org.openeuler.sun.security.ssl

类 StatusResponseManager

java.lang.Object

org.openeuler.sun.security.ssl.StatusResponseManager

final class StatusResponseManager
extends Object

嵌套类概要

嵌套类

限定符和类型	类和说明
(专用程序包) class	StatusResponseManager.OCSPFetchCall Inner Callable class that does the actual work of looking up OCSP responses, first looking at the cache and doing OCSP requests if a cache miss occurs.
(专用程序包) class	StatusResponseManager.ResponseCacheEntry Static nested class used as the data kept in the response cache.
(专用程序包) static class	StatusResponseManager.StaplingParameters Inner class used to hold stapling parameters needed by the handshaker when stapling is active.
(专用程序包) class	StatusResponseManager.StatusInfo Inner class used to group request and response data.

字段概要

字段

限定符和类型	字段和说明
private int	cacheCapacity
private int	cacheLifetime
private static int	DEFAULT_CACHE_LIFETIME
private static int	DEFAULT_CACHE_SIZE
private static int	DEFAULT_CORE_THREADS
private URI	defaultResponder
private boolean	ignoreExtensions
private sun.security.util.Cache<sun.security.provider.certpath.CertId,StatusResponseManager.ResponseCacheEntry>	responseCache
private boolean	respOverride
private ScheduledThreadPoolExecutor	threadMgr

构造器概要

构造器

构造器和说明
StatusResponseManager() Create a StatusResponseManager with default parameters.

方法概要

限定符和类型	方法和说明
(专用程序包) void	clear() Clear the status response cache
(专用程序包) Map<X509Certificate,byte[]>	get(CertStatusExtension.CertStatusRequestType type, CertStatusExtension.CertStatusRequest request, X509Certificate[] chain, long delay, TimeUnit unit) Get a list of responses for a chain of certificates.
(专用程序包) int	getCacheCapacity() Get the current maximum cache size.
(专用程序包) int	getCacheLifetime() Get the current cache lifetime setting
(专用程序包) URI	getDefaultResponder() Get the default OCSP responder URI, if previously set.
private StatusResponseManager.ResponseCacheEntry	getFromCache(sun.security.provider.certpath.CertId cid, CertStatusExtension.OCSPStatusRequest ocspRequest) Check the cache for a given CertId.
(专用程序包) boolean	getIgnoreExtensions() Get the ignore extensions setting.
(专用程序包) URI	getURI(X509Certificate cert) Obtain the URI use by the StatusResponseManager during lookups.
(专用程序包) boolean	getURIOverride() Get the URI override setting
(专用程序包) static StatusResponseManager.StaplingParameters	processStapling(ServerHandshakeContext shc)
(专用程序包) void	shutdown() Shutdown the thread pool
(专用程序包) int	size() Returns the number of currently valid objects in the response cache.
String	toString()

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

字段详细资料

DEFAULT_CORE_THREADS

private static final int DEFAULT_CORE_THREADS

另请参阅:

常量字段值

DEFAULT_CACHE_SIZE

private static final int DEFAULT_CACHE_SIZE

另请参阅:

常量字段值

DEFAULT_CACHE_LIFETIME

private static final int DEFAULT_CACHE_LIFETIME

另请参阅:

常量字段值

threadMgr

private final ScheduledThreadPoolExecutor threadMgr

responseCache

private final sun.security.util.Cache<sun.security.provider.certpath.CertId,StatusResponseManager.ResponseCacheEntry> responseCache

defaultResponder

private final URI defaultResponder

respOverride

private final boolean respOverride

cacheCapacity

private final int cacheCapacity

cacheLifetime

private final int cacheLifetime

ignoreExtensions

private final boolean ignoreExtensions

构造器详细资料

StatusResponseManager

StatusResponseManager()

Create a StatusResponseManager with default parameters.

方法详细资料

getCacheLifetime

int getCacheLifetime()

Get the current cache lifetime setting

返回:

the current cache lifetime value

getCacheCapacity

int getCacheCapacity()

Get the current maximum cache size.

返回:

the current maximum cache size

getDefaultResponder

URI getDefaultResponder()

Get the default OCSP responder URI, if previously set.

返回:

the current default OCSP responder URI, or null if it has not been set.

getURIOverride

boolean getURIOverride()

Get the URI override setting

返回:

true if URI override has been set, false otherwise.

getIgnoreExtensions

boolean getIgnoreExtensions()

Get the ignore extensions setting.

返回:

true if the StatusResponseManager will not pass OCSP Extensions in the TLS status_request[_v2] extensions, false if extensions will be passed (the default).

clear

void clear()

Clear the status response cache

size

int size()

Returns the number of currently valid objects in the response cache.

返回:

the number of valid objects in the response cache.

getURI

URI getURI(X509Certificate cert)

Obtain the URI use by the StatusResponseManager during lookups. This method takes into account not only the AIA extension from a certificate to be checked, but also any default URI and possible override settings for the response manager.

参数:

cert - the subject to get the responder URI from

返回:

a URI containing the address to the OCSP responder, or null if no AIA extension exists in the certificate and no default responder has been configured.

抛出:

NullPointerException - if cert is null.

shutdown

void shutdown()

Shutdown the thread pool

get

Map<X509Certificate,byte[]> get(CertStatusExtension.CertStatusRequestType type,
                                CertStatusExtension.CertStatusRequest request,
                                X509Certificate[] chain,
                                long delay,
                                TimeUnit unit)

Get a list of responses for a chain of certificates. This will find OCSP responses from the cache, or failing that, directly contact the OCSP responder. It is assumed that the certificates in the provided chain are in their proper order (from end-entity to trust anchor).

参数:

type - the type of request being made of the StatusResponseManager

request - the CertStatusRequest from the status_request or status_request_v2 ClientHello extension. A value of null is interpreted as providing no responder IDs or extensions.

chain - an array of 2 or more certificates. Each certificate must be issued by the next certificate in the chain.

delay - the number of time units to delay before returning responses.

unit - the unit of time applied to the delay parameter

返回:

an unmodifiable Map containing the certificate and its usually

抛出:

SSLHandshakeException - if an unsupported CertStatusRequest is provided.

getFromCache

private StatusResponseManager.ResponseCacheEntry getFromCache(sun.security.provider.certpath.CertId cid,
                                                              CertStatusExtension.OCSPStatusRequest ocspRequest)

Check the cache for a given CertId.

参数:

cid - the CertId of the response to look up

ocspRequest - the OCSP request structure sent by the client in the TLS status_request[_v2] hello extension.

返回:

the ResponseCacheEntry for a specific CertId, or null if it is not found or a nonce extension has been requested by the caller.

toString

public String toString()

覆盖:

toString 在类中 Object

processStapling

static final StatusResponseManager.StaplingParameters processStapling(ServerHandshakeContext shc)