificate and the issuer name of the certificate for which the verification of the revocation data is carried out. A dedicated object based on CRLValidity is created and accordingly updated.

Specified by:

buildCRLValidity in interface ICRLUtils

Parameters:

crlBinary - CRLBinary of the CRL to be created (cannot be null)

issuerToken - CertificateToken used to sign the X509CRL (cannot be null)

Returns:

CRLValidity

Throws:

IOException - if an IO error occurred

getRevocationInfo

public X509CRLEntry getRevocationInfo(CRLValidity crlValidity,
 BigInteger serialNumber)

Description copied from interface: ICRLUtils

This method verifies the revocation status for a given serial number

Specified by:

getRevocationInfo in interface ICRLUtils

Parameters:

crlValidity - the CRL Validity

serialNumber - the certificate serial number to search

Returns:

the X509CRLEntry with the revocation date, the reason, or null if the serial number is not found