How to check with Java and OCSP that the certificate is not revoked

Viewed 41

How to check with Java and OCSP that the certificate is not revoked? For me the best choise would be use some programmatic solution, because I'm calling the OCSP check from the custom code. I want just call something like OCSPChecker.checkCertificateRevocationStatus method.

The Oracle has the internal sun.security.provider.certpath.OCSP class for this, but it's not good habit to use the internal class.

This Stackoverflow page offers deep information about the issue, but further link resources Java Secure Socket Extension (JSSE) Reference Guide and Java PKI Programmer's Guide seem quite complicated.

So what is the easiest way to do the certificate revocation check programatically with OCSP and Java? I prefer basic public Java API solution, but also simple open source libraries could be used.

0 Answers
Related