/**
* Verifies certificates against a list of CRLs and OCSP responses.
* @param signingCert
* @param issuerCert
* @return a list of <code>VerificationOK</code> objects.
* The list will be empty if the certificate couldn't be verified.
* @throws GeneralSecurityException
* @throws IOException
* @see com.itextpdf.text.pdf.security.RootStoreVerifier#verify(java.security.cert.X509Certificate, java.security.cert.X509Certificate)
*/
override public List <VerificationOK> Verify(X509Certificate signCert, X509Certificate issuerCert, DateTime sigDate)
{
// we'll verify agains the rootstore (if present)
RootStoreVerifier rootStoreVerifier = new RootStoreVerifier(verifier);
rootStoreVerifier.Certificates = certificates;
// We'll verify against a list of CRLs
CrlVerifier crlVerifier = new CrlVerifier(rootStoreVerifier, GetCRLsFromDSS());
crlVerifier.Certificates = certificates;
crlVerifier.OnlineCheckingAllowed = latestRevision || onlineCheckingAllowed;
// We'll verify against a list of OCSPs
OcspVerifier ocspVerifier = new OcspVerifier(crlVerifier, GetOCSPResponsesFromDSS());
ocspVerifier.Certificates = certificates;
ocspVerifier.OnlineCheckingAllowed = latestRevision || onlineCheckingAllowed;
// We verify the chain
return(ocspVerifier.Verify(signCert, issuerCert, sigDate));
}
/**
* Verifies certificates against a list of CRLs and OCSP responses.
* @param signingCert
* @param issuerCert
* @return a list of <code>VerificationOK</code> objects.
* The list will be empty if the certificate couldn't be verified.
* @throws GeneralSecurityException
* @throws IOException
* @see com.itextpdf.text.pdf.security.RootStoreVerifier#verify(java.security.cert.X509Certificate, java.security.cert.X509Certificate)
*/
override public List<VerificationOK> Verify(X509Certificate signCert, X509Certificate issuerCert, DateTime sigDate) {
// we'll verify agains the rootstore (if present)
RootStoreVerifier rootStoreVerifier = new RootStoreVerifier(verifier);
rootStoreVerifier.Certificates = certificates;
// We'll verify against a list of CRLs
CrlVerifier crlVerifier = new CrlVerifier(rootStoreVerifier, GetCRLsFromDSS());
crlVerifier.Certificates = certificates;
crlVerifier.OnlineCheckingAllowed = latestRevision || onlineCheckingAllowed;
// We'll verify against a list of OCSPs
OcspVerifier ocspVerifier = new OcspVerifier(crlVerifier, GetOCSPResponsesFromDSS());
ocspVerifier.Certificates = certificates;
ocspVerifier.OnlineCheckingAllowed = latestRevision || onlineCheckingAllowed;
// We verify the chain
return ocspVerifier.Verify(signCert, issuerCert, sigDate);
}
