org.jasig.cas.adaptors.x509.authentication.handler.support
Class AbstractCRLRevocationChecker

java.lang.Object
  org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

All Implemented Interfaces:

RevocationChecker

Direct Known Subclasses:

CRLDistributionPointRevocationChecker, ResourceCRLRevocationChecker

public abstract class AbstractCRLRevocationChecker
extends Object
implements RevocationChecker

Base class for all CRL-based revocation checkers.

Since:

3.4.6

Version:

$Revision$

Author:

Marvin S. Addison

Field Summary

protected org.apache.commons.logging.Log

log Logger instance

Constructor Summary

AbstractCRLRevocationChecker()

Method Summary

void	check(X509Certificate cert) Checks the revocation status of the given certificate.
protected abstract X509CRL	getCRL(X509Certificate cert) Gets the CRL for the given certificate.
void	setExpiredCRLPolicy(RevocationPolicy<X509CRL> policy) Sets the policy to apply when CRL data is expired.
void	setUnavailableCRLPolicy(RevocationPolicy<Void> policy) Sets the policy to apply when CRL data is unavailable.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected final org.apache.commons.logging.Log log

Logger instance

Constructor Detail

AbstractCRLRevocationChecker

public AbstractCRLRevocationChecker()

Method Detail

check

public void check(X509Certificate cert)
           throws GeneralSecurityException

Checks the revocation status of the given certificate.

Specified by:

check in interface RevocationChecker

Parameters:

cert - Certificate to examine.

Throws:

GeneralSecurityException - If certificate has been revoked or the revocation check fails for some reason such as revocation data not available.

setUnavailableCRLPolicy

public void setUnavailableCRLPolicy(RevocationPolicy<Void> policy)

Sets the policy to apply when CRL data is unavailable.

Parameters:

policy - Revocation policy.

setExpiredCRLPolicy

public void setExpiredCRLPolicy(RevocationPolicy<X509CRL> policy)

Sets the policy to apply when CRL data is expired.

Parameters:

policy - Revocation policy.

getCRL

protected abstract X509CRL getCRL(X509Certificate cert)

Gets the CRL for the given certificate.

Parameters:

cert - Certificate for which the CRL of the issuing CA should be retrieved.

Returns:

CRL for given cert.