jdk/src/java.base/share/classes/sun/security/provider/certpath/RevocationChecker.java
equal
deleted
inserted
replaced
1 /* |
1 /* |
2 * Copyright (c) 2012, 2014, Oracle and/or its affiliates. All rights reserved. |
2 * Copyright (c) 2012, 2015, Oracle and/or its affiliates. All rights reserved. |
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
4 * |
4 * |
5 * This code is free software; you can redistribute it and/or modify it |
5 * This code is free software; you can redistribute it and/or modify it |
6 * under the terms of the GNU General Public License version 2 only, as |
6 * under the terms of the GNU General Public License version 2 only, as |
7 * published by the Free Software Foundation. Oracle designates this |
7 * published by the Free Software Foundation. Oracle designates this |
341 private void check(X509Certificate xcert, |
341 private void check(X509Certificate xcert, |
342 Collection<String> unresolvedCritExts, |
342 Collection<String> unresolvedCritExts, |
343 PublicKey pubKey, boolean crlSignFlag) |
343 PublicKey pubKey, boolean crlSignFlag) |
344 throws CertPathValidatorException |
344 throws CertPathValidatorException |
345 { |
345 { |
|
346 if (debug != null) { |
|
347 debug.println("RevocationChecker.check: checking cert" + |
|
348 "\n SN: " + Debug.toHexString(xcert.getSerialNumber()) + |
|
349 "\n Subject: " + xcert.getSubjectX500Principal() + |
|
350 "\n Issuer: " + xcert.getIssuerX500Principal()); |
|
351 } |
346 try { |
352 try { |
347 if (onlyEE && xcert.getBasicConstraints() != -1) { |
353 if (onlyEE && xcert.getBasicConstraints() != -1) { |
348 if (debug != null) { |
354 if (debug != null) { |
349 debug.println("Skipping revocation check, not end " + |
355 debug.println("Skipping revocation check; cert is not " + |
350 "entity cert"); |
356 "an end entity cert"); |
351 } |
357 } |
352 return; |
358 return; |
353 } |
359 } |
354 switch (mode) { |
360 switch (mode) { |
355 case PREFER_OCSP: |
361 case PREFER_OCSP: |