Package com.itextpdf.text.pdf.security
Class RootStoreVerifier
java.lang.Object
com.itextpdf.text.pdf.security.CertificateVerifier
com.itextpdf.text.pdf.security.RootStoreVerifier
- Direct Known Subclasses:
CRLVerifier
,LtvVerifier
,OCSPVerifier
Verifies a certificate against a
KeyStore
containing trusted anchors.-
Field Summary
FieldsModifier and TypeFieldDescriptionprotected static final Logger
The Logger instanceprotected KeyStore
A key store against which certificates can be verified.Fields inherited from class com.itextpdf.text.pdf.security.CertificateVerifier
onlineCheckingAllowed, verifier
-
Constructor Summary
ConstructorsConstructorDescriptionRootStoreVerifier
(CertificateVerifier verifier) Creates a RootStoreVerifier in a chain of verifiers. -
Method Summary
Modifier and TypeMethodDescriptionvoid
setRootStore
(KeyStore keyStore) Sets the Key Store against which a certificate can be checked.verify
(X509Certificate signCert, X509Certificate issuerCert, Date signDate) Verifies a single certificate against a key store (if present).Methods inherited from class com.itextpdf.text.pdf.security.CertificateVerifier
setOnlineCheckingAllowed
-
Field Details
-
LOGGER
The Logger instance -
rootStore
A key store against which certificates can be verified.
-
-
Constructor Details
-
RootStoreVerifier
Creates a RootStoreVerifier in a chain of verifiers.- Parameters:
verifier
- the next verifier in the chain
-
-
Method Details
-
setRootStore
Sets the Key Store against which a certificate can be checked.- Parameters:
keyStore
- a root store
-
verify
public List<VerificationOK> verify(X509Certificate signCert, X509Certificate issuerCert, Date signDate) throws GeneralSecurityException, IOException Verifies a single certificate against a key store (if present).- Overrides:
verify
in classCertificateVerifier
- Parameters:
signCert
- the certificate to verifyissuerCert
- the issuer certificatesignDate
- the date the certificate needs to be valid- Returns:
- a list of
VerificationOK
objects. The list will be empty if the certificate couldn't be verified. - Throws:
GeneralSecurityException
IOException
-