Searched refs:OCSP (Results 1 - 14 of 14) sorted by relevance

/openjdk9/jdk/src/java.base/share/classes/sun/security/ssl/
H A DCertStatusReqItemV2.java35 * which allows the client to request that the server perform OCSP
78 // There is currently only one known status type (OCSP)
80 if (statReqType.equals(StatusRequestType.OCSP) ||
106 if (statReqType == StatusRequestType.OCSP ||
134 if (statReqType == StatusRequestType.OCSP ||
H A DCertStatusReqExtension.java33 * which allows the client to request that the server perform OCSP
98 // There is currently only one known status type (OCSP)
100 if (statReqType == StatusRequestType.OCSP) {
124 if (statReqType == StatusRequestType.OCSP) {
H A DStatusRequestType.java64 static final StatusRequestType OCSP = e(0x01, "ocsp"); field in class:StatusRequestType
H A DStatusResponseManager.java38 import sun.security.provider.certpath.OCSP;
127 * Get the default OCSP responder URI, if previously set.
129 * @return the current default OCSP responder URI, or {@code null} if
150 * pass OCSP Extensions in the TLS {@code status_request[_v2]} extensions,
182 * @return a {@code URI} containing the address to the OCSP responder, or
193 debugLog("OCSP NoCheck extension found. OCSP will be skipped");
199 URI certURI = OCSP.getResponderURI(cert);
215 * This will find OCSP responses from the cache, or failing that, directly
216 * contact the OCSP responde
[all...]
H A DHandshakeMessage.java395 extensions.add(new CertStatusReqExtension(StatusRequestType.OCSP,
402 // OCSP_MULTI and OCSP request list items.
407 itemList.add(new CertStatusReqItemV2(StatusRequestType.OCSP, osr));
683 * respective OCSP responses
685 * @param type an indication of the type of response (OCSP or OCSP_MULTI)
686 * @param responses a {@code List} of OCSP responses in DER-encoded form.
687 * For the OCSP type, only the first entry in the response list is
690 * allowed for the OCSP type. For the OCSP_MULTI type, each entry in
692 * Server Certificate message. Where an OCSP response does not exist,
696 * OCSP respons
[all...]
H A DServerHandshaker.java2078 if (ocspIdx < 0 && curType == StatusRequestType.OCSP) {
2086 // If the type is OCSP, then the request
2121 if (type == StatusRequestType.OCSP) {
2122 // If the type is OCSP, then the request is guaranteed
2145 // Get the OCSP responses from the StatusResponseManager
2154 if (type == StatusRequestType.OCSP) {
/openjdk9/jdk/test/sun/security/ssl/StatusStapling/java.base/sun/security/ssl/
H A DCertStatusReqExtensionTests.java155 StatusRequestType.OCSP, basicStatReq);
163 // (e.g. OCSP/OCSP_MULTI)
176 new CertStatusReqExtension(StatusRequestType.OCSP,
196 new CertStatusReqExtension(StatusRequestType.OCSP,
250 } else if (!csre.getType().equals(StatusRequestType.OCSP)) {
270 } else if (!(csre.getType().equals(StatusRequestType.OCSP))) {
305 // Set the leading byte to 1 (OCSP type) and run again
308 junkData[0] = (byte)StatusRequestType.OCSP.id;
H A DCertStatusReqItemV2Tests.java84 // A CSRIV2 (ocsp) with one Responder ID (byName: CN=OCSP Signer)
128 csriNull = new CertStatusReqItemV2(StatusRequestType.OCSP,
148 new CertStatusReqItemV2(StatusRequestType.OCSP,
206 new ResponderId(new X500Principal("CN=OCSP Signer"));
212 if (sType != StatusRequestType.OCSP) {
235 // Create a CSRIV2 out of random data. A non-OCSP/OCSP_MULTI
269 // Test the parsing of the default OCSP/OCSP_MULTI extensions
288 if (sType != StatusRequestType.OCSP) {
290 "expected OCSP (1), got " + sType.id);
346 new ResponderId(new X500Principal("CN=OCSP Signe
[all...]
H A DStatusReqSelection.java85 private static SimpleOCSPServer rootOcsp; // Root CA OCSP Responder
86 private static int rootOcspPort; // Port for root OCSP
87 private static SimpleOCSPServer intOcsp; // Intermediate CA OCSP server
88 private static int intOcspPort; // Port for intermediate OCSP
126 // Create the PKI we will use for the test and start the OCSP servers
149 "responder IDs but provides the OCSP nonce extension",
156 "OCSP as a default request)",
163 "status_request_v2 that has a default OCSP item and " +
274 exts.add(new CertStatusReqExtension(StatusRequestType.OCSP,
290 itemList.add(new CertStatusReqItemV2(StatusRequestType.OCSP, os
[all...]
H A DCertStatusReqListV2ExtensionTests.java218 add(new CertStatusReqItemV2(StatusRequestType.OCSP, osr));
243 // (e.g. OCSP/OCSP_MULTI)
H A DStatusResponseManagerTests.java62 static SimpleOCSPServer rootOcsp; // Root CA OCSP Responder
63 static int rootOcspPort; // Port number for root OCSP
64 static SimpleOCSPServer intOcsp; // Intermediate CA OCSP Responder
65 static int intOcspPort; // Port number for intermed. OCSP
72 put("Basic OCSP fetch test", testOcspFetch);
78 // Create the CAs and OCSP responders
106 // Get OCSP responses for non-root certs in the chain
108 StatusRequestType.OCSP, oReq, chain, 5000,
144 // Get OCSP responses for non-root certs in the chain
182 // Get OCSP response
[all...]
/openjdk9/jdk/src/java.base/share/classes/sun/security/provider/certpath/
H A DOCSP.java59 * OCSP. It is not a PKIXCertPathChecker and therefore can be used outside of
67 public final class OCSP { class
75 * used for the OCSP check. A timeout of zero is interpreted as
81 * Initialize the timeout length by getting the OCSP timeout
96 private OCSP() {} method in class:OCSP
100 * Obtains the revocation status of a certificate using OCSP.
104 * @param responderURI the URI of the OCSP responder
105 * @param responderCert the OCSP responder's certificate
106 * @param date the time the validity of the OCSP responder's certificate
110 * communicating with the OCSP responde
[all...]
H A DRevocationChecker.java44 import static sun.security.provider.certpath.OCSP.*;
294 "(set using the OCSP security properties).");
704 // The algorithm constraints of the OCSP trusted responder certificate
714 // check if there is a cached OCSP response available
718 debug.println("Found cached OCSP response");
735 : OCSP.getResponderURI(currCert);
738 "Certificate does not specify OCSP responder", null,
742 response = OCSP.check(Collections.singletonList(certId),
H A DOCSPResponse.java53 * This class is used to process an OCSP response.
54 * The OCSP Response is defined
151 // allowed when checking validity of OCSP responses
156 * in milliseconds, to be used for the OCSP check.
161 * Initialize the maximum allowable clock skew by getting the OCSP
192 * Create an OCSP response from its ASN.1 DER encoding.
194 * @param bytes The DER-encoded bytes for an OCSP response
204 throw new IOException("Bad encoding in OCSP response: " +
218 debug.println("OCSP response status: " + responseStatus);
237 "of OCSP respons
[all...]

Completed in 122 milliseconds