org.keycloak.authentication.authenticators.x509

Class CertificateValidator.BouncyCastleOCSPChecker

java.lang.Object

org.keycloak.authentication.authenticators.x509.CertificateValidator.OCSPChecker

org.keycloak.authentication.authenticators.x509.CertificateValidator.BouncyCastleOCSPChecker

Enclosing class:

CertificateValidator

public static class CertificateValidator.BouncyCastleOCSPChecker
extends CertificateValidator.OCSPChecker

Method Summary

Modifier and Type	Method and Description
OCSPUtils.OCSPRevocationStatus	check(X509Certificate cert, X509Certificate issuerCertificate) Requests certificate revocation status using OCSP.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

check

public OCSPUtils.OCSPRevocationStatus check(X509Certificate cert,
                                            X509Certificate issuerCertificate)
                                     throws CertPathValidatorException

Description copied from class: CertificateValidator.OCSPChecker

Requests certificate revocation status using OCSP. The OCSP responder URI is obtained from the certificate's AIA extension.

Specified by:

check in class CertificateValidator.OCSPChecker

Parameters:

cert - the certificate to be checked

issuerCertificate - The issuer certificate

Returns:

revocation status

Throws:

CertPathValidatorException