org.jasig.cas.adaptors.x509.authentication.handler.support

Class AbstractCRLRevocationChecker

java.lang.Object

org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

All Implemented Interfaces:

RevocationChecker

Direct Known Subclasses:

CRLDistributionPointRevocationChecker, ResourceCRLRevocationChecker

public abstract class AbstractCRLRevocationChecker
extends Object
implements RevocationChecker

Base class for all CRL-based revocation checkers.

Since:

3.4.6

Author:

Marvin S. Addison

Field Summary

Fields

Modifier and Type	Field and Description
protected boolean	checkAll Flag to indicate whether all crls should be checked for the cert resource.
protected org.slf4j.Logger	logger Logger instance.

Constructor Summary

Constructors

Constructor and Description
AbstractCRLRevocationChecker()

Method Summary

Methods

Modifier and Type	Method and Description
protected abstract boolean	addCRL(Object id, X509CRL crl) Records the addition of a new CRL entry.
void	check(X509Certificate cert) Checks the revocation status of the given certificate.
X509CRL	getCRL(X509Certificate cert) Gets the first fetched CRL for the given certificate.
protected abstract Collection<X509CRL>	getCRLs(X509Certificate cert) Gets the collection of CRLs for the given certificate.
void	setCheckAll(boolean checkAll) Indicates whether all resources should be checked, or revocation should stop at the first resource that produces the cert.
void	setExpiredCRLPolicy(RevocationPolicy<X509CRL> policy) Sets the policy to apply when CRL data is expired.
void	setUnavailableCRLPolicy(RevocationPolicy<Void> policy) Sets the policy to apply when CRL data is unavailable.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected final org.slf4j.Logger logger

Logger instance.

checkAll

protected boolean checkAll

Flag to indicate whether all crls should be checked for the cert resource. Defaults to false.

Constructor Detail

AbstractCRLRevocationChecker

public AbstractCRLRevocationChecker()

Method Detail

check

public void check(X509Certificate cert)
           throws GeneralSecurityException

Checks the revocation status of the given certificate.

Specified by:

check in interface RevocationChecker

Parameters:

cert - Certificate to examine.

Throws:

GeneralSecurityException - If certificate has been revoked or the revocation check fails for some reason such as revocation data not available.

setUnavailableCRLPolicy

public void setUnavailableCRLPolicy(RevocationPolicy<Void> policy)

Sets the policy to apply when CRL data is unavailable.

Parameters:

policy - Revocation policy.

setExpiredCRLPolicy

public void setExpiredCRLPolicy(RevocationPolicy<X509CRL> policy)

Sets the policy to apply when CRL data is expired.

Parameters:

policy - Revocation policy.

setCheckAll

public final void setCheckAll(boolean checkAll)

Indicates whether all resources should be checked, or revocation should stop at the first resource that produces the cert.

Parameters:

checkAll - the check all

getCRL

public final X509CRL getCRL(X509Certificate cert)

Gets the first fetched CRL for the given certificate.

Parameters:

cert - Certificate for which the CRL of the issuing CA should be retrieved.

Returns:

CRL for given cert, or null

addCRL

protected abstract boolean addCRL(Object id,
             X509CRL crl)

Records the addition of a new CRL entry.

Parameters:

id - the id of the entry to keep track of

crl - new CRL entry

Returns:

true if the entry was added successfully.

Since:

4.1

getCRLs

protected abstract Collection<X509CRL> getCRLs(X509Certificate cert)

Gets the collection of CRLs for the given certificate.

Parameters:

cert - Certificate for which the CRL of the issuing CA should be retrieved.

Returns:

CRLs for given cert.