14  * version 2 for more details (a copy is included in the LICENSE file that
  15  * accompanied this code).
  16  *
  17  * You should have received a copy of the GNU General Public License version
  18  * 2 along with this work; if not, write to the Free Software Foundation,
  19  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  20  *
  21  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
  22  * or visit www.oracle.com if you need additional information or have any
  23  * questions.
  24  */
  25 
  26 package sun.security.provider.certpath;
  27 
  28 import java.io.IOException;
  29 import java.math.BigInteger;
  30 import java.util.*;
  31 import java.security.AccessController;
  32 import java.security.PrivilegedAction;
  33 import java.security.Security;
  34 import java.security.cert.*;




  35 import java.security.cert.CertPathValidatorException.BasicReason;







  36 import java.net.URI;
  37 import java.net.URISyntaxException;
  38 import javax.security.auth.x500.X500Principal;
  39 
  40 import static sun.security.provider.certpath.OCSP.*;
  41 import sun.security.util.Debug;
  42 import sun.security.x509.*;
  43 
  44 /**
  45  * OCSPChecker is a <code>PKIXCertPathChecker</code> that uses the
  46  * Online Certificate Status Protocol (OCSP) as specified in RFC 2560
  47  * <a href="http://www.ietf.org/rfc/rfc2560.txt">
  48  * http://www.ietf.org/rfc/rfc2560.txt</a>.
  49  *
  50  * @author      Ram Marti
  51  */
  52 class OCSPChecker extends PKIXCertPathChecker {
  53 
  54     static final String OCSP_ENABLE_PROP = "ocsp.enable";
  55     static final String OCSP_URL_PROP = "ocsp.responderURL";

  14  * version 2 for more details (a copy is included in the LICENSE file that
  15  * accompanied this code).
  16  *
  17  * You should have received a copy of the GNU General Public License version
  18  * 2 along with this work; if not, write to the Free Software Foundation,
  19  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  20  *
  21  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
  22  * or visit www.oracle.com if you need additional information or have any
  23  * questions.
  24  */
  25 
  26 package sun.security.provider.certpath;
  27 
  28 import java.io.IOException;
  29 import java.math.BigInteger;
  30 import java.util.*;
  31 import java.security.AccessController;
  32 import java.security.PrivilegedAction;
  33 import java.security.Security;
  34 import java.security.cert.Certificate;
  35 import java.security.cert.CertificateException;
  36 import java.security.cert.CertificateRevokedException;
  37 import java.security.cert.CertPath;
  38 import java.security.cert.CertPathValidatorException;
  39 import java.security.cert.CertPathValidatorException.BasicReason;
  40 import java.security.cert.CertStore;
  41 import java.security.cert.CertStoreException;
  42 import java.security.cert.PKIXCertPathChecker;
  43 import java.security.cert.PKIXParameters;
  44 import java.security.cert.TrustAnchor;
  45 import java.security.cert.X509Certificate;
  46 import java.security.cert.X509CertSelector;
  47 import java.net.URI;
  48 import java.net.URISyntaxException;
  49 import javax.security.auth.x500.X500Principal;
  50 
  51 import static sun.security.provider.certpath.OCSP.*;
  52 import sun.security.util.Debug;
  53 import sun.security.x509.*;
  54 
  55 /**
  56  * OCSPChecker is a <code>PKIXCertPathChecker</code> that uses the
  57  * Online Certificate Status Protocol (OCSP) as specified in RFC 2560
  58  * <a href="http://www.ietf.org/rfc/rfc2560.txt">
  59  * http://www.ietf.org/rfc/rfc2560.txt</a>.
  60  *
  61  * @author      Ram Marti
  62  */
  63 class OCSPChecker extends PKIXCertPathChecker {
  64 
  65     static final String OCSP_ENABLE_PROP = "ocsp.enable";
  66     static final String OCSP_URL_PROP = "ocsp.responderURL";