it.trento.comune.j4sign.verification

Class CertValidity

java.lang.Object

it.trento.comune.j4sign.verification.CertValidity

 class CertValidity
extends java.lang.Object

This class is constructed with a certificate X509Certificate c and CertificationAuthorities C
Checks the validity of the certificate.

Questa classe si costruisce con il certificato X509Certificate c e le CertificationAuthorities C
Vengono effettuate tutte le verifiche necessarie per la validità del certificato

Author:

Francesco Cendron

Field Summary

Fields

Modifier and Type	Field and Description
private CertificationAuthorities	CAroot
private java.security.cert.X509Certificate	cert
private java.lang.String	certPathError
private X509CertRL	CRL
private java.lang.String	CRLerror
private boolean	hasQCStatements
private boolean	isDownloadCRLForced
private boolean	isExpired
private boolean	isInUse
private boolean	isPassed
private boolean	isPathValid
private boolean	isRevoked
private java.util.logging.Logger	log
private boolean	qcCompliance
private java.util.ArrayList<java.lang.String>	qcStatementsStrings

Constructor Summary

Constructors

Constructor and Description
CertValidity(java.security.cert.X509Certificate c, CertificationAuthorities C) Constructor of the class.
CertValidity(java.security.cert.X509Certificate c, CertificationAuthorities C, boolean isDownloadCRLForced, java.io.File crlDir) Constructor of the class.

Method Summary

Methods

Modifier and Type	Method and Description
java.lang.String	getCertPathError()
java.security.cert.X509CRL	getCRL()
java.lang.String	getCRLerror() Returns error message during CRL download. see X509CertRL NB call this method always after getPassed(), that calls X509crl.isrevoked() Restituisce una stringa contenente un messaggio di errore nella fase di verifica o download della CRL. vedi X509CertRL //chiamare questo metodo sempre dopo aver chiamata getpassed che chiama a sua volta //x509crl.isrevoked!
boolean	getExpired() Return true if certificate is expired Restituisce true se il certificato � scaduto
boolean	getHasQcStatements()
boolean	getInUse() Return true if the certificate is active Restituisce true se il certificato � ancora attivo
boolean	getPassed_noExpiredCheck()
boolean	getPassed() Return the general result Restituisce il risultato di tutte le verifiche
boolean	getPathValid() Checks certification path by IssuerX500Principal keyed in CAroot Risale il certification path attraverso IssuerX500Principal chiave in CAroot
java.util.ArrayList<java.lang.String>	getQcStatementsStrings()
java.lang.String	getReasonCode() Returns ReasonCode CRLReason ::= ENUMERATED { unspecified(0), keyCompromise(1), cACompromise(2), affiliationChanged(3), superseded(4), cessationOfOperation(5), certificateHold(6), removeFromCRL(8) } and possibly the date of revokation. see X509CertRL
boolean	getRevoked() Checks if certificate is revoked Verifica che il certificato non sia stato revocato.
boolean	isCRLChecked()
boolean	isExpired()
boolean	isInUse()
boolean	isPassed()
boolean	isPathValid()
boolean	isRevoked()
void	setExpired(boolean b)
void	setInUse(boolean b)
void	setisDownloadCRLForced(boolean b)
void	setPassed(boolean b)
void	setPathValid(boolean b)
void	setRevoked(boolean b)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

private java.util.logging.Logger log

isPathValid

private boolean isPathValid

CRLerror

private java.lang.String CRLerror

certPathError

private java.lang.String certPathError

isRevoked

private boolean isRevoked

isDownloadCRLForced

private boolean isDownloadCRLForced

isExpired

private boolean isExpired

isInUse

private boolean isInUse

isPassed

private boolean isPassed

cert

private java.security.cert.X509Certificate cert

CAroot

private CertificationAuthorities CAroot

CRL

private X509CertRL CRL

hasQCStatements

private boolean hasQCStatements

qcCompliance

private boolean qcCompliance

qcStatementsStrings

private java.util.ArrayList<java.lang.String> qcStatementsStrings

Constructor Detail

CertValidity

public CertValidity(java.security.cert.X509Certificate c,
            CertificationAuthorities C)

Constructor of the class.

Costrutture della classe: si richama la this.

Parameters:

c - certificate

C - CertificationAuthorities

CertValidity

public CertValidity(java.security.cert.X509Certificate c,
            CertificationAuthorities C,
            boolean isDownloadCRLForced,
            java.io.File crlDir)

Constructor of the class. It forces CRL download if flag isDownloadCRLForced
is true. It is useful to avoid forcing CRL download (isDownloadCRLForced = false)
when offline situations occurs. It is anyway necessary to complete
certificate validity check by verifying CRL.

Methods is.... don't perform action, methos get.... do perform action.

Costrutture della classe che forza il download della CRL nel
caso il flag isDownloadCRLForced sia settato a true.
E' utile non forzare il download della CRL (ponendo isDownloadCRLForced = false)
nei casi di mancanza di connessione alla rete. La verifica della revoca del certificato
� infatti comunque necessaria per la verifica della validit� del certificato. N.B. I metodi is... a differenza dei get... non perfomano l'azione ma restituiscono solo il valore

Parameters:

c - certificate4

C - CertificationAuthorities

isDownloadCRLForced - if true CRL download is forced

Method Detail

getCertPathError

public java.lang.String getCertPathError()

getCRL

public java.security.cert.X509CRL getCRL()

getPathValid

public boolean getPathValid()

Checks certification path by IssuerX500Principal keyed in CAroot

Risale il certification path attraverso IssuerX500Principal chiave in CAroot

Returns:

true: if certification path is valid

getRevoked

public boolean getRevoked()

Checks if certificate is revoked

Verifica che il certificato non sia stato revocato.

Returns:

true: if certificate is revoked

isCRLChecked

public boolean isCRLChecked()

getReasonCode

public java.lang.String getReasonCode()

Returns ReasonCode CRLReason ::= ENUMERATED { unspecified(0), keyCompromise(1), cACompromise(2), affiliationChanged(3), superseded(4), cessationOfOperation(5), certificateHold(6), removeFromCRL(8) } and possibly the date of revokation. see X509CertRL

Returns:

String: reason code

getCRLerror

public java.lang.String getCRLerror()

Returns error message during CRL download. see X509CertRL NB call this method always after getPassed(), that calls X509crl.isrevoked()

Restituisce una stringa contenente un messaggio di errore nella fase di verifica o download della CRL. vedi X509CertRL //chiamare questo metodo sempre dopo aver chiamata getpassed che chiama a sua volta //x509crl.isrevoked!

Returns:

String: error

getPassed

public boolean getPassed()

Return the general result

Restituisce il risultato di tutte le verifiche

Returns:

true: if certificate is valid

getPassed_noExpiredCheck

public boolean getPassed_noExpiredCheck()

getExpired

public boolean getExpired()

Return true if certificate is expired

Restituisce true se il certificato � scaduto

Returns:

true: if certificate is expired

getInUse

public boolean getInUse()

Return true if the certificate is active

Restituisce true se il certificato � ancora attivo

Returns:

true: if the certificate is active

isPathValid

public boolean isPathValid()

isRevoked

public boolean isRevoked()

isPassed

public boolean isPassed()

isExpired

public boolean isExpired()

isInUse

public boolean isInUse()

setPathValid

public void setPathValid(boolean b)

setRevoked

public void setRevoked(boolean b)

setPassed

public void setPassed(boolean b)

setExpired

public void setExpired(boolean b)

setInUse

public void setInUse(boolean b)

setisDownloadCRLForced

public void setisDownloadCRLForced(boolean b)

getHasQcStatements

public boolean getHasQcStatements()

getQcStatementsStrings

public java.util.ArrayList<java.lang.String> getQcStatementsStrings()