org.dihedron.crypto.crl

Class CRL

java.lang.Object

org.dihedron.crypto.crl.CRL

@License(copyright="Copyright (c) 2012-2014 Andrea Funto\', Svetlin Nakov")
public class CRL
extends Object

Class that verifies CRLs for given X509 certificate. Extracts the CRL distribution points from the certificate (if available) and checks the certificate revocation status against the CRLs coming from the distribution points. Supports HTTP, HTTPS, FTP and LDAP based URLs.

Author:

Svetlin Nakov, Andrea Funto'

Constructor Summary

Constructors

Constructor and Description
CRL()

Method Summary

Methods

Modifier and Type	Method and Description
static X509CRL	fromLDAP(String ldapURL) Downloads a CRL from given LDAP url, e.g.
static X509CRL	fromURL(String url) Downloads the CRL from the given URL.
static X509CRL	fromWeb(String crlURL) Downloads a CRL from given HTTP/HTTPS/FTP URL, e.g.
static List<String>	getCrlDistributionPoints(X509Certificate certificate) Extracts all CRL distribution point URLs from the "CRL Distribution Point" extension in a X.509 certificate.
static void	verifyCertificateCRLs(X509Certificate certificate) Extracts the CRL distribution points from the certificate (if available) and checks the certificate revocation status against the CRLs coming from the distribution points.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CRL

public CRL()

Method Detail

fromURL

public static X509CRL fromURL(String url)
                       throws IOException,
                              CertificateException,
                              CRLException,
                              CertificateVerificationException,
                              NamingException

Downloads the CRL from the given URL. Supports http, https, ftp and ldap based URLs.

Throws:

IOException

CertificateException

CRLException

CertificateVerificationException

NamingException

fromLDAP

public static X509CRL fromLDAP(String ldapURL)
                        throws CertificateException,
                               NamingException,
                               CRLException,
                               CertificateVerificationException,
                               IOException

Downloads a CRL from given LDAP url, e.g. ldap://ldap.infonotary.com/dc=identity-ca,dc=infonotary,dc=com

Throws:

IOException

CertificateException

NamingException

CRLException

CertificateVerificationException

fromWeb

public static X509CRL fromWeb(String crlURL)
                       throws MalformedURLException,
                              IOException,
                              CertificateException,
                              CRLException

Downloads a CRL from given HTTP/HTTPS/FTP URL, e.g. http://crl.infonotary.com/crl/identity-ca.crl

Throws:

MalformedURLException

IOException

CertificateException

CRLException

verifyCertificateCRLs

public static void verifyCertificateCRLs(X509Certificate certificate)
                                  throws CertificateVerificationException

Extracts the CRL distribution points from the certificate (if available) and checks the certificate revocation status against the CRLs coming from the distribution points. Supports HTTP, HTTPS, FTP and LDAP based URLs.

Parameters:

certificate - the certificate to be checked for revocation.

Throws:

CertificateVerificationException - if the certificate is revoked.

getCrlDistributionPoints

public static List<String> getCrlDistributionPoints(X509Certificate certificate)
                                             throws CertificateParsingException,
                                                    IOException

Extracts all CRL distribution point URLs from the "CRL Distribution Point" extension in a X.509 certificate. If CRL distribution point extension is unavailable, returns an empty list.

Throws:

CertificateParsingException

IOException