java.security.cert.X509CRL.getThisUpdate()方法的使用及代码示例

x33g5p2x  于2022-02-02 转载在 其他  
字(8.9k)|赞(0)|评价(0)|浏览(109)

本文整理了Java中java.security.cert.X509CRL.getThisUpdate()方法的一些代码示例，展示了X509CRL.getThisUpdate()的具体用法。这些代码示例主要来源于Github/Stackoverflow/Maven等平台，是从一些精选项目中提取出来的代码，具有较强的参考意义，能在一定程度帮忙到你。X509CRL.getThisUpdate()方法的具体详情如下：
包路径：java.security.cert.X509CRL
类名称：X509CRL
方法名：getThisUpdate

X509CRL.getThisUpdate介绍

[英]Returns the thisUpdate value of this CRL.
[中]返回此CRL的thisUpdate值。

代码示例

代码示例来源：origin: robovm/robovm

Date thisUp = crlist.getThisUpdate();
Date nextUp = crlist.getNextUpdate();
if ((thisUp == null) || (nextUp == null)) {

代码示例来源：origin: org.apache.poi/poi-ooxml

crlIdentifier.setIssuer(issuerName);
Calendar cal = Calendar.getInstance(TimeZone.getTimeZone("Z"), Locale.ROOT);
cal.setTime(crl.getThisUpdate());
crlIdentifier.setIssueTime(cal);
crlIdentifier.setNumber(getCrlNumber(crl));

代码示例来源：origin: org.jsslutils/jsslutils

@Override
public Date getThisUpdate() {
  X509CRL crl = this.crl;
  if (crl != null) {
    return crl.getThisUpdate();
  } else {
    return null;
  }
}

代码示例来源：origin: arhs/sd-dss

/**
 * Gets the thisUpdate date from the CRL.
 *
 * @return the thisUpdate date from the CRL.
 */
public Date getThisUpdate() {
  return crlValidity.x509CRL.getThisUpdate();
}

代码示例来源：origin: be.fedict.jtrust/jtrust-lib

private boolean isCrlInValidationDate(X509CRL crl, Date validationDate) {
    Date thisUpdate = crl.getThisUpdate();
    LOG.debug("validation date: " + validationDate);
    LOG.debug("CRL this update: " + thisUpdate);
    if (thisUpdate.after(validationDate)) {
      LOG.warn("CRL too young");
      return false;
    }
    LOG.debug("CRL next update: " + crl.getNextUpdate());
    if (validationDate.after(crl.getNextUpdate())) {
      LOG.debug("CRL too old");
      return false;
    }
    return true;
  }
}

代码示例来源：origin: eu.eu-emi.security/canl

if (crl.getThisUpdate().before(cert.getNotAfter()))

代码示例来源：origin: com.madgag.spongycastle/prov

if (crl.getThisUpdate().before(cert.getNotAfter()))

代码示例来源：origin: org.bouncycastle/bcprov-debug-jdk15on

if (crl.getThisUpdate().before(cert.getNotAfter()))

代码示例来源：origin: GluuFederation/oxAuth

log.debug("CRL nextUpdate: " + x509crl.getThisUpdate());
log.debug("CRL thisUpdate: " + x509crl.getNextUpdate());

代码示例来源：origin: org.xipki/ca-server

private boolean publishCrl(X509CRL crl) {
 try {
  certstore.addCrl(caIdent, crl);
 } catch (Exception ex) {
  LOG.error("could not add CRL ca={}, thisUpdate={}: {}, ",
    caIdent.getName(), crl.getThisUpdate(), ex.getMessage());
  LOG.debug("Exception", ex);
  return false;
 }
 for (IdentifiedCertPublisher publisher : publishers()) {
  try {
   publisher.crlAdded(caCert, crl);
  } catch (RuntimeException ex) {
   LogUtil.error(LOG, ex, "could not publish CRL to the publisher " + publisher.getIdent());
  }
 } // end for
 return true;
} // method publishCrl

代码示例来源：origin: com.itextpdf/itextpdf

/**
 * Verifies a certificate against a single CRL.
 * @param crl    the Certificate Revocation List
 * @param signCert    a certificate that needs to be verified
 * @param issuerCert    its issuer
 * @param signDate        the sign date
 * @return true if the verification succeeded
 * @throws GeneralSecurityException
 */
public boolean verify(X509CRL crl, X509Certificate signCert, X509Certificate issuerCert, Date signDate) throws GeneralSecurityException {
  if (crl == null || signDate == null)
    return false;
  // We only check CRLs valid on the signing date for which the issuer matches
  if (crl.getIssuerX500Principal().equals(signCert.getIssuerX500Principal())
    && signDate.after(crl.getThisUpdate()) && signDate.before(crl.getNextUpdate())) {
    // the signing certificate may not be revoked
    if (isSignatureValid(crl, issuerCert) && crl.isRevoked(signCert)) {
      throw new VerificationException(signCert, "The certificate has been revoked.");
    }
    return true;
  }
  return false;
}

代码示例来源：origin: itext/itext7

/**
 * Verifies a certificate against a single CRL.
 * @param crl    the Certificate Revocation List
 * @param signCert    a certificate that needs to be verified
 * @param issuerCert    its issuer
 * @param signDate        the sign date
 * @return true if the verification succeeded
 * @throws GeneralSecurityException
 */
public boolean verify(X509CRL crl, X509Certificate signCert, X509Certificate issuerCert, Date signDate) throws GeneralSecurityException {
  if (crl == null || signDate == SignUtils.UNDEFINED_TIMESTAMP_DATE)
    return false;
  // We only check CRLs valid on the signing date for which the issuer matches
  if (crl.getIssuerX500Principal().equals(signCert.getIssuerX500Principal())
      && signDate.after(crl.getThisUpdate()) && signDate.before(crl.getNextUpdate())) {
    // the signing certificate may not be revoked
    if (isSignatureValid(crl, issuerCert) && crl.isRevoked(signCert)) {
      throw new VerificationException(signCert, "The certificate has been revoked.");
    }
    return true;
  }
  return false;
}

代码示例来源：origin: ibinti/bugvm

if (crl.getThisUpdate().before(cert.getNotAfter()))

代码示例来源：origin: com.itextpdf/itextg

/**
 * Verifies a certificate against a single CRL.
 * @param crl    the Certificate Revocation List
 * @param signCert    a certificate that needs to be verified
 * @param issuerCert    its issuer
 * @param signDate        the sign date
 * @return true if the verification succeeded
 * @throws GeneralSecurityException
 */
public boolean verify(X509CRL crl, X509Certificate signCert, X509Certificate issuerCert, Date signDate) throws GeneralSecurityException {
  if (crl == null || signDate == null)
    return false;
  // We only check CRLs valid on the signing date for which the issuer matches
  if (crl.getIssuerX500Principal().equals(signCert.getIssuerX500Principal())
    && signDate.after(crl.getThisUpdate()) && signDate.before(crl.getNextUpdate())) {
    // the signing certificate may not be revoked
    if (isSignatureValid(crl, issuerCert) && crl.isRevoked(signCert)) {
      throw new VerificationException(signCert, "The certificate has been revoked.");
    }
    return true;
  }
  return false;
}

代码示例来源：origin: com.itextpdf/sign

/**
 * Verifies a certificate against a single CRL.
 * @param crl    the Certificate Revocation List
 * @param signCert    a certificate that needs to be verified
 * @param issuerCert    its issuer
 * @param signDate        the sign date
 * @return true if the verification succeeded
 * @throws GeneralSecurityException
 */
public boolean verify(X509CRL crl, X509Certificate signCert, X509Certificate issuerCert, Date signDate) throws GeneralSecurityException {
  if (crl == null || signDate == SignUtils.UNDEFINED_TIMESTAMP_DATE)
    return false;
  // We only check CRLs valid on the signing date for which the issuer matches
  if (crl.getIssuerX500Principal().equals(signCert.getIssuerX500Principal())
      && signDate.after(crl.getThisUpdate()) && signDate.before(crl.getNextUpdate())) {
    // the signing certificate may not be revoked
    if (isSignatureValid(crl, issuerCert) && crl.isRevoked(signCert)) {
      throw new VerificationException(signCert, "The certificate has been revoked.");
    }
    return true;
  }
  return false;
}

代码示例来源：origin: org.opensaml/xmltooling

if (log.isTraceEnabled()) {
    log.trace("Added X509CRL to cert store from issuer {} dated {}",
        x500DNHandler.getName(crl.getIssuerX500Principal()), crl.getThisUpdate());
    if (isEmpty) {
      log.trace("X509CRL added to cert store from issuer {} dated {} was empty",
          x500DNHandler.getName(crl.getIssuerX500Principal()), crl.getThisUpdate());
if (log.isTraceEnabled()) {
  log.trace("Empty X509CRL not added to cert store, from issuer {} dated {}",
      x500DNHandler.getName(crl.getIssuerX500Principal()), crl.getThisUpdate());

代码示例来源：origin: GluuFederation/oxAuth

} else if (crlEntry.getRevocationDate().after(validationDate)) {
  log.warn("CRL revocation time after the validation date, the certificate '" + subjectX500Principal + "' was valid at " + validationDate);
  status.setRevocationObjectIssuingTime(x509crl.getThisUpdate());
  status.setValidity(CertificateValidity.VALID);
} else {
  log.info("CRL for certificate '" + subjectX500Principal + "' is revoked since " + crlEntry.getRevocationDate());
  status.setRevocationObjectIssuingTime(x509crl.getThisUpdate());
  status.setRevocationDate(crlEntry.getRevocationDate());
  status.setValidity(CertificateValidity.REVOKED);

代码示例来源：origin: arhs/sd-dss

private void setDefaultValues() {
  final X509CRL x509crl = crlValidity.x509CRL;
  final String sigAlgOID = x509crl.getSigAlgOID();
  final SignatureAlgorithm signatureAlgorithm = SignatureAlgorithm.forOID(sigAlgOID);
  this.algorithmUsedToSignToken = signatureAlgorithm;
  this.issuingTime = x509crl.getThisUpdate();
  this.nextUpdate = x509crl.getNextUpdate();
  issuerX500Principal = x509crl.getIssuerX500Principal();
  this.extraInfo = new TokenValidationExtraInfo();
  issuerToken = crlValidity.issuerToken;
  signatureValid = crlValidity.signatureIntact;
  signatureInvalidityReason = crlValidity.signatureInvalidityReason;
}

代码示例来源：origin: arhs/sd-dss

final Date thisUpdate = x509CRL.getThisUpdate();
if (!certificateToken.hasExpiredCertOnCRLExtension()) {

代码示例来源：origin: org.xipki/ca-server

public X509CRL getCrl(BigInteger crlNumber) throws OperationException {
 LOG.info("     START getCrl: ca={}, crlNumber={}", caIdent.getName(), crlNumber);
 boolean successful = false;
 try {
  byte[] encodedCrl = certstore.getEncodedCrl(caIdent, crlNumber);
  if (encodedCrl == null) {
   return null;
  }
  try {
   X509CRL crl = X509Util.parseCrl(encodedCrl);
   successful = true;
   if (LOG.isInfoEnabled()) {
    String timeStr = new Time(crl.getThisUpdate()).getTime();
    LOG.info("SUCCESSFUL getCrl: ca={}, thisUpdate={}", caIdent.getName(), timeStr);
   }
   return crl;
  } catch (CRLException | CertificateException ex) {
   throw new OperationException(SYSTEM_FAILURE, ex);
  } catch (RuntimeException ex) {
   throw new OperationException(SYSTEM_FAILURE, ex);
  }
 } finally {
  if (!successful) {
   LOG.info("    FAILED getCrl: ca={}", caIdent.getName());
  }
 }
} // method getCrl

内容来源于网络，如有侵权，请联系作者删除！

X509CRL

相关文章

    查看更多
    微信公众号

    热门标签

    更多
    JavaquerypythonNode开发语言requestUtil数据库Table后端算法LoggerMessageElementParser

    最新文章

    更多
    • 蜀ICP备13028337号-1 大数据知识库 https://www.saoniuhuo.com © All rights reserved
    • 本站内容来源互联网,如果侵犯您的权益请联系我们删除, 联系方式：448109455@qq.com