Package org.digidoc4j.impl.asic.tsl

Class TSLCertificateSourceImpl

java.lang.Object
eu.europa.esig.dss.spi.x509.CommonCertificateSource
eu.europa.esig.dss.spi.x509.CommonTrustedCertificateSource
eu.europa.esig.dss.spi.tsl.TrustedListsCertificateSource
org.digidoc4j.impl.asic.tsl.TSLCertificateSourceImpl
All Implemented Interfaces:
eu.europa.esig.dss.spi.x509.CertificateSource, Serializable, TSLCertificateSource
public class TSLCertificateSourceImpl extends eu.europa.esig.dss.spi.tsl.TrustedListsCertificateSource implements TSLCertificateSource
Certificate source with the purpose of adding trusted certificate(s) manually

See Also:

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final String
    FOR_ESIGNATURES
    Deprecated.
    Deprecated for removal.
    static final String
    OID_TIMESTAMPING
     

  • Constructor Summary

    Constructors
    Constructor
    Description
    TSLCertificateSourceImpl()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    void
    addTSLCertificate(X509Certificate certificate)
    Add a certificate to the TSL
    eu.europa.esig.dss.spi.tsl.TLValidationJobSummary
    getSummary()
     
    void
    invalidateCache()
    Invalidates cache
    void
    refresh()
     

    Methods inherited from class eu.europa.esig.dss.spi.tsl.TrustedListsCertificateSource

    addCertificate, addCertificate, getAlternativeCRLUrls, getAlternativeOCSPUrls, getCertificateSourceType, getNumberOfTrustedPublicKeys, getTrustServices, setSummary, setTrustPropertiesByCertificates

    Methods inherited from class eu.europa.esig.dss.spi.x509.CommonTrustedCertificateSource

    importAsTrusted, isTrusted

    Methods inherited from class eu.europa.esig.dss.spi.x509.CommonCertificateSource

    findTokensFromCertRef, getByCertificateDigest, getByPublicKey, getBySignerIdentifier, getBySki, getBySubject, getCertificates, getEntities, getNumberOfCertificates, getNumberOfEntities, isAllSelfSigned, isCertificateSourceEqual, isCertificateSourceEquivalent, isKnown

    Methods inherited from class java.lang.Object

    equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    Methods inherited from interface eu.europa.esig.dss.spi.x509.CertificateSource

    addCertificate, findTokensFromCertRef, getByCertificateDigest, getByPublicKey, getBySignerIdentifier, getBySki, getBySubject, getCertificateSourceType, getEntities, isAllSelfSigned, isCertificateSourceEqual, isCertificateSourceEquivalent, isKnown, isTrusted

    Methods inherited from interface org.digidoc4j.TSLCertificateSource

    addCertificate, getCertificates, getNumberOfCertificates, getNumberOfTrustedPublicKeys, getTrustServices

  • Field Details

    • OID_TIMESTAMPING

      public static final String OID_TIMESTAMPING
      See Also:

    • FOR_ESIGNATURES

      @Deprecated public static final String FOR_ESIGNATURES
      Deprecated.
      Deprecated for removal. Use AdditionalServiceInformation.FOR_ESIGNATURES instead.

  • Constructor Details

    • TSLCertificateSourceImpl

      public TSLCertificateSourceImpl()

  • Method Details

    • addTSLCertificate

      public void addTSLCertificate(X509Certificate certificate)
      Add a certificate to the TSL

      ServiceName will be the certificate's CN field value
      ServiceTypeIdentifier will be:
      http://uri.etsi.org/TrstSvc/Svctype/Certstatus/OCSP/QC - if certificate contains "OCSPSigning" extended key usage
      http://uri.etsi.org/TrstSvc/Svctype/TSA/QTST - if certificate contains "timeStamping" extended key usage http://uri.etsi.org/TrstSvc/Svctype/CA/QC - otherwise
      Qualifier will be:
      Certificate's NotBefore pre Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCWithSSCD with nonRepudiation
      Certificate's NotBefore post Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCWithQSCD with nonRepudiation
      ServiceStatus will be:
      Certificate's NotBefore pre Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision
      Certificate's NotBefore post Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/granted

      Specified by:
      addTSLCertificate in interface TSLCertificateSource
      Parameters:
      certificate - X509 certificate to be added to the list

    • invalidateCache

      public void invalidateCache()
      Invalidates cache

      Only applicable when cache is used.

      Specified by:
      invalidateCache in interface TSLCertificateSource

    • getSummary

      public eu.europa.esig.dss.spi.tsl.TLValidationJobSummary getSummary()
      Specified by:
      getSummary in interface TSLCertificateSource
      Overrides:
      getSummary in class eu.europa.esig.dss.spi.tsl.TrustedListsCertificateSource

    • refresh

      public void refresh()
      Specified by:
      refresh in interface TSLCertificateSource