Java CertStore.getCRLs方法代码示例

import java.security.cert.CertStore; //导入方法依赖的package包/类
public Collection engineGetCRLs(CRLSelector crlSelector)
    throws CertStoreException
{
    boolean searchAllStores = params.getSearchAllStores();
    Iterator iter = params.getCertStores().iterator();
    List allCRLs = searchAllStores ? new ArrayList() : Collections.EMPTY_LIST;
    
    while (iter.hasNext())
    {
        CertStore store = (CertStore)iter.next();
        Collection crls = store.getCRLs(crlSelector);

        if (searchAllStores)
        {
            allCRLs.addAll(crls);
        }
        else if (!crls.isEmpty())
        {
            return crls;
        }
    }

    return allCRLs;
}
 

import java.security.cert.CertStore; //导入方法依赖的package包/类
/**
 * Determine whether there are any CRL's in the {@link CertStore} that is to be used.
 * 
 * @param certStore the cert store that will be used for validation
 * @return true if the store contains at least 1 CRL instance, false otherwise
 */
protected boolean storeContainsCRLs(CertStore certStore) {
    Collection<? extends CRL> crls = null;
    try {
        //Save some cycles and memory: Collection cert store allows null as specifier to return all.
        //crls = certStore.getCRLs( new X509CRLSelector() );
        crls = certStore.getCRLs(null);
    } catch (CertStoreException e) {
        log.error("Error examining cert store for CRL's, treating as if no CRL's present", e);
        return false;
    }
    if (crls != null && !crls.isEmpty()) {
        return true;
    }
    return false;
}
 

import java.security.cert.CertStore; //导入方法依赖的package包/类
public static Collection<? extends CRL> getCRLs(final PKIXCRLStoreSelector selector, CertStore certStore)
    throws CertStoreException
{
    return certStore.getCRLs(new CRLSelector()
    {
        public boolean match(CRL crl)
        {
            return selector.match(crl);
        }

        public Object clone()
        {
            return this;
        }
    });
}
 

import java.security.cert.CertStore; //导入方法依赖的package包/类
private void checkResult(CertStore certS)   throws CertStoreException, 
        InvalidAlgorithmParameterException {
    CertSelector certSelector = new X509CertSelector();
    CRLSelector crlSelector = new X509CRLSelector();
    Collection collection = certS.getCertificates(certSelector);
    assertNull("Not null collection", collection);
    collection = certS.getCRLs(crlSelector);
    assertNull("Not null collection", collection);
}
 

import java.security.cert.CertStore; //导入方法依赖的package包/类
/**
 * Loads CRLs from a source. This method is also called in JarSigner.
 * @param src the source, which means System.in if null, or a URI,
 *        or a bare file path name
 */
public static Collection<? extends CRL> loadCRLs(String src) throws Exception {
    InputStream in = null;
    URI uri = null;
    if (src == null) {
        in = System.in;
    } else {
        try {
            uri = new URI(src);
            if (uri.getScheme().equals("ldap")) {
                // No input stream for LDAP
            } else {
                in = uri.toURL().openStream();
            }
        } catch (Exception e) {
            try {
                in = new FileInputStream(src);
            } catch (Exception e2) {
                if (uri == null || uri.getScheme() == null) {
                    throw e2;   // More likely a bare file path
                } else {
                    throw e;    // More likely a protocol or network problem
                }
            }
        }
    }
    if (in != null) {
        try {
            // Read the full stream before feeding to X509Factory,
            // otherwise, keytool -gencrl | keytool -printcrl
            // might not work properly, since -gencrl is slow
            // and there's no data in the pipe at the beginning.
            ByteArrayOutputStream bout = new ByteArrayOutputStream();
            byte[] b = new byte[4096];
            while (true) {
                int len = in.read(b);
                if (len < 0) break;
                bout.write(b, 0, len);
            }
            return CertificateFactory.getInstance("X509").generateCRLs(
                    new ByteArrayInputStream(bout.toByteArray()));
        } finally {
            if (in != System.in) {
                in.close();
            }
        }
    } else {    // must be LDAP, and uri is not null
        URICertStoreParameters params =
            new URICertStoreParameters(uri);
        CertStore s = CertStore.getInstance("LDAP", params);
        return s.getCRLs(new X509CRLSelector());
    }
}
 

import java.security.cert.CertStore; //导入方法依赖的package包/类
/**
 * Loads CRLs from a source. This method is also called in JarSigner.
 * @param src the source, which means System.in if null, or a URI,
 *        or a bare file path name
 */
public static Collection<? extends CRL> loadCRLs(String src) throws Exception {
    InputStream in = null;
    URI uri = null;
    if (src == null) {
        in = System.in;
    } else {
        try {
            uri = new URI(src);
            if (uri.getScheme().equals("ldap")) {
                // No input stream for LDAP
            } else {
                in = uri.toURL().openStream();
            }
        } catch (Exception e) {
            try {
                in = new FileInputStream(src);
            } catch (Exception e2) {
                if (uri == null || uri.getScheme() == null) {
                    throw e2;   // More likely a bare file path
                } else {
                    throw e;    // More likely a protocol or network problem
                }
            }
        }
    }
    if (in != null) {
        try {
            // Read the full stream before feeding to X509Factory,
            // otherwise, keytool -gencrl | keytool -printcrl
            // might not work properly, since -gencrl is slow
            // and there's no data in the pipe at the beginning.
            ByteArrayOutputStream bout = new ByteArrayOutputStream();
            byte[] b = new byte[4096];
            while (true) {
                int len = in.read(b);
                if (len < 0) break;
                bout.write(b, 0, len);
            }
            return CertificateFactory.getInstance("X509").generateCRLs(
                    new ByteArrayInputStream(bout.toByteArray()));
        } finally {
            if (in != System.in) {
                in.close();
            }
        }
    } else {    // must be LDAP, and uri is not null
        // Lazily load LDAPCertStoreHelper if present
        CertStoreHelper helper = CertStoreHelper.getInstance("LDAP");
        String path = uri.getPath();
        if (path.charAt(0) == '/') path = path.substring(1);
        CertStore s = helper.getCertStore(uri);
        X509CRLSelector sel =
                helper.wrap(new X509CRLSelector(), null, path);
        return s.getCRLs(sel);
    }
}
 

import java.security.cert.CertStore; //导入方法依赖的package包/类
public static Collection<? extends CRL> getCRLs(final PKIXCRLStoreSelector selector, CertStore certStore)
    throws CertStoreException
{
    return certStore.getCRLs(new SelectorClone(selector));
}
 

import java.security.cert.CertStore; //导入方法依赖的package包/类
/**
 * Loads CRLs from a source. This method is also called in JarSigner.
 * @param src the source, which means System.in if null, or a URI,
 *        or a bare file path name
 */
public static Collection<? extends CRL> loadCRLs(String src) throws Exception {
    InputStream in = null;
    URI uri = null;
    if (src == null) {
        in = System.in;
    } else {
        try {
            uri = new URI(src);
            if (uri.getScheme().equals("ldap")) {
                // No input stream for LDAP
            } else {
                in = uri.toURL().openStream();
            }
        } catch (Exception e) {
            try {
                in = new FileInputStream(src);
            } catch (Exception e2) {
                if (uri == null || uri.getScheme() == null) {
                    throw e2;   // More likely a bare file path
                } else {
                    throw e;    // More likely a protocol or network problem
                }
            }
        }
    }
    if (in != null) {
        try {
            // Read the full stream before feeding to X509Factory,
            // otherwise, keytool -gencrl | keytool -printcrl
            // might not work properly, since -gencrl is slow
            // and there's no data in the pipe at the beginning.
            ByteArrayOutputStream bout = new ByteArrayOutputStream();
            byte[] b = new byte[4096];
            while (true) {
                int len = in.read(b);
                if (len < 0) break;
                bout.write(b, 0, len);
            }
            return CertificateFactory.getInstance("X509").generateCRLs(
                    new ByteArrayInputStream(bout.toByteArray()));
        } finally {
            if (in != System.in) {
                in.close();
            }
        }
    } else {    // must be LDAP, and uri is not null
        String path = uri.getPath();
        if (path.charAt(0) == '/') path = path.substring(1);
        LDAPCertStoreHelper h = new LDAPCertStoreHelper();
        CertStore s = h.getCertStore(uri);
        X509CRLSelector sel =
                h.wrap(new X509CRLSelector(), null, path);
        return s.getCRLs(sel);
    }
}