Interface OcspResponse

public interface OcspResponse
A parsed OCSP response (RFC 6960), used to validate a generated/persisted OCSP status object at a service boundary.

  • Method Details

    • isSuccessful

      boolean isSuccessful()
      Indicates whether the response status is successful.
      Returns:
      true if successful

    • producedAt

      Instant producedAt()
      Returns the producedAt time of the basic response.
      Returns:
      the production time

    • responderId

      ResponderId responderId()
      Returns the responder identity.
      Returns:
      the responder id

    • responses

      List<OcspResponse.SingleResponse> responses()
      Returns the individual certificate-status responses.
      Returns:
      the single responses

    • verifySignature

      boolean verifySignature(PublicKey responderKey)
      Verifies the basic response signature under the responder public key.
      Parameters:
      responderKey - the responder public key
      Returns:
      true if the signature is valid

    • nonce

      Optional<byte[]> nonce()
      Returns the response nonce, if present.
      Returns:
      the nonce bytes, or empty

    • certificates

      List<X509Certificate> certificates()
      Returns the responder certificates embedded in the response, in order.
      Returns:
      the embedded certificates (possibly empty)

    • signatureAlgorithm

      AlgorithmIdentifier signatureAlgorithm()
      Returns the signature algorithm identifier of the basic response.
      Returns:
      the signature algorithm identifier