Switched PKI configuration to prefer OCSP over CRL.

git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@616 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4

1 files changed, 3 insertions, 0 deletions

diff --git a/bkucommon/src/main/java/at/gv/egiz/bku/conf/CertValidatorImpl.java b/bkucommon/src/main/java/at/gv/egiz/bku/conf/CertValidatorImpl.java
index 3b2d1b99..766fe355 100644
--- a/bkucommon/src/main/java/at/gv/egiz/bku/conf/CertValidatorImpl.java
+++ b/bkucommon/src/main/java/at/gv/egiz/bku/conf/CertValidatorImpl.java
@@ -11,6 +11,7 @@ import iaik.pki.PKIException;
 import iaik.pki.PKIFactory;

 import iaik.pki.PKIModule;

 import iaik.pki.PKIProfile;

+import iaik.pki.revocation.RevocationSourceTypes;

 import iaik.pki.store.certstore.CertStoreParameters;

 import iaik.pki.store.certstore.directory.DefaultDirectoryCertStoreParameters;

 import iaik.pki.store.truststore.DefaultTrustStoreProfile;

@@ -84,6 +85,8 @@ public class CertValidatorImpl implements CertValidator {
         TrustStoreTypes.DIRECTORY, caDir.getAbsolutePath());

     profile = new DefaultPKIProfile(trustProfile);

     ((DefaultPKIProfile)profile).setAutoAddCertificates(true);

+    ((DefaultPKIProfile) profile).setPreferredServiceOrder(new String[] {

+        RevocationSourceTypes.OCSP, RevocationSourceTypes.CRL });

   }

 

   /* (non-Javadoc)