org.keycloak.authentication.authenticators.x509

Class CertificateValidator.OCSPChecker

java.lang.Object

org.keycloak.authentication.authenticators.x509.CertificateValidator.OCSPChecker

Direct Known Subclasses:

CertificateValidator.BouncyCastleOCSPChecker

Enclosing class:

CertificateValidator

public abstract static class CertificateValidator.OCSPChecker
extends Object

Constructor Summary

Constructors

Constructor and Description
OCSPChecker()

Method Summary

Modifier and Type	Method and Description
abstract OCSPUtils.OCSPRevocationStatus	check(X509Certificate cert, X509Certificate issuerCertificate) Requests certificate revocation status using OCSP.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OCSPChecker

public OCSPChecker()

Method Detail

check

public abstract OCSPUtils.OCSPRevocationStatus check(X509Certificate cert,
                                                     X509Certificate issuerCertificate)
                                              throws CertPathValidatorException

Requests certificate revocation status using OCSP. The OCSP responder URI is obtained from the certificate's AIA extension.

Parameters:

cert - the certificate to be checked

issuerCertificate - The issuer certificate

Returns:

revocation status

Throws:

CertPathValidatorException