Examples of java.security.cert.X509Certificate.checkValidity()

Class java.security.cert.X509Certificate

Examples of java.security.cert.X509Certificate.checkValidity()

java.security.cert.X509Certificate.checkValidity()
Checks that the certificate is currently valid. It is if the current date and time are within the validity period given in the certificate.
The validity period consists of two date/time values: the first and last dates (and times) on which the certificate is valid. It is defined in ASN.1 as:
```
 validity             Validity Validity ::= SEQUENCE { notBefore      CertificateValidityDate, notAfter       CertificateValidityDate }
 CertificateValidityDate ::= CHOICE { utcTime        UTCTime, generalTime    GeneralizedTime } 
```
@exception CertificateExpiredException if the certificate has expired. @exception CertificateNotYetValidException if the certificate is notyet valid.

                    X509Certificate  caCert = (X509Certificate) keyStore.getCertificate(alias);
                    if (caCert == null) {
                        keyStore = null; // no CA key - probably the wrong store type.
                        break; // cannot continue
                    } else {
                        caCert.checkValidity(new Date(System.currentTimeMillis()+DateUtils.MILLIS_PER_DAY));
                        log.info("Valid alias found for " + alias);
                    }
                }
            } catch (IOException e) { // store is faulty, we need to recreate it
                keyStore = null; // if cert is not valid, flag up to recreate it

View Full Code Here

    private void initJMeterKeyStore() throws IOException, GeneralSecurityException {
        if (storePassword  != null) { // Assume we have already created the store
            try {
                keyStore = getKeyStore(storePassword.toCharArray());
                X509Certificate  caCert = (X509Certificate) keyStore.getCertificate(JMETER_SERVER_ALIAS);
                caCert.checkValidity(new Date(System.currentTimeMillis()+DateUtils.MILLIS_PER_DAY));
            } catch (Exception e) { // store is faulty, we need to recreate it
                keyStore = null; // if cert is not valid, flag up to recreate it
                log.warn("Could not open expected file or certificate is not valid " + CERT_PATH_ABS  + " " + e.getMessage());
            }
        }

View Full Code Here

          boolean tmpAddAlias = true;
          if (tmpCert instanceof X509Certificate) {
            final X509Certificate tmpX509 = (X509Certificate) tmpCert;
            if (checkValidity) {
              try {
                tmpX509.checkValidity();
              } catch (CertificateExpiredException e) {
                options.log("console.certificateExpired", tmpAlias);
                tmpAddAlias = false;
              } catch (CertificateNotYetValidException e) {
                options.log("console.certificateNotYetValid", tmpAlias);

View Full Code Here

        // Add subject alternative name extension
        certGenerator.addExtension(X509Extensions.SubjectAlternativeName, critical, subjectAltNames);


        X509Certificate cert =
                certGenerator.generateX509Certificate(privKey, "BC", new SecureRandom());
        cert.checkValidity(new Date());
        cert.verify(pubKey);


        return cert;
    }

View Full Code Here

                fis = new FileInputStream(file);
                X509Certificate cert =
                    (X509Certificate) cf.generateCertificate(fis);


                //add to ArrayList
                cert.checkValidity();
                this.certs.add(cert);


                dn = cert.getSubjectX500Principal().getName();
                added = true;
            } catch (FileNotFoundException ex) {

View Full Code Here

                // check validity period
                // 86400000 milliseconds in one day
                long curPlusValidity = System.currentTimeMillis() + 86400000
                        * (new Integer(args[20])).intValue();
                // 300000 ms is 5 minutes
                cert.checkValidity(new Date(curPlusValidity - 300000));


                assertEquals(errMsgPrefix + "unexpected serial number. ",
                        new BigInteger(args[24]), cert.getSerialNumber());
                assertEquals(errMsgPrefix + "unexpected version. ",
                        new Integer(args[22]).intValue(), cert.getVersion());

View Full Code Here

  public void verifyChain(Certificate[] chain) throws GeneralSecurityException {
    // Loop over the certificates in the chain
    for (int i = 0; i < chain.length; i++) {
      X509Certificate cert = (X509Certificate) chain[i];
      // check if the certificate was/is valid
      cert.checkValidity(signDate);
      // check if the previous certificate was issued by this certificate
      if (i > 0)
        chain[i-1].verify(chain[i].getPublicKey());
    }
    LOGGER.info("All certificates are valid on " + signDate.toString());

View Full Code Here

    v3CertGen.addExtension(X509Extensions.BasicConstraints, true,
            new BasicConstraints(0));


    // X509Certificate cert = v3CertGen.generateX509Certificate(caPrivKey);
    final X509Certificate cert = v3CertGen.generate(caPriKey, "BC");
    cert.checkValidity(new Date());
    cert.verify(caCert.getPublicKey());


    // cert.verify(caCert.getPublicKey());
    // cert.getEncoded();

View Full Code Here

        false,
        new DERSequence(typicalCAExtendedKeyUsages));
    
    X509Certificate cert = v3CertGen.generate(keyPair.getPrivate(), "BC");
    
    cert.checkValidity(new Date());
    
    cert.verify(keyPair.getPublic());
    
    return cert;
  }

View Full Code Here

            }


            // certificate valid?
            try
            {
                cert.checkValidity(validDate);
            }
            catch (CertificateNotYetValidException cnve)
            {
                ErrorBundle msg = new ErrorBundle(RESOURCE_NAME,"CertPathReviewer.certificateNotYetValid",
                        new Object[] {new TrustedInput(cert.getNotBefore())});

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.