org.keycloak.authentication.authenticators.x509

## Class CertificateValidator.BouncyCastleOCSPChecker

- java.lang.Object
- - org.keycloak.authentication.authenticators.x509.CertificateValidator.OCSPChecker
  - - org.keycloak.authentication.authenticators.x509.CertificateValidator.BouncyCastleOCSPChecker

- Enclosing class:
    CertificateValidator

      public static class CertificateValidator.BouncyCastleOCSPChecker
      extends CertificateValidator.OCSPChecker

- - ### Method Summary

    All Methods Instance Methods Concrete Methods
    Modifier and Type | Method and Description
    --- | ---
    `OCSPUtils.OCSPRevocationStatus` | `check(X509Certificate cert, X509Certificate issuerCertificate)` Requests certificate revocation status using OCSP.

    - ### Methods inherited from class java.lang.Object

      `clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

- - ### Method Detail

    - #### check

          public OCSPUtils.OCSPRevocationStatus check(X509Certificate cert,
                                                      X509Certificate issuerCertificate)
                                               throws CertPathValidatorException

      Description copied from class: `CertificateValidator.OCSPChecker`
      Requests certificate revocation status using OCSP. The OCSP responder URI is obtained from the certificate's AIA extension.
      Specified by:
        `check` in class `CertificateValidator.OCSPChecker`
      Parameters:
        `cert` - the certificate to be checked
        `issuerCertificate` - The issuer certificate
      Returns:
        revocation status
      Throws:
        `CertPathValidatorException`

Copyright © 2021 JBoss by Red Hat. All rights reserved.