org.jasig.cas.adaptors.x509.authentication.handler.support
Class ThresholdExpiredCRLRevocationPolicy

java.lang.Object
  org.jasig.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

All Implemented Interfaces:

RevocationPolicy<X509CRL>

public final class ThresholdExpiredCRLRevocationPolicy
extends Object
implements RevocationPolicy<X509CRL>

Implements a policy to handle expired CRL data whereby expired data is permitted up to a threshold period of time but not afterward.

Since:

3.4.6

Version:

$Revision$

Author:

Marvin S. Addison

Constructor Summary

ThresholdExpiredCRLRevocationPolicy()

Method Summary

void	apply(X509CRL crl) The CRL next update time is compared against the current time with the threshold applied and rejected if and only if the next update time is in the past.
void	setThreshold(int threshold) Sets the threshold period of time after which expired CRL data is rejected.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ThresholdExpiredCRLRevocationPolicy

public ThresholdExpiredCRLRevocationPolicy()

Method Detail

apply

public void apply(X509CRL crl)
           throws GeneralSecurityException

The CRL next update time is compared against the current time with the threshold applied and rejected if and only if the next update time is in the past.

Specified by:

apply in interface RevocationPolicy<X509CRL>

Parameters:

crl - CRL instance to evaluate.

Throws:

ExpiredCRLException - On expired CRL data.

GeneralSecurityException - When policy application poses a security risk or policy application is prevented for security reasons.

See Also:

RevocationPolicy.apply(java.lang.Object)

setThreshold

public void setThreshold(int threshold)

Sets the threshold period of time after which expired CRL data is rejected.

Parameters:

threshold - Number of seconds; MUST be non-negative integer.