Examples of java.security.cert.X509Certificate.checkValidity()

Class java.security.cert.X509Certificate

Examples of java.security.cert.X509Certificate.checkValidity()

java.security.cert.X509Certificate.checkValidity()
Checks that the certificate is currently valid. It is if the current date and time are within the validity period given in the certificate.
The validity period consists of two date/time values: the first and last dates (and times) on which the certificate is valid. It is defined in ASN.1 as:
```
 validity             Validity Validity ::= SEQUENCE { notBefore      CertificateValidityDate, notAfter       CertificateValidityDate }
 CertificateValidityDate ::= CHOICE { utcTime        UTCTime, generalTime    GeneralizedTime } 
```
@exception CertificateExpiredException if the certificate has expired. @exception CertificateNotYetValidException if the certificate is notyet valid.

      try {
        cert.checkValidity(new Date(System.currentTimeMillis() + 14 * 24 * 3600 * 1000));
        return "OK";
      } catch (CertificateExpiredException e) {
        try {
          cert.checkValidity(new Date(System.currentTimeMillis()));
          return "EXPIRING";
        } catch (CertificateExpiredException e1) {
        } catch (CertificateNotYetValidException e1) {
          return "ERROR";
        }

View Full Code Here

            X509Certificate  caCert = (X509Certificate) keyStore.getCertificate(CERT_ALIAS);
            if (caCert == null) {
                log.error("Could not find key with alias " + CERT_ALIAS);
                keyStore = null;
            } else {
                caCert.checkValidity(new Date(System.currentTimeMillis()+DateUtils.MILLIS_PER_DAY));
            }
        } catch (Exception e) {
            keyStore = null;
            log.error("Could not open keystore or certificate is not valid " + CERT_PATH_ABS + " " + e.getMessage());
        }

View Full Code Here

                    X509Certificate  caCert = (X509Certificate) keyStore.getCertificate(alias);
                    if (caCert == null) {
                        keyStore = null; // no CA key - probably the wrong store type.
                        break; // cannot continue
                    } else {
                        caCert.checkValidity(new Date(System.currentTimeMillis()+DateUtils.MILLIS_PER_DAY));
                        log.info("Valid alias found for " + alias);
                    }
                }
            } catch (IOException e) { // store is faulty, we need to recreate it
                keyStore = null; // if cert is not valid, flag up to recreate it

View Full Code Here

    private void initJMeterKeyStore() throws IOException, GeneralSecurityException {
        if (storePassword  != null) { // Assume we have already created the store
            try {
                keyStore = getKeyStore(storePassword.toCharArray());
                X509Certificate  caCert = (X509Certificate) keyStore.getCertificate(JMETER_SERVER_ALIAS);
                caCert.checkValidity(new Date(System.currentTimeMillis()+DateUtils.MILLIS_PER_DAY));
            } catch (Exception e) { // store is faulty, we need to recreate it
                keyStore = null; // if cert is not valid, flag up to recreate it
                log.warn("Could not open expected file or certificate is not valid " + CERT_PATH_ABS  + " " + e.getMessage());
            }
        }

View Full Code Here

                           getExtensionValue(cert, "2.5.29.35"))) { //$NON-NLS-1$
            return false;
        }
        if (certificateValid != null) {
            try {
                cert.checkValidity(certificateValid);
            } catch(CertificateExpiredException e) {
                return false;
            } catch(CertificateNotYetValidException e) {
                return false;
            }

View Full Code Here

        v1CertGen.setPublicKey(pubKey);
        v1CertGen.setSignatureAlgorithm("SHA1WithRSAEncryption");


        X509Certificate cert = v1CertGen.generateX509Certificate(privKey);


        cert.checkValidity(new Date());


        cert.verify(pubKey);


        PKCS12BagAttributeCarrier   bagAttr = (PKCS12BagAttributeCarrier)cert;

View Full Code Here

            true,
            new BasicConstraints(0));


        X509Certificate cert = v3CertGen.generateX509Certificate(caPrivKey);


        cert.checkValidity(new Date());


        cert.verify(caCert.getPublicKey());


        PKCS12BagAttributeCarrier   bagAttr = (PKCS12BagAttributeCarrier)cert;

View Full Code Here

            false,
            new AuthorityKeyIdentifierStructure(caPubKey));


        X509Certificate cert = v3CertGen.generateX509Certificate(caPrivKey);


        cert.checkValidity(new Date());


        cert.verify(caPubKey);


        PKCS12BagAttributeCarrier   bagAttr = (PKCS12BagAttributeCarrier)cert;

View Full Code Here

                fis = new FileInputStream(file);
                X509Certificate cert =
                    (X509Certificate) cf.generateCertificate(fis);


                //add to ArrayList
                cert.checkValidity();
                this.certs.add(cert);


                dn = cert.getSubjectDN().getName();
                added = true;
            } catch (FileNotFoundException ex) {

View Full Code Here

            X509Certificate  caCert = (X509Certificate) keyStore.getCertificate(CERT_ALIAS);
            if (caCert == null) {
                log.error("Could not find key with alias " + CERT_ALIAS);
                keyStore = null;
            } else {
                caCert.checkValidity(new Date(System.currentTimeMillis()+DateUtils.MILLIS_PER_DAY));
            }
        } catch (Exception e) {
            keyStore = null;
            log.error("Could not open keystore or certificate is not valid " + CERT_PATH_ABS + " " + e.getMessage());
        }

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.