PKIXRevocationChecker.Option

public static final enum PKIXRevocationChecker.Option
extends Enum<PKIXRevocationChecker.Option>

java.lang.Object
   ↳ java.lang.Enum<java.security.cert.PKIXRevocationChecker.Option>
     ↳ java.security.cert.PKIXRevocationChecker.Option


Various revocation options that can be specified for the revocation checking mechanism.

Summary

Enum values

PKIXRevocationChecker.Option  NO_FALLBACK

Disable the fallback mechanism. 

PKIXRevocationChecker.Option  ONLY_END_ENTITY

Only check the revocation status of end-entity certificates. 

PKIXRevocationChecker.Option  PREFER_CRLS

Prefer CRLs to OSCP. 

PKIXRevocationChecker.Option  SOFT_FAIL

Allow revocation check to succeed if the revocation status cannot be determined for one of the following reasons:

  • The CRL or OCSP response cannot be obtained because of a network error. 

Public methods

static PKIXRevocationChecker.Option valueOf(String name)
static final Option[] values()

Inherited methods

final Object clone()

Throws CloneNotSupportedException.

final int compareTo(PKIXRevocationChecker.Option o)

Compares this enum with the specified object for order.

final boolean equals(Object other)

Returns true if the specified object is equal to this enum constant.

final void finalize()

enum classes cannot have finalize methods.

final Class<PKIXRevocationChecker.Option> getDeclaringClass()

Returns the Class object corresponding to this enum constant's enum type.

final int hashCode()

Returns a hash code for this enum constant.

final String name()

Returns the name of this enum constant, exactly as declared in its enum declaration.

final int ordinal()

Returns the ordinal of this enumeration constant (its position in its enum declaration, where the initial constant is assigned an ordinal of zero).

String toString()

Returns the name of this enum constant, as contained in the declaration.

static <T extends Enum<T>> T valueOf(Class<T> enumClass, String name)

Returns the enum constant of the specified enum class with the specified name.

Object clone()

Creates and returns a copy of this object.

boolean equals(Object obj)

Indicates whether some other object is "equal to" this one.

void finalize()

Called by the garbage collector on an object when garbage collection determines that there are no more references to the object.

final Class<?> getClass()

Returns the runtime class of this Object.

int hashCode()

Returns a hash code value for the object.

final void notify()

Wakes up a single thread that is waiting on this object's monitor.

final void notifyAll()

Wakes up all threads that are waiting on this object's monitor.

String toString()

Returns a string representation of the object.

final void wait(long timeoutMillis, int nanos)

Causes the current thread to wait until it is awakened, typically by being notified or interrupted, or until a certain amount of real time has elapsed.

final void wait(long timeoutMillis)

Causes the current thread to wait until it is awakened, typically by being notified or interrupted, or until a certain amount of real time has elapsed.

final void wait()

Causes the current thread to wait until it is awakened, typically by being notified or interrupted.

abstract int compareTo(PKIXRevocationChecker.Option o)

Compares this object with the specified object for order.

Enum values

NO_FALLBACK

Added in API level 24
public static final PKIXRevocationChecker.Option NO_FALLBACK

Disable the fallback mechanism.

ONLY_END_ENTITY

Added in API level 24
public static final PKIXRevocationChecker.Option ONLY_END_ENTITY

Only check the revocation status of end-entity certificates.

PREFER_CRLS

Added in API level 24
public static final PKIXRevocationChecker.Option PREFER_CRLS

Prefer CRLs to OSCP. The default behavior is to prefer OCSP. Each PKIX implementation should document further details of their specific preference rules and fallback policies.

SOFT_FAIL

Added in API level 24
public static final PKIXRevocationChecker.Option SOFT_FAIL

Allow revocation check to succeed if the revocation status cannot be determined for one of the following reasons:

  • The CRL or OCSP response cannot be obtained because of a network error.
  • The OCSP responder returns one of the following errors specified in section 2.3 of RFC 2560: internalError or tryLater.

Note that these conditions apply to both OCSP and CRLs, and unless the NO_FALLBACK option is set, the revocation check is allowed to succeed only if both mechanisms fail under one of the conditions as stated above. Exceptions that cause the network errors are ignored but can be later retrieved by calling the getSoftFailExceptions method.

Public methods

valueOf

public static PKIXRevocationChecker.Option valueOf (String name)

Parameters
name String

values

public static final Option[] values ()

Returns
Option[]