Package com.pd4ml.pdf.sign.ltv

Class RevocationFetcher

java.lang.Object

com.pd4ml.pdf.sign.ltv.RevocationFetcher

public final class RevocationFetcher
extends java.lang.Object

Fetches OCSP responses and CRLs for a certificate chain, over plain HTTP, using only the certificates' own Authority Information Access / CRL Distribution Points extensions to find where to ask -- no extra configuration needed for the common case. This is the built-in revocation source for com.pd4ml.pdf.sign.ltv.LtvUpdater; a caller with its own revocation infrastructure (a cache, a corporate OCSP proxy, pre-fetched responses) can bypass this class entirely and hand LtvUpdater.embedValidationInformation(byte[], byte[], java.security.cert.Certificate[], com.pd4ml.pdf.sign.ltv.RevocationFetcher.Result) a RevocationFetcher.Result built by hand instead.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	RevocationFetcher.Result	Everything fetched for one fetch(java.security.cert.Certificate[], com.pd4ml.pdf.sign.ltv.LtvOptions) call, ready to embed via LtvUpdater.

Method Summary

Modifier and Type	Method	Description
static RevocationFetcher.Result	fetch(java.security.cert.Certificate[] chain, LtvOptions options)	Fetches revocation evidence for every certificate in chain (index 0 = the signing certificate, each subsequent entry its issuer), per options.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

fetch

public static RevocationFetcher.Result fetch(java.security.cert.Certificate[] chain,
                                             LtvOptions options)

Fetches revocation evidence for every certificate in chain (index 0 = the signing certificate, each subsequent entry its issuer), per options. Never throws: any failure for an individual certificate/source is recorded in RevocationFetcher.Result.getWarnings() and fetching continues with the rest, so one unreachable CA doesn't block the whole operation.