48  *

    48  *

    49  * <p>Each {@code PKIXRevocationChecker} must be able to check the revocation

    49  * <p>Each {@code PKIXRevocationChecker} must be able to check the revocation

    50  * status of certificates with OCSP and CRLs. By default, OCSP is the

    50  * status of certificates with OCSP and CRLs. By default, OCSP is the

    51  * preferred mechanism for checking revocation status, with CRLs as the

    51  * preferred mechanism for checking revocation status, with CRLs as the

    52  * fallback mechanism. However, this preference can be switched to CRLs with

    52  * fallback mechanism. However, this preference can be switched to CRLs with

    54  *

    54  *

    55  * <p>A {@code PKIXRevocationChecker} is obtained by calling the

    55  * <p>A {@code PKIXRevocationChecker} is obtained by calling the

    56  * {@link CertPathValidator#getRevocationChecker getRevocationChecker} method

    56  * {@link CertPathValidator#getRevocationChecker getRevocationChecker} method

    57  * of a PKIX {@code CertPathValidator}. Additional parameters and options

    57  * of a PKIX {@code CertPathValidator}. Additional parameters and options

    58  * specific to revocation can be set (by calling {@link #setOCSPResponder}

    58  * specific to revocation can be set (by calling {@link #setOCSPResponder}