Package com.pd4ml.pdf.sign.ltv
Class LtvOptions
- java.lang.Object
-
- com.pd4ml.pdf.sign.ltv.LtvOptions
-
public final class LtvOptions extends java.lang.ObjectConfiguration forRevocationFetcher.fetch(java.security.cert.Certificate[], com.pd4ml.pdf.sign.ltv.LtvOptions): which revocation sources to try, in what order, and how patient to be with each.
-
-
Constructor Summary
Constructors Constructor Description LtvOptions()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description intgetConnectTimeoutMillis()intgetReadTimeoutMillis()booleanisCrlOnlyAsFallback()When bothisFetchOcsp()and this are true:false(default) fetches OCSP and CRL independently for every certificate, embedding both as redundant revocation evidence (the usual PAdES-LT recommendation);trueonly downloads a certificate's CRL when its OCSP responder was unreachable/absent, trading completeness for fewer requests.booleanisFetchCrl()Download each certificate's CRL (from its CRL Distribution Points extension).booleanisFetchOcsp()Query each certificate's OCSP responder (from its Authority Information Access extension).booleanisIncludeRootCertificate()Whether to also fetch/embed revocation info for the last (self-signed root/trust-anchor) certificate in the chain.LtvOptionssetConnectTimeoutMillis(int connectTimeoutMillis)LtvOptionssetCrlOnlyAsFallback(boolean crlOnlyAsFallback)LtvOptionssetFetchCrl(boolean fetchCrl)LtvOptionssetFetchOcsp(boolean fetchOcsp)LtvOptionssetIncludeRootCertificate(boolean includeRootCertificate)LtvOptionssetReadTimeoutMillis(int readTimeoutMillis)
-
-
-
Method Detail
-
isFetchOcsp
public boolean isFetchOcsp()
Query each certificate's OCSP responder (from its Authority Information Access extension). Default true.
-
setFetchOcsp
public LtvOptions setFetchOcsp(boolean fetchOcsp)
-
isFetchCrl
public boolean isFetchCrl()
Download each certificate's CRL (from its CRL Distribution Points extension). Default true.
-
setFetchCrl
public LtvOptions setFetchCrl(boolean fetchCrl)
-
isCrlOnlyAsFallback
public boolean isCrlOnlyAsFallback()
When bothisFetchOcsp()and this are true:false(default) fetches OCSP and CRL independently for every certificate, embedding both as redundant revocation evidence (the usual PAdES-LT recommendation);trueonly downloads a certificate's CRL when its OCSP responder was unreachable/absent, trading completeness for fewer requests.
-
setCrlOnlyAsFallback
public LtvOptions setCrlOnlyAsFallback(boolean crlOnlyAsFallback)
-
getConnectTimeoutMillis
public int getConnectTimeoutMillis()
-
setConnectTimeoutMillis
public LtvOptions setConnectTimeoutMillis(int connectTimeoutMillis)
-
getReadTimeoutMillis
public int getReadTimeoutMillis()
-
setReadTimeoutMillis
public LtvOptions setReadTimeoutMillis(int readTimeoutMillis)
-
isIncludeRootCertificate
public boolean isIncludeRootCertificate()
Whether to also fetch/embed revocation info for the last (self-signed root/trust-anchor) certificate in the chain. Default false: a trust anchor is trusted by its own presence in the verifier's trust store, not by a signature over it, so most CAs don't even publish OCSP/CRL for their own root, and PAdES-LT validators don't require one.
-
setIncludeRootCertificate
public LtvOptions setIncludeRootCertificate(boolean includeRootCertificate)
-
-