Package com.itextpdf.signatures
Class CRLVerifier
java.lang.Object
com.itextpdf.signatures.CertificateVerifier
com.itextpdf.signatures.RootStoreVerifier
com.itextpdf.signatures.CRLVerifier
Deprecated.
Class that allows you to verify a certificate against
one or more Certificate Revocation Lists.
-
Field Summary
FieldsModifier and TypeFieldDescriptionDeprecated.The list of CRLs to check for revocation date.protected static final org.slf4j.Logger
Deprecated.The Logger instanceFields inherited from class com.itextpdf.signatures.RootStoreVerifier
rootStore
Fields inherited from class com.itextpdf.signatures.CertificateVerifier
onlineCheckingAllowed, verifier
-
Constructor Summary
ConstructorsConstructorDescriptionCRLVerifier
(CertificateVerifier verifier, List<X509CRL> crls) Deprecated.Creates a CRLVerifier instance. -
Method Summary
Modifier and TypeMethodDescriptiongetCRL
(X509Certificate signCert, X509Certificate issuerCert) Deprecated.Fetches a CRL for a specific certificate online (without further checking).boolean
isSignatureValid
(X509CRL crl, X509Certificate crlIssuer) Deprecated.Checks if a CRL verifies against the issuer certificate or a trusted anchor.verify
(X509Certificate signCert, X509Certificate issuerCert, Date signDate) Deprecated.Verifies whether a valid CRL is found for the certificate.boolean
verify
(X509CRL crl, X509Certificate signCert, X509Certificate issuerCert, Date signDate) Deprecated.Verifies a certificate against a single CRL.Methods inherited from class com.itextpdf.signatures.RootStoreVerifier
setRootStore
Methods inherited from class com.itextpdf.signatures.CertificateVerifier
setOnlineCheckingAllowed
-
Field Details
-
LOGGER
protected static final org.slf4j.Logger LOGGERDeprecated.The Logger instance -
crls
Deprecated.The list of CRLs to check for revocation date.
-
-
Constructor Details
-
CRLVerifier
Deprecated.Creates a CRLVerifier instance.- Parameters:
verifier
- the next verifier in the chaincrls
- a list of CRLs
-
-
Method Details
-
verify
public List<VerificationOK> verify(X509Certificate signCert, X509Certificate issuerCert, Date signDate) throws GeneralSecurityException Deprecated.Verifies whether a valid CRL is found for the certificate. If this method returns false, it doesn't mean the certificate isn't valid. It means we couldn't verify it against any CRL that was available.- Overrides:
verify
in classRootStoreVerifier
- Parameters:
signCert
- the certificate that needs to be checkedissuerCert
- its issuersignDate
- the date the certificate needs to be valid- Returns:
- a list of
VerificationOK
objects. The list will be empty if the certificate couldn't be verified. - Throws:
GeneralSecurityException
- thrown if the certificate has expired, isn't valid yet, or if an exception has been thrown inCertificate#verify
.- See Also:
-
verify
public boolean verify(X509CRL crl, X509Certificate signCert, X509Certificate issuerCert, Date signDate) throws GeneralSecurityException Deprecated.Verifies a certificate against a single CRL.- Parameters:
crl
- the Certificate Revocation ListsignCert
- a certificate that needs to be verifiedissuerCert
- its issuersignDate
- the sign date- Returns:
- true if the verification succeeded
- Throws:
GeneralSecurityException
- thrown when certificate has been revoked
-
getCRL
Deprecated.Fetches a CRL for a specific certificate online (without further checking).- Parameters:
signCert
- the certificateissuerCert
- its issuer left for backwards compatibility- Returns:
- an X509CRL object.
-
isSignatureValid
Deprecated.Checks if a CRL verifies against the issuer certificate or a trusted anchor.- Parameters:
crl
- the CRLcrlIssuer
- the trusted anchor- Returns:
- true if the CRL can be trusted
-
CRLValidator
should be used instead.