org.digidoc4j.impl.asic.tsl

Class TSLCertificateSourceImpl

java.lang.Object

eu.europa.esig.dss.spi.x509.CommonCertificateSource

eu.europa.esig.dss.spi.x509.CommonTrustedCertificateSource

eu.europa.esig.dss.spi.tsl.TrustedListsCertificateSource

org.digidoc4j.impl.asic.tsl.TSLCertificateSourceImpl

All Implemented Interfaces:

eu.europa.esig.dss.spi.x509.CertificateSource, Serializable, TSLCertificateSource

public class TSLCertificateSourceImpl
extends eu.europa.esig.dss.spi.tsl.TrustedListsCertificateSource
implements TSLCertificateSource

Certificate source with the purpose of adding trusted certificate(s) manually

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
static String	FOR_ESIGNATURES Deprecated. Deprecated for removal. Use AdditionalServiceInformation.FOR_ESIGNATURES instead.
static String	OID_TIMESTAMPING

Constructor Summary

Constructors

Constructor and Description
TSLCertificateSourceImpl()

Method Summary

Modifier and Type	Method and Description
void	addTSLCertificate(X509Certificate certificate) Add a certificate to the TSL ServiceName will be the certificate's CN field value ServiceTypeIdentifier will be: http://uri.etsi.org/TrstSvc/Svctype/Certstatus/OCSP/QC - if certificate contains "OCSPSigning" extended key usage http://uri.etsi.org/TrstSvc/Svctype/TSA/QTST - if certificate contains "timeStamping" extended key usage http://uri.etsi.org/TrstSvc/Svctype/CA/QC - otherwise Qualifier will be: Certificate's NotBefore pre Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCWithSSCD with nonRepudiation Certificate's NotBefore post Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCWithQSCD with nonRepudiation ServiceStatus will be: Certificate's NotBefore pre Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Certificate's NotBefore post Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/granted
eu.europa.esig.dss.spi.tsl.TLValidationJobSummary	getSummary()
void	invalidateCache() Invalidates cache
void	refresh()

Methods inherited from class eu.europa.esig.dss.spi.tsl.TrustedListsCertificateSource

addCertificate, addCertificate, getAlternativeCRLUrls, getAlternativeOCSPUrls, getCertificateSourceType, getNumberOfTrustedPublicKeys, getTrustServices, setSummary, setTrustPropertiesByCertificates

Methods inherited from class eu.europa.esig.dss.spi.x509.CommonTrustedCertificateSource

importAsTrusted, isTrusted

Methods inherited from class eu.europa.esig.dss.spi.x509.CommonCertificateSource

findTokensFromCertRef, getByCertificateDigest, getByPublicKey, getBySignerIdentifier, getBySki, getBySubject, getCertificates, getEntities, getNumberOfCertificates, getNumberOfEntities, isAllSelfSigned, isCertificateSourceEqual, isCertificateSourceEquivalent, isKnown

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.digidoc4j.TSLCertificateSource

addCertificate, getCertificates, getNumberOfCertificates, getNumberOfTrustedPublicKeys, getTrustServices

Methods inherited from interface eu.europa.esig.dss.spi.x509.CertificateSource

addCertificate, findTokensFromCertRef, getByCertificateDigest, getByPublicKey, getBySignerIdentifier, getBySki, getBySubject, getCertificateSourceType, getEntities, isAllSelfSigned, isCertificateSourceEqual, isCertificateSourceEquivalent, isKnown, isTrusted

Field Detail

OID_TIMESTAMPING

public static final String OID_TIMESTAMPING

See Also:

Constant Field Values

FOR_ESIGNATURES

@Deprecated
public static final String FOR_ESIGNATURES

Deprecated. Deprecated for removal. Use AdditionalServiceInformation.FOR_ESIGNATURES instead.

Constructor Detail

TSLCertificateSourceImpl

public TSLCertificateSourceImpl()

Method Detail

addTSLCertificate

public void addTSLCertificate(X509Certificate certificate)

Add a certificate to the TSL

ServiceName will be the certificate's CN field value
ServiceTypeIdentifier will be:
http://uri.etsi.org/TrstSvc/Svctype/Certstatus/OCSP/QC - if certificate contains "OCSPSigning" extended key usage
http://uri.etsi.org/TrstSvc/Svctype/TSA/QTST - if certificate contains "timeStamping" extended key usage http://uri.etsi.org/TrstSvc/Svctype/CA/QC - otherwise
Qualifier will be:
Certificate's NotBefore pre Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCWithSSCD with nonRepudiation
Certificate's NotBefore post Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCWithQSCD with nonRepudiation
ServiceStatus will be:
Certificate's NotBefore pre Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision
Certificate's NotBefore post Eidas -> http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/granted

Specified by:

addTSLCertificate in interface TSLCertificateSource

Parameters:

certificate - X509 certificate to be added to the list

invalidateCache

public void invalidateCache()

Invalidates cache

Only applicable when cache is used.

Specified by:

invalidateCache in interface TSLCertificateSource

getSummary

public eu.europa.esig.dss.spi.tsl.TLValidationJobSummary getSummary()

Specified by:

getSummary in interface TSLCertificateSource

Overrides:

getSummary in class eu.europa.esig.dss.spi.tsl.TrustedListsCertificateSource

refresh

public void refresh()

Specified by:

refresh in interface TSLCertificateSource