org.jasig.cas.adaptors.x509.authentication.handler.support

Class ResourceCRLRevocationChecker

java.lang.Object

org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

All Implemented Interfaces:

RevocationChecker, org.springframework.beans.factory.InitializingBean

public class ResourceCRLRevocationChecker
extends AbstractCRLRevocationChecker
implements org.springframework.beans.factory.InitializingBean

CRL-based revocation checker that uses one or more CRL resources to fetch local or remote CRL data periodically. CRL resources should be supplied for the issuers of all certificates (and intervening certificates for certificate chains) that are expected to be presented to X509CredentialsAuthenticationHandler.

Since:

3.4.7

Author:

Marvin S. Addison

Field Summary

Fields

Modifier and Type	Field and Description
static int	DEFAULT_REFRESH_INTERVAL Default refresh interval is 1 hour.

Fields inherited from class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

checkAll, logger

Constructor Summary

Constructors

Constructor and Description
ResourceCRLRevocationChecker(CRLFetcher fetcher, org.springframework.core.io.Resource[] crls) Instantiates a new Resource cRL revocation checker.
ResourceCRLRevocationChecker(org.springframework.core.io.Resource crl) Creates a new instance using the specified resource for CRL data.
ResourceCRLRevocationChecker(org.springframework.core.io.Resource[] crls) Creates a new instance using the specified resources for CRL data.

Method Summary

Methods

Modifier and Type	Method and Description
protected boolean	addCRL(Object issuer, X509CRL crl) Records the addition of a new CRL entry.
void	afterPropertiesSet() Initializes the process that periodically fetches CRL data.
protected void	finalize()
protected Collection<X509CRL>	getCRLs(X509Certificate cert) Gets the collection of CRLs for the given certificate.
protected CRLFetcher	getFetcher()
protected Set<org.springframework.core.io.Resource>	getResources()
void	setRefreshInterval(int seconds) Sets the interval at which CRL data should be reloaded from CRL resources.

Methods inherited from class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

check, getCRL, setCheckAll, setExpiredCRLPolicy, setUnavailableCRLPolicy

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_REFRESH_INTERVAL

public static final int DEFAULT_REFRESH_INTERVAL

Default refresh interval is 1 hour.

See Also:

Constant Field Values

Constructor Detail

ResourceCRLRevocationChecker

public ResourceCRLRevocationChecker(org.springframework.core.io.Resource crl)

Creates a new instance using the specified resource for CRL data.

Parameters:

crl - Resource containing CRL data. MUST NOT be null.

ResourceCRLRevocationChecker

public ResourceCRLRevocationChecker(org.springframework.core.io.Resource[] crls)

Creates a new instance using the specified resources for CRL data.

Parameters:

crls - Resources containing CRL data. MUST NOT be null and MUST have at least one non-null element.

ResourceCRLRevocationChecker

public ResourceCRLRevocationChecker(CRLFetcher fetcher,
                            org.springframework.core.io.Resource[] crls)

Instantiates a new Resource cRL revocation checker.

Parameters:

fetcher - the fetcher

crls - the crls

Since:

4.1

Method Detail

setRefreshInterval

public void setRefreshInterval(@Min(value=1L)
                      int seconds)

Sets the interval at which CRL data should be reloaded from CRL resources.

Parameters:

seconds - Refresh interval in seconds; MUST be positive integer.

afterPropertiesSet

public void afterPropertiesSet()
                        throws Exception

Initializes the process that periodically fetches CRL data.

Specified by:

afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

Throws:

Exception

getFetcher

protected CRLFetcher getFetcher()

Returns:

Returns the CRL fetcher component.

getResources

protected Set<org.springframework.core.io.Resource> getResources()

addCRL

protected boolean addCRL(Object issuer,
             X509CRL crl)

Description copied from class: AbstractCRLRevocationChecker

Records the addition of a new CRL entry.

Specified by:

addCRL in class AbstractCRLRevocationChecker

Parameters:

issuer - the id of the entry to keep track of

crl - new CRL entry

Returns:

true if the entry was added successfully.

getCRLs

protected Collection<X509CRL> getCRLs(X509Certificate cert)

Description copied from class: AbstractCRLRevocationChecker

Gets the collection of CRLs for the given certificate.

Specified by:

getCRLs in class AbstractCRLRevocationChecker

Parameters:

cert - Certificate for which the CRL of the issuing CA should be retrieved.

Returns:

CRLs for given cert.

finalize

protected void finalize()
                 throws Throwable

Overrides:

finalize in class Object

Throws:

Throwable