org.jasig.cas.adaptors.x509.authentication.handler.support

Class ResourceCRLRevocationChecker

java.lang.Object

org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

All Implemented Interfaces:

RevocationChecker, org.springframework.beans.factory.InitializingBean

public class ResourceCRLRevocationChecker
extends AbstractCRLRevocationChecker
implements org.springframework.beans.factory.InitializingBean

CRL-based revocation checker that uses one or more CRL resources to fetch local or remote CRL data periodically. CRL resources should be supplied for the issuers of all certificates (and intervening certificates for certificate chains) that are expected to be presented to X509CredentialsAuthenticationHandler.

Since:

3.4.7

Author:

Marvin S. Addison

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected class	ResourceCRLRevocationChecker.CRLFetcher Handles details of fetching CRL data from resources.

Field Summary

Fields

Modifier and Type	Field and Description
static int	DEFAULT_REFRESH_INTERVAL Default refresh interval is 1 hour.

Fields inherited from class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

logger

Constructor Summary

Constructors

Constructor and Description
ResourceCRLRevocationChecker(org.springframework.core.io.Resource crl) Creates a new instance using the specified resource for CRL data.
ResourceCRLRevocationChecker(org.springframework.core.io.Resource[] crls) Creates a new instance using the specified resources for CRL data.

Method Summary

Methods

Modifier and Type	Method and Description
protected void	addCrl(X509CRL crl) Adds the given CRL to the collection of CRLs held by this class.
void	afterPropertiesSet() Initializes the process that periodically fetches CRL data.
protected void	finalize()
protected X509CRL	getCRL(X509Certificate cert) Gets the CRL for the given certificate.
protected ResourceCRLRevocationChecker.CRLFetcher	getFetcher()
void	setRefreshInterval(int seconds) Sets the interval at which CRL data should be reloaded from CRL resources.

Methods inherited from class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

check, setExpiredCRLPolicy, setUnavailableCRLPolicy

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_REFRESH_INTERVAL

public static final int DEFAULT_REFRESH_INTERVAL

Default refresh interval is 1 hour.

See Also:

Constant Field Values

Constructor Detail

ResourceCRLRevocationChecker

public ResourceCRLRevocationChecker(org.springframework.core.io.Resource crl)

Creates a new instance using the specified resource for CRL data.

Parameters:

crl - Resource containing CRL data. MUST NOT be null.

ResourceCRLRevocationChecker

public ResourceCRLRevocationChecker(org.springframework.core.io.Resource[] crls)

Creates a new instance using the specified resources for CRL data.

Parameters:

crls - Resources containing CRL data. MUST NOT be null and MUST have at least one non-null element.

Method Detail

setRefreshInterval

public void setRefreshInterval(int seconds)

Sets the interval at which CRL data should be reloaded from CRL resources.

Parameters:

seconds - Refresh interval in seconds; MUST be positive integer.

afterPropertiesSet

public void afterPropertiesSet()
                        throws Exception

Initializes the process that periodically fetches CRL data.

Specified by:

afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

Throws:

Exception

getFetcher

protected ResourceCRLRevocationChecker.CRLFetcher getFetcher()

Returns:

Returns the CRL fetcher component.

addCrl

protected void addCrl(X509CRL crl)

Adds the given CRL to the collection of CRLs held by this class.

Parameters:

crl - The crl to add

getCRL

protected X509CRL getCRL(X509Certificate cert)

Gets the CRL for the given certificate.

Specified by:

getCRL in class AbstractCRLRevocationChecker

Parameters:

cert - Certificate for which the CRL of the issuing CA should be retrieved.

Returns:

CRL for given cert.

See Also:

AbstractCRLRevocationChecker.getCRL(X509Certificate)

finalize

protected void finalize()
                 throws Throwable

Overrides:

finalize in class Object

Throws:

Throwable