es.gob.afirma.tsl.certValidation.ifaces

Interface ITSLValidatorThroughSomeMethod

public interface ITSLValidatorThroughSomeMethod

Interface that represents a certificate validation using TSL through some specific method.

.

Project:

Library for the integration with the services of @Firma, eVisor and TS@.

Version:

1.2, 19/09/2022.

Method Summary

Modifier and Type	Method and Description
void	searchRevocationValueCompatible(java.security.cert.X509Certificate cert, org.bouncycastle.cert.ocsp.BasicOCSPResp basicOcspResponse, java.security.cert.X509CRL crl, java.util.Date validationDate, ServiceHistoryInstance shi, TSLValidatorResult validationResult) Method that searchs if some of the input revocation values are verified by the input service, and then use it for check the revocation status of the certificate.
void	validateCertificate(java.security.cert.X509Certificate cert, java.util.Date validationDate, TSPService tspService, ServiceHistoryInstance shi, boolean isHistoricServiceInf, TSLValidatorResult validationResult) Method that validates the input X509v3 certificate using a TSL - TSP Service (CRL or OCSP).

Method Detail

validateCertificate

void validateCertificate(java.security.cert.X509Certificate cert,
                         java.util.Date validationDate,
                         TSPService tspService,
                         ServiceHistoryInstance shi,
                         boolean isHistoricServiceInf,
                         TSLValidatorResult validationResult)

Method that validates the input X509v3 certificate using a TSL - TSP Service (CRL or OCSP).

Parameters:

cert - Certificate X509v3 to validate its revocation.

validationDate - Validation date to check the certificate status revocation.

tspService - TSL - TSP Service from which extract the information to validate the certificate.

shi - TSL - TSP Service History Instance from which extract the information to validate the certificate.

isHistoricServiceInf - Flag that indicates if the input Service Information is from an Historic Service (true) or not (false).

validationResult - Object where must be stored the validation result data.

searchRevocationValueCompatible

void searchRevocationValueCompatible(java.security.cert.X509Certificate cert,
                                     org.bouncycastle.cert.ocsp.BasicOCSPResp basicOcspResponse,
                                     java.security.cert.X509CRL crl,
                                     java.util.Date validationDate,
                                     ServiceHistoryInstance shi,
                                     TSLValidatorResult validationResult)

Method that searchs if some of the input revocation values are verified by the input service, and then use it for check the revocation status of the certificate.

Parameters:

cert - Certificate X509v3 to validate its revocation.

basicOcspResponse - Basic OCSP response to check if it is compatible with the TSL.

crl - CRL to check if is compatible with the TSL to check the revocation status of the certificate.

validationDate - Validation date to check the certificate status revocation.

shi - TSL - TSP Service History Information from which extract the information to validate the certificate.

validationResult - Object where must be stored the validation result data.