Class CertificateRevocationSelector

java.lang.Object

eu.europa.esig.dss.validation.process.Chain<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS>

eu.europa.esig.dss.validation.process.bbb.xcv.crs.CertificateRevocationSelector

Direct Known Subclasses:

LongTermValidationCertificateRevocationSelector

public class CertificateRevocationSelector
extends Chain<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS>

This class validates revocation data for a given certificate and returns the latest valid entry

Field Summary

Fields

Modifier and Type	Field	Description
protected final eu.europa.esig.dss.diagnostic.CertificateWrapper	certificate	Certificate to get a latest valid revocation data for
protected final Date	currentTime	Validation time
protected final Map<eu.europa.esig.dss.diagnostic.RevocationWrapper, Boolean>	revocationDataValidityMap	This map contains validation results of the revocation data processing
protected final eu.europa.esig.dss.model.policy.ValidationPolicy	validationPolicy	Validation policy

Fields inherited from class Chain

firstItem, i18nProvider, result

Constructor Summary

Constructors

Constructor	Description
CertificateRevocationSelector(eu.europa.esig.dss.i18n.I18nProvider i18nProvider, eu.europa.esig.dss.diagnostic.CertificateWrapper certificate, Date currentTime, eu.europa.esig.dss.model.policy.ValidationPolicy validationPolicy)	Default constructor
CertificateRevocationSelector(eu.europa.esig.dss.i18n.I18nProvider i18nProvider, eu.europa.esig.dss.diagnostic.CertificateWrapper certificate, Date currentTime, eu.europa.esig.dss.model.policy.ValidationPolicy validationPolicy, Set<String> validatedTokens)	Constructor with a set of validated tokens

Method Summary

Modifier and Type	Method	Description
protected ChainItem<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS>	acceptableRevocationDataAvailable()	Checks whether the acceptable revocation data is available
protected void	collectAdditionalMessages(eu.europa.esig.dss.detailedreport.jaxb.XmlConclusion conclusion)	The method allows to fill up additional messages into the conclusion
protected void	collectMessages(eu.europa.esig.dss.detailedreport.jaxb.XmlConclusion conclusion, eu.europa.esig.dss.detailedreport.jaxb.XmlConstraint constraint)	Collects required messages from xmlConstraint to the given conclusion NOTE: bye default the only one error is already collected in the chain (no more possible), therefore no need to collect it again
protected List<eu.europa.esig.dss.diagnostic.CertificateRevocationWrapper>	getCertificateRevocationData()	Returns available certificate revocation data to be validated
eu.europa.esig.dss.diagnostic.CertificateRevocationWrapper	getLatestAcceptableCertificateRevocation()	This method returns the latest acceptable certificate revocation data
protected eu.europa.esig.dss.detailedreport.jaxb.XmlRAC	getRevocationAcceptanceValidationResult(eu.europa.esig.dss.diagnostic.CertificateRevocationWrapper revocationWrapper)	Returns a RevocationAcceptanceValidation result for the given revocation token
protected eu.europa.esig.dss.i18n.MessageTag	getTitle()	Returns title of a Chain (i.e.
protected void	initChain()	Initializes the chain
protected ChainItem<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS>	revocationAcceptable(eu.europa.esig.dss.detailedreport.jaxb.XmlRAC racResult)	Checks whether the revocation data has passed the Revocation Acceptance Validation
protected ChainItem<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS>	verifyRevocationData(ChainItem<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS> item, eu.europa.esig.dss.diagnostic.CertificateRevocationWrapper revocationWrapper)	Verifies the given revocation data and returns the resulting ChainItem

Methods inherited from class Chain

addAdditionalInfo, buildChainTitle, collectAllMessages, execute, getFailLevelRule, getInfoLevelRule, getWarnLevelRule, isValid, isValidConclusion

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

certificate

protected final eu.europa.esig.dss.diagnostic.CertificateWrapper certificate

Certificate to get a latest valid revocation data for

currentTime

protected final Date currentTime

Validation time

validationPolicy

protected final eu.europa.esig.dss.model.policy.ValidationPolicy validationPolicy

Validation policy

revocationDataValidityMap

protected final Map<eu.europa.esig.dss.diagnostic.RevocationWrapper, Boolean> revocationDataValidityMap

This map contains validation results of the revocation data processing

Constructor Details

CertificateRevocationSelector

public CertificateRevocationSelector(eu.europa.esig.dss.i18n.I18nProvider i18nProvider,
 eu.europa.esig.dss.diagnostic.CertificateWrapper certificate,
 Date currentTime,
 eu.europa.esig.dss.model.policy.ValidationPolicy validationPolicy)

Default constructor

Parameters:

i18nProvider - I18nProvider

certificate - CertificateWrapper

currentTime - Date validation time

validationPolicy - ValidationPolicy

CertificateRevocationSelector

public CertificateRevocationSelector(eu.europa.esig.dss.i18n.I18nProvider i18nProvider,
 eu.europa.esig.dss.diagnostic.CertificateWrapper certificate,
 Date currentTime,
 eu.europa.esig.dss.model.policy.ValidationPolicy validationPolicy,
 Set<String> validatedTokens)

Constructor with a set of validated tokens

Parameters:

i18nProvider - I18nProvider

certificate - CertificateWrapper

currentTime - Date validation time

validationPolicy - ValidationPolicy

validatedTokens - a set of token String identifiers that have been already processed

Method Details

getTitle

protected eu.europa.esig.dss.i18n.MessageTag getTitle()

Description copied from class: Chain

Returns title of a Chain (i.e. BasicBuildingBlock title)

Overrides:

getTitle in class Chain<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS>

Returns:

MessageTag

initChain

protected void initChain()

Description copied from class: Chain

Initializes the chain

Specified by:

initChain in class Chain<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS>

getCertificateRevocationData

protected List<eu.europa.esig.dss.diagnostic.CertificateRevocationWrapper> getCertificateRevocationData()

Returns available certificate revocation data to be validated

Returns:

a list of CertificateRevocationWrappers

verifyRevocationData

protected ChainItem<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS> verifyRevocationData(ChainItem<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS> item,
 eu.europa.esig.dss.diagnostic.CertificateRevocationWrapper revocationWrapper)

Verifies the given revocation data and returns the resulting ChainItem

Parameters:

item - ChainItem the last initialized chain item to be processed in prior to the revocation validation

revocationWrapper - to be verified

Returns:

ChainItem

getRevocationAcceptanceValidationResult

protected eu.europa.esig.dss.detailedreport.jaxb.XmlRAC getRevocationAcceptanceValidationResult(eu.europa.esig.dss.diagnostic.CertificateRevocationWrapper revocationWrapper)

Returns a RevocationAcceptanceValidation result for the given revocation token

Parameters:

revocationWrapper - CertificateRevocationWrapper

Returns:

XmlRAC

getLatestAcceptableCertificateRevocation

public eu.europa.esig.dss.diagnostic.CertificateRevocationWrapper getLatestAcceptableCertificateRevocation()

This method returns the latest acceptable certificate revocation data

NOTE: method execute() shall be called before

Returns:

CertificateRevocationWrapper

revocationAcceptable

protected ChainItem<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS> revocationAcceptable(eu.europa.esig.dss.detailedreport.jaxb.XmlRAC racResult)

Checks whether the revocation data has passed the Revocation Acceptance Validation

Parameters:

racResult - XmlRAC

Returns:

ChainItem

acceptableRevocationDataAvailable

protected ChainItem<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS> acceptableRevocationDataAvailable()

Checks whether the acceptable revocation data is available

Returns:

ChainItem

collectMessages

protected void collectMessages(eu.europa.esig.dss.detailedreport.jaxb.XmlConclusion conclusion,
 eu.europa.esig.dss.detailedreport.jaxb.XmlConstraint constraint)

Description copied from class: Chain

Collects required messages from xmlConstraint to the given conclusion NOTE: bye default the only one error is already collected in the chain (no more possible), therefore no need to collect it again

Overrides:

collectMessages in class Chain<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS>

Parameters:

conclusion - XmlConclusion to fill up

constraint - XmlConstraint to extract messages from

collectAdditionalMessages

protected void collectAdditionalMessages(eu.europa.esig.dss.detailedreport.jaxb.XmlConclusion conclusion)

Description copied from class: Chain

The method allows to fill up additional messages into the conclusion

Overrides:

collectAdditionalMessages in class Chain<eu.europa.esig.dss.detailedreport.jaxb.XmlCRS>

Parameters:

conclusion - XmlConclusion to fill up