org.jasig.cas.adaptors.x509.authentication.handler.support

Class AbstractCRLRevocationChecker

java.lang.Object

org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

All Implemented Interfaces:

RevocationChecker

Direct Known Subclasses:

CRLDistributionPointRevocationChecker, ResourceCRLRevocationChecker

public abstract class AbstractCRLRevocationChecker
extends Object
implements RevocationChecker

Base class for all CRL-based revocation checkers.

Since:

3.4.6

Author:

Marvin S. Addison

Field Summary

Fields

Modifier and Type	Field and Description
protected org.slf4j.Logger	logger Logger instance.

Constructor Summary

Constructors

Constructor and Description
AbstractCRLRevocationChecker()

Method Summary

Methods

Modifier and Type	Method and Description
void	check(X509Certificate cert) Checks the revocation status of the given certificate.
protected abstract X509CRL	getCRL(X509Certificate cert) Gets the CRL for the given certificate.
void	setExpiredCRLPolicy(RevocationPolicy<X509CRL> policy) Sets the policy to apply when CRL data is expired.
void	setUnavailableCRLPolicy(RevocationPolicy<Void> policy) Sets the policy to apply when CRL data is unavailable.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected final org.slf4j.Logger logger

Logger instance.

Constructor Detail

AbstractCRLRevocationChecker

public AbstractCRLRevocationChecker()

Method Detail

check

public void check(X509Certificate cert)
           throws GeneralSecurityException

Checks the revocation status of the given certificate.

Specified by:

check in interface RevocationChecker

Parameters:

cert - Certificate to examine.

Throws:

GeneralSecurityException - If certificate has been revoked or the revocation check fails for some reason such as revocation data not available.

setUnavailableCRLPolicy

public void setUnavailableCRLPolicy(RevocationPolicy<Void> policy)

Sets the policy to apply when CRL data is unavailable.

Parameters:

policy - Revocation policy.

setExpiredCRLPolicy

public void setExpiredCRLPolicy(RevocationPolicy<X509CRL> policy)

Sets the policy to apply when CRL data is expired.

Parameters:

policy - Revocation policy.

getCRL

protected abstract X509CRL getCRL(X509Certificate cert)

Gets the CRL for the given certificate.

Parameters:

cert - Certificate for which the CRL of the issuing CA should be retrieved.

Returns:

CRL for given cert.