com.itextpdf.text.pdf.security
Class RootStoreVerifier

java.lang.Object
  com.itextpdf.text.pdf.security.CertificateVerifier
      com.itextpdf.text.pdf.security.RootStoreVerifier

Direct Known Subclasses:

CRLVerifier, LtvVerifier, OCSPVerifier

public class RootStoreVerifier
extends CertificateVerifier

Verifies a certificate against a KeyStore containing trusted anchors.

Field Summary

protected static Logger	LOGGER The Logger instance
protected java.security.KeyStore	rootStore A key store against which certificates can be verified.

Fields inherited from class com.itextpdf.text.pdf.security.CertificateVerifier

onlineCheckingAllowed, verifier

Constructor Summary

RootStoreVerifier(CertificateVerifier verifier)
Creates a RootStoreVerifier in a chain of verifiers.

Method Summary

void	setRootStore(java.security.KeyStore keyStore) Sets the Key Store against which a certificate can be checked.
java.util.List<VerificationOK>	verify(java.security.cert.X509Certificate signCert, java.security.cert.X509Certificate issuerCert, java.util.Date signDate) Verifies a single certificate against a key store (if present).

Methods inherited from class com.itextpdf.text.pdf.security.CertificateVerifier

setOnlineCheckingAllowed

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOGGER

protected static final Logger LOGGER

The Logger instance

rootStore

protected java.security.KeyStore rootStore

A key store against which certificates can be verified.

Constructor Detail

RootStoreVerifier

public RootStoreVerifier(CertificateVerifier verifier)

Creates a RootStoreVerifier in a chain of verifiers.

Parameters:

verifier - the next verifier in the chain

Method Detail

setRootStore

public void setRootStore(java.security.KeyStore keyStore)

Sets the Key Store against which a certificate can be checked.

Parameters:

keyStore - a root store

verify

public java.util.List<VerificationOK> verify(java.security.cert.X509Certificate signCert,
                                             java.security.cert.X509Certificate issuerCert,
                                             java.util.Date signDate)
                                      throws java.security.GeneralSecurityException,
                                             java.io.IOException

Verifies a single certificate against a key store (if present).

Overrides:

verify in class CertificateVerifier

Parameters:

signCert - the certificate to verify

issuerCert - the issuer certificate

signDate - the date the certificate needs to be valid

Returns:

a list of VerificationOK objects. The list will be empty if the certificate couldn't be verified.

Throws:

java.security.GeneralSecurityException

java.io.IOException