Package org.keycloak.authentication.authenticators.x509

Class CertificateValidator.BouncyCastleOCSPChecker

java.lang.Object

org.keycloak.authentication.authenticators.x509.CertificateValidator.OCSPChecker

org.keycloak.authentication.authenticators.x509.CertificateValidator.BouncyCastleOCSPChecker

Enclosing class:

CertificateValidator

public static class CertificateValidator.BouncyCastleOCSPChecker
extends CertificateValidator.OCSPChecker

Method Summary

Modifier and Type	Method	Description
OCSPProvider.OCSPRevocationStatus	check(X509Certificate cert, X509Certificate issuerCertificate)	Requests certificate revocation status using OCSP.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

check

public OCSPProvider.OCSPRevocationStatus check(X509Certificate cert,
 X509Certificate issuerCertificate)
                                        throws CertPathValidatorException

Description copied from class: CertificateValidator.OCSPChecker

Requests certificate revocation status using OCSP. The OCSP responder URI is obtained from the certificate's AIA extension.

Specified by:

check in class CertificateValidator.OCSPChecker

Parameters:

cert - the certificate to be checked

issuerCertificate - The issuer certificate

Returns:

revocation status

Throws:

CertPathValidatorException