org.xipki.ocsp.client.shell

Class Actions.BaseOcspStatusAction

java.lang.Object

org.xipki.shell.XiAction

org.xipki.ocsp.client.shell.Actions.CommonOcspStatusAction

org.xipki.ocsp.client.shell.Actions.BaseOcspStatusAction

All Implemented Interfaces:

org.apache.karaf.shell.api.action.Action

Direct Known Subclasses:

Actions.OcspStatus

Enclosing class:

Actions

public abstract static class Actions.BaseOcspStatusAction
extends Actions.CommonOcspStatusAction

Field Summary

Fields

Modifier and Type	Field and Description
protected static Map<org.bouncycastle.asn1.ASN1ObjectIdentifier,String>	EXTENSION_OIDNAME_MAP
protected Boolean	verbose

Fields inherited from class org.xipki.ocsp.client.shell.Actions.CommonOcspStatusAction

allowNoNonceInResponse, hashAlgo, issuerCertFile, nonceLen, prefSigAlgs, signRequest, useHttpGetForSmallRequest, usenonce

Fields inherited from class org.xipki.shell.XiAction

session

Constructor Summary

Constructors

Constructor and Description
BaseOcspStatusAction()

Method Summary

Modifier and Type	Method and Description
protected abstract void	checkParameters(X509Certificate respIssuer, List<BigInteger> serialNumbers, Map<BigInteger,byte[]> encodedCerts) Check whether the parameters are valid.
protected Object	execute0()
static List<String>	extractOcspUrls(org.bouncycastle.asn1.x509.AuthorityInformationAccess aia)
static List<String>	extractOcspUrls(org.bouncycastle.cert.X509AttributeCertificateHolder cert)
static List<String>	extractOcspUrls(X509Certificate cert)
protected abstract void	processResponse(org.bouncycastle.cert.ocsp.OCSPResp response, X509Certificate respIssuer, org.xipki.security.IssuerHash issuerHash, List<BigInteger> serialNumbers, Map<BigInteger,byte[]> encodedCerts) Check whether the response has the expected issuer, certificate serial numbers and for the given encoded certificates.

Methods inherited from class org.xipki.ocsp.client.shell.Actions.CommonOcspStatusAction

getRequestOptions

Methods inherited from class org.xipki.shell.XiAction

confirm, derPemEncode, embedFileContent, encodeCert, encodeCrl, encodeCsr, execute, expandFilepath, expandFilepath, isBlank, isEmpty, isEnabled, isNotBlank, isNotEmpty, isTrue, print, println, readPassword, readPassword, readPasswordIfNotSet, readPasswordIfNotSet, readPrompt, save, save, saveVerbose, saveVerbose, split, toBigInt, toBigInt

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

EXTENSION_OIDNAME_MAP

protected static final Map<org.bouncycastle.asn1.ASN1ObjectIdentifier,String> EXTENSION_OIDNAME_MAP

verbose

protected Boolean verbose

Constructor Detail

BaseOcspStatusAction

public BaseOcspStatusAction()

Method Detail

checkParameters

protected abstract void checkParameters(X509Certificate respIssuer,
                                        List<BigInteger> serialNumbers,
                                        Map<BigInteger,byte[]> encodedCerts)
                                 throws Exception

Check whether the parameters are valid.

Parameters:

respIssuer - Expected responder issuer. Could be null.

serialNumbers - Expected serial numbers. Must not be null.

encodedCerts - Map of serial number and the corresponding certificate. Could be null.

Throws:

Exception - if checking failed.

processResponse

protected abstract void processResponse(org.bouncycastle.cert.ocsp.OCSPResp response,
                                        X509Certificate respIssuer,
                                        org.xipki.security.IssuerHash issuerHash,
                                        List<BigInteger> serialNumbers,
                                        Map<BigInteger,byte[]> encodedCerts)
                                 throws Exception

Check whether the response has the expected issuer, certificate serial numbers and for the given encoded certificates.

Parameters:

response - OCSP response. Must not be null.

respIssuer - Expected responder issuer. Could be null.

issuerHash - Expected issuer hash. Must not be null.

serialNumbers - Expected serial numbers. Must not be null.

encodedCerts - Map of serial number and the corresponding certificate. Could be null.

Throws:

Exception - if processing response failed.

execute0

protected final Object execute0()
                         throws Exception

Specified by:

execute0 in class org.xipki.shell.XiAction

Throws:

Exception

extractOcspUrls

public static List<String> extractOcspUrls(X509Certificate cert)
                                    throws CertificateEncodingException

Throws:

CertificateEncodingException

extractOcspUrls

public static List<String> extractOcspUrls(org.bouncycastle.cert.X509AttributeCertificateHolder cert)
                                    throws CertificateEncodingException

Throws:

CertificateEncodingException

extractOcspUrls

public static List<String> extractOcspUrls(org.bouncycastle.asn1.x509.AuthorityInformationAccess aia)
                                    throws CertificateEncodingException

Throws:

CertificateEncodingException