Package com.itextpdf.text.pdf.security
Class CrlClientOnline
java.lang.Object
com.itextpdf.text.pdf.security.CrlClientOnline
- All Implemented Interfaces:
CrlClient
An implementation of the CrlClient that fetches the CRL bytes
from an URL.
-
Field Summary
Fields -
Constructor Summary
ConstructorsConstructorDescriptionCreates a CrlClientOnline instance that will try to find a single CRL by walking through the certificate chain.CrlClientOnline
(String... crls) Creates a CrlClientOnline instance using one or more URLs.CrlClientOnline
(URL... crls) Creates a CrlClientOnline instance using one or more URLs.CrlClientOnline
(Certificate[] chain) Creates a CrlClientOnline instance using a certificate chain. -
Method Summary
Modifier and TypeMethodDescriptionprotected void
Adds an URL to the list of CRL URLsprotected void
Adds an URL to the list of CRL URLsCollection
<byte[]> getEncoded
(X509Certificate checkCert, String url) Fetches the CRL bytes from an URL.
-
Field Details
-
LOGGER
The Logger instance. -
urls
The URLs of the CRLs.
-
-
Constructor Details
-
CrlClientOnline
public CrlClientOnline()Creates a CrlClientOnline instance that will try to find a single CRL by walking through the certificate chain. -
CrlClientOnline
Creates a CrlClientOnline instance using one or more URLs. -
CrlClientOnline
Creates a CrlClientOnline instance using one or more URLs. -
CrlClientOnline
Creates a CrlClientOnline instance using a certificate chain.
-
-
Method Details
-
addUrl
Adds an URL to the list of CRL URLs- Parameters:
url
- an URL in the form of a String
-
addUrl
Adds an URL to the list of CRL URLs- Parameters:
url
- an URL object
-
getEncoded
Fetches the CRL bytes from an URL. If no url is passed as parameter, the url will be obtained from the certificate. If you want to load a CRL from a local file, subclass this method and pass an URL with the path to the local file to this method. An other option is to use the CrlClientOffline class.- Specified by:
getEncoded
in interfaceCrlClient
- Parameters:
checkCert
- the certificate from which a CRL URL can be obtainedurl
- a CRL url if you don't want to obtain it from the certificate- Returns:
- a collection of byte array each representing a crl. It may return null or an empty collection
- See Also:
-