org.jasig.cas.adaptors.x509.authentication.handler.support
Class CRLDistributionPointRevocationChecker

java.lang.Object
  org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker
      org.jasig.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

All Implemented Interfaces:

RevocationChecker

public class CRLDistributionPointRevocationChecker
extends AbstractCRLRevocationChecker

Performs CRL-based revocation checking by consulting resources defined in the CRLDistributionPoints extension field on the certificate. Although RFC 2459 allows the distribution point name to have arbitrary meaning, this class expects the name to define an absolute URL, which is the most common implementation. This implementation caches CRL resources fetched from remote URLs to improve performance by avoiding CRL fetching on every revocation check.

Since:

3.4.6

Version:

$Revision$

Author:

Marvin S. Addison

Field Summary

Fields inherited from class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

log

Constructor Summary

CRLDistributionPointRevocationChecker(net.sf.ehcache.Cache crlCache)
Creates a new instance that uses the given cache instance for CRL caching.

Method Summary

protected X509CRL

getCRL(X509Certificate cert) Gets the CRL for the given certificate.

Methods inherited from class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

check, setExpiredCRLPolicy, setUnavailableCRLPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CRLDistributionPointRevocationChecker

public CRLDistributionPointRevocationChecker(net.sf.ehcache.Cache crlCache)

Creates a new instance that uses the given cache instance for CRL caching.

Parameters:

crlCache - Cache for CRL data.

Method Detail

getCRL

protected X509CRL getCRL(X509Certificate cert)

Description copied from class: AbstractCRLRevocationChecker

Gets the CRL for the given certificate.

Specified by:

getCRL in class AbstractCRLRevocationChecker

Parameters:

cert - Certificate for which the CRL of the issuing CA should be retrieved.

Returns:

CRL for given cert.

See Also:

AbstractCRLRevocationChecker.getCRL(X509Certificate)