Class CertificateValidator.BouncyCastleOCSPChecker
java.lang.Object
org.keycloak.authentication.authenticators.x509.CertificateValidator.OCSPChecker
org.keycloak.authentication.authenticators.x509.CertificateValidator.BouncyCastleOCSPChecker
- Enclosing class:
- CertificateValidator
public static class CertificateValidator.BouncyCastleOCSPChecker
extends CertificateValidator.OCSPChecker
-
Method Summary
Modifier and TypeMethodDescriptioncheck
(X509Certificate cert, X509Certificate issuerCertificate) Requests certificate revocation status using OCSP.
-
Method Details
-
check
public OCSPProvider.OCSPRevocationStatus check(X509Certificate cert, X509Certificate issuerCertificate) throws CertPathValidatorException Description copied from class:CertificateValidator.OCSPChecker
Requests certificate revocation status using OCSP. The OCSP responder URI is obtained from the certificate's AIA extension.- Specified by:
check
in classCertificateValidator.OCSPChecker
- Parameters:
cert
- the certificate to be checkedissuerCertificate
- The issuer certificate- Returns:
- revocation status
- Throws:
CertPathValidatorException
-