code.ponfee.commons.jce.cert

类 CertSignedVerifier

java.lang.Object

code.ponfee.commons.jce.cert.CertSignedVerifier

直接已知子类:

CertPKCS1Verifier, CertPKCS7Verifier

public abstract class CertSignedVerifier
extends Object

证书验签（template method patterns）

作者:

Ponfee

字段概要

字段

限定符和类型	字段和说明
protected X509CRL	crl
protected byte[]	info
protected X509Certificate	rootCert
protected List<byte[]>	signedInfos
protected X509Certificate[]	subjects

构造器概要

构造器

限定符	构造器和说明
protected	CertSignedVerifier(X509Certificate rootCert, X509CRL crl, byte[] info)

方法概要

限定符和类型	方法和说明
byte[]	getInfo()
List<byte[]>	getSignedInfo()
X509Certificate[]	getSubjects()
void	setVerifySigned(boolean verifySigned)
void	verify() 根据加载的根证进行证书验证
static void	verifyCertDate(X509Certificate subject) 校验证书是否过期
static void	verifyCrlRevoke(X509Certificate subject, X509CRL crl) 校验是否已被吊销
static void	verifyIssuingSign(X509Certificate subject, X509Certificate root) 校验是否由指定根证签发
abstract void	verifySigned() 验证签名

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

rootCert

protected final X509Certificate rootCert

crl

protected final X509CRL crl

info

protected final byte[] info

signedInfos

protected final List<byte[]> signedInfos

subjects

protected X509Certificate[] subjects

构造器详细资料

CertSignedVerifier

protected CertSignedVerifier(X509Certificate rootCert,
                             X509CRL crl,
                             byte[] info)

方法详细资料

verify

public final void verify()

根据加载的根证进行证书验证

verifySigned

public abstract void verifySigned()

验证签名

verifyCertDate

public static void verifyCertDate(X509Certificate subject)

校验证书是否过期

参数:

subject -

verifyIssuingSign

public static void verifyIssuingSign(X509Certificate subject,
                                     X509Certificate root)

校验是否由指定根证签发

参数:

subject -

root -

verifyCrlRevoke

public static void verifyCrlRevoke(X509Certificate subject,
                                   X509CRL crl)

校验是否已被吊销

参数:

subject -

crl -

getSubjects

public X509Certificate[] getSubjects()

getInfo

public byte[] getInfo()

getSignedInfo

public List<byte[]> getSignedInfo()

setVerifySigned

public void setVerifySigned(boolean verifySigned)