org.jasig.cas.adaptors.x509.authentication.handler.support

Class CRLDistributionPointRevocationChecker

java.lang.Object

org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

org.jasig.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

All Implemented Interfaces:

RevocationChecker

public class CRLDistributionPointRevocationChecker
extends AbstractCRLRevocationChecker

Performs CRL-based revocation checking by consulting resources defined in the CRLDistributionPoints extension field on the certificate. Although RFC 2459 allows the distribution point name to have arbitrary meaning, this class expects the name to define an absolute URL, which is the most common implementation. This implementation caches CRL resources fetched from remote URLs to improve performance by avoiding CRL fetching on every revocation check.

Since:

3.4.6

Author:

Marvin S. Addison

Field Summary

Fields inherited from class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

logger

Constructor Summary

Constructors

Constructor and Description
CRLDistributionPointRevocationChecker(net.sf.ehcache.Cache crlCache) Creates a new instance that uses the given cache instance for CRL caching.

Method Summary

Methods

Modifier and Type	Method and Description
protected X509CRL	getCRL(X509Certificate cert) Gets the CRL for the given certificate.

Methods inherited from class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

check, setExpiredCRLPolicy, setUnavailableCRLPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CRLDistributionPointRevocationChecker

public CRLDistributionPointRevocationChecker(net.sf.ehcache.Cache crlCache)

Creates a new instance that uses the given cache instance for CRL caching.

Parameters:

crlCache - Cache for CRL data.

Method Detail

getCRL

protected X509CRL getCRL(X509Certificate cert)

Gets the CRL for the given certificate.

Specified by:

getCRL in class AbstractCRLRevocationChecker

Parameters:

cert - Certificate for which the CRL of the issuing CA should be retrieved.

Returns:

CRL for given cert.

See Also:

AbstractCRLRevocationChecker.getCRL(X509Certificate)