Example usage for com.itextpdf.text.pdf.security OCSPVerifier verify

Introduction

In this page you can find the example usage for com.itextpdf.text.pdf.security OCSPVerifier verify.

Prototype

public List<VerificationOK> verify(X509Certificate signCert, X509Certificate issuerCert, Date signDate)
        throws GeneralSecurityException, IOException 

Source Link

Document

Verifies if a a valid OCSP response is found for the certificate.

Usage

From source file:org.opencps.pki.PdfVerifier.java

License:Open Source License

/**
 * Check signature revocation/*from   ww  w.  j  a v  a  2  s.  c  o m*/
 */
protected Boolean checkSignatureRevocation(PdfPKCS7 pkcs7, X509Certificate signCert, X509Certificate issuerCert,
        Date date) throws GeneralSecurityException, IOException {
    List<BasicOCSPResp> ocsps = new ArrayList<BasicOCSPResp>();
    if (pkcs7.getOcsp() != null) {
        ocsps.add(pkcs7.getOcsp());
    }
    OCSPVerifier ocspVerifier = new OCSPVerifier(null, ocsps);
    List<VerificationOK> verification = ocspVerifier.verify(signCert, issuerCert, date);
    if (verification.size() == 0) {
        List<X509CRL> crls = new ArrayList<X509CRL>();
        if (pkcs7.getCRLs() != null) {
            for (CRL crl : pkcs7.getCRLs()) {
                crls.add((X509CRL) crl);
            }
        }
        CRLVerifier crlVerifier = new CRLVerifier(null, crls);
        verification.addAll(crlVerifier.verify(signCert, issuerCert, date));
    }
    return verification.size() > 0;
}

---