From d370f68a9e011108656bc2c1c0b6647d3d69aa65 Mon Sep 17 00:00:00 2001 From: mcentner Date: Mon, 1 Feb 2010 15:48:59 +0000 Subject: Switched PKI configuration to prefer OCSP over CRL. git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@616 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4 --- bkucommon/src/main/java/at/gv/egiz/bku/conf/CertValidatorImpl.java | 3 +++ 1 file changed, 3 insertions(+) diff --git a/bkucommon/src/main/java/at/gv/egiz/bku/conf/CertValidatorImpl.java b/bkucommon/src/main/java/at/gv/egiz/bku/conf/CertValidatorImpl.java index 3b2d1b99..766fe355 100644 --- a/bkucommon/src/main/java/at/gv/egiz/bku/conf/CertValidatorImpl.java +++ b/bkucommon/src/main/java/at/gv/egiz/bku/conf/CertValidatorImpl.java @@ -11,6 +11,7 @@ import iaik.pki.PKIException; import iaik.pki.PKIFactory; import iaik.pki.PKIModule; import iaik.pki.PKIProfile; +import iaik.pki.revocation.RevocationSourceTypes; import iaik.pki.store.certstore.CertStoreParameters; import iaik.pki.store.certstore.directory.DefaultDirectoryCertStoreParameters; import iaik.pki.store.truststore.DefaultTrustStoreProfile; @@ -84,6 +85,8 @@ public class CertValidatorImpl implements CertValidator { TrustStoreTypes.DIRECTORY, caDir.getAbsolutePath()); profile = new DefaultPKIProfile(trustProfile); ((DefaultPKIProfile)profile).setAutoAddCertificates(true); + ((DefaultPKIProfile) profile).setPreferredServiceOrder(new String[] { + RevocationSourceTypes.OCSP, RevocationSourceTypes.CRL }); } /* (non-Javadoc) -- cgit v1.2.3