Module jpms_dss_validation

Package eu.europa.esig.dss.validation.process.bbb.xcv.rac.checks

Class RevocationConsistentCheck<T extends eu.europa.esig.dss.detailedreport.jaxb.XmlConstraintsConclusion>

java.lang.Object

eu.europa.esig.dss.validation.process.ChainItem<T>

eu.europa.esig.dss.validation.process.bbb.xcv.rac.checks.RevocationConsistentCheck<T>

Type Parameters:

T - XmlConstraintsConclusion

public class RevocationConsistentCheck<T extends eu.europa.esig.dss.detailedreport.jaxb.XmlConstraintsConclusion>
extends ChainItem<T>

Checks if the revocation is consistent and can be used for the given certificate

Field Summary

Fields

Modifier and Type	Field	Description
protected boolean	certHashOK	Defines if certHash matches
protected final eu.europa.esig.dss.diagnostic.CertificateWrapper	certificate	The certificate in question
protected Date	certNotAfter	Certificate's NotAfter
protected Date	certNotBefore	Certificate's NotBefore
protected Date	notAfterRevoc	Defines date after which the revocation issuer ensure the revocation is contained for the certificate
protected Date	producedAt	ProducedAt time of the revocation
protected final eu.europa.esig.dss.diagnostic.RevocationWrapper	revocationData	Revocation data to check
protected Date	thisUpdate	ThisUpdate of the revocation

Fields inherited from class eu.europa.esig.dss.validation.process.ChainItem

i18nProvider

Constructor Summary

Constructors

Constructor	Description
RevocationConsistentCheck(eu.europa.esig.dss.i18n.I18nProvider i18nProvider, T result, eu.europa.esig.dss.diagnostic.CertificateWrapper certificate, eu.europa.esig.dss.diagnostic.RevocationWrapper revocationData, eu.europa.esig.dss.policy.jaxb.LevelConstraint constraint)	Default constructor

Method Summary

Modifier and Type	Method	Description
protected String	buildAdditionalInfo()	Builds an additional information
protected eu.europa.esig.dss.detailedreport.jaxb.XmlBlockType	getBlockType()	Returns the validating block type (used for validation result of RAC, RFC, etc.)
protected eu.europa.esig.dss.i18n.MessageTag	getErrorMessageTag()	Returns an i18n key String of an error message to get
protected eu.europa.esig.dss.enumerations.Indication	getFailedIndicationForConclusion()	Gets an Indication in case of failure
protected eu.europa.esig.dss.enumerations.SubIndication	getFailedSubIndicationForConclusion()	Gets a SubIndication in case of failure
protected eu.europa.esig.dss.i18n.MessageTag	getMessageTag()	Returns an i18n key String of a message to get
protected String	getNotAfterAfterCertificateNotAfterMessage()	Returns the additional information message in case if computed time 'notAfter' is after the certificate's notAfter
protected String	getNoThisUpdateMessage()	Returns the additional information message in case of no thisUpdate field defined
protected String	getRevocationCertHashOkMessage()	Returns the additional information message when certHash matches
protected String	getRevocationConsistentMessage()	Returns the additional information message when the revocation is consistent
protected String	getRevocationConsistentWithArchiveCutoffMessage()	Returns the additional information message when the revocation is consistent with archiveCutoff
protected String	getRevocationConsistentWithExpiredCertsOnCRLMessage()	Returns the additional information message when the revocation is consistent with expiredCertsOnCRL
protected String	getRevocationConsistentWithExpiredCertsRevocationInfoMessage()	Returns the additional information message when the revocation is consistent with archiveCutoff
protected String	getRevocationInfoMessage()	Returns the additional information message for revocation data in case of other events
protected String	getRevocationIssuerNotFoundMessage()	Returns the additional information message when revocation's issue is not found
protected String	getRevocationProducesAtOutOfBoundsMessage()	Returns the additional information message when revocation has been produced at out of the signing certificate's validity
protected String	getThisUpdateBeforeCertificateNotBeforeMessage()	Returns the additional information message in case if thisUpdate is before certificate's notBefore
protected boolean	process()	Performs the check

Methods inherited from class eu.europa.esig.dss.validation.process.ChainItem

buildConstraintMessage, buildErrorMessage, buildXmlMessage, execute, getAdditionalInfo, getLevel, getPreviousErrors, getSuccessIndication, getSuccessSubIndication, isIndeterminateConclusion, isInvalidConclusion, isValid, isValidConclusion, setNextItem

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

certificate

protected final eu.europa.esig.dss.diagnostic.CertificateWrapper certificate

The certificate in question

revocationData

protected final eu.europa.esig.dss.diagnostic.RevocationWrapper revocationData

Revocation data to check

thisUpdate

protected Date thisUpdate

ThisUpdate of the revocation

producedAt

protected Date producedAt

ProducedAt time of the revocation

certNotBefore

protected Date certNotBefore

Certificate's NotBefore

certNotAfter

protected Date certNotAfter

Certificate's NotAfter

notAfterRevoc

protected Date notAfterRevoc

Defines date after which the revocation issuer ensure the revocation is contained for the certificate

certHashOK

protected boolean certHashOK

Defines if certHash matches

Constructor Details

RevocationConsistentCheck

public RevocationConsistentCheck(eu.europa.esig.dss.i18n.I18nProvider i18nProvider,
 T result,
 eu.europa.esig.dss.diagnostic.CertificateWrapper certificate,
 eu.europa.esig.dss.diagnostic.RevocationWrapper revocationData,
 eu.europa.esig.dss.policy.jaxb.LevelConstraint constraint)

Default constructor

Parameters:

i18nProvider - I18nProvider

result - the result

certificate - CertificateWrapper

revocationData - RevocationWrapper

constraint - LevelConstraint

Method Details

getBlockType

protected eu.europa.esig.dss.detailedreport.jaxb.XmlBlockType getBlockType()

Description copied from class: ChainItem

Returns the validating block type (used for validation result of RAC, RFC, etc.)

Overrides:

getBlockType in class ChainItem<T extends eu.europa.esig.dss.detailedreport.jaxb.XmlConstraintsConclusion>

Returns:

XmlBlockType

process

protected boolean process()

Description copied from class: ChainItem

Performs the check

Specified by:

process in class ChainItem<T extends eu.europa.esig.dss.detailedreport.jaxb.XmlConstraintsConclusion>

Returns:

TRUE if the check succeeds, FALSE otherwise

getMessageTag

protected eu.europa.esig.dss.i18n.MessageTag getMessageTag()

Description copied from class: ChainItem

Returns an i18n key String of a message to get

Overrides:

getMessageTag in class ChainItem<T extends eu.europa.esig.dss.detailedreport.jaxb.XmlConstraintsConclusion>

Returns:

MessageTag key

getErrorMessageTag

protected eu.europa.esig.dss.i18n.MessageTag getErrorMessageTag()

Description copied from class: ChainItem

Returns an i18n key String of an error message to get

Overrides:

getErrorMessageTag in class ChainItem<T extends eu.europa.esig.dss.detailedreport.jaxb.XmlConstraintsConclusion>

Returns:

MessageTag key

getFailedIndicationForConclusion

protected eu.europa.esig.dss.enumerations.Indication getFailedIndicationForConclusion()

Description copied from class: ChainItem

Gets an Indication in case of failure

Specified by:

getFailedIndicationForConclusion in class ChainItem<T extends eu.europa.esig.dss.detailedreport.jaxb.XmlConstraintsConclusion>

Returns:

Indication

getFailedSubIndicationForConclusion

protected eu.europa.esig.dss.enumerations.SubIndication getFailedSubIndicationForConclusion()

Description copied from class: ChainItem

Gets a SubIndication in case of failure

Specified by:

getFailedSubIndicationForConclusion in class ChainItem<T extends eu.europa.esig.dss.detailedreport.jaxb.XmlConstraintsConclusion>

Returns:

SubIndication

buildAdditionalInfo

protected String buildAdditionalInfo()

Description copied from class: ChainItem

Builds an additional information

Overrides:

buildAdditionalInfo in class ChainItem<T extends eu.europa.esig.dss.detailedreport.jaxb.XmlConstraintsConclusion>

Returns:

String

getNoThisUpdateMessage

protected String getNoThisUpdateMessage()

Returns the additional information message in case of no thisUpdate field defined

Returns:

String

getThisUpdateBeforeCertificateNotBeforeMessage

protected String getThisUpdateBeforeCertificateNotBeforeMessage()

Returns the additional information message in case if thisUpdate is before certificate's notBefore

Returns:

String

getNotAfterAfterCertificateNotAfterMessage

protected String getNotAfterAfterCertificateNotAfterMessage()

Returns the additional information message in case if computed time 'notAfter' is after the certificate's notAfter

Returns:

String

getRevocationIssuerNotFoundMessage

protected String getRevocationIssuerNotFoundMessage()

Returns the additional information message when revocation's issue is not found

Returns:

String

getRevocationProducesAtOutOfBoundsMessage

protected String getRevocationProducesAtOutOfBoundsMessage()

Returns the additional information message when revocation has been produced at out of the signing certificate's validity

Returns:

String

getRevocationCertHashOkMessage

protected String getRevocationCertHashOkMessage()

Returns the additional information message when certHash matches

Returns:

String

getRevocationConsistentMessage

protected String getRevocationConsistentMessage()

Returns the additional information message when the revocation is consistent

Returns:

String

getRevocationConsistentWithExpiredCertsOnCRLMessage

protected String getRevocationConsistentWithExpiredCertsOnCRLMessage()

Returns the additional information message when the revocation is consistent with expiredCertsOnCRL

Returns:

String

getRevocationConsistentWithArchiveCutoffMessage

protected String getRevocationConsistentWithArchiveCutoffMessage()

Returns the additional information message when the revocation is consistent with archiveCutoff

Returns:

String

getRevocationConsistentWithExpiredCertsRevocationInfoMessage

protected String getRevocationConsistentWithExpiredCertsRevocationInfoMessage()

Returns the additional information message when the revocation is consistent with archiveCutoff

Returns:

String

getRevocationInfoMessage

protected String getRevocationInfoMessage()

Returns the additional information message for revocation data in case of other events

Returns:

String