Skip to content

Commit 332041b

Browse files
committed
Rename enableOCSP to enableRevocationCheck
Since verification with CRL-DP is introduced and it is enabled using this parameter the name is modified to be not related only to OCSP.
1 parent 264ea74 commit 332041b

File tree

3 files changed

+43
-22
lines changed

3 files changed

+43
-22
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
= Paramater Changes =
2+
3+
== Rename enableOCSP to enableRevocationCheck ==
4+
5+
The `enableOCSP` param has been deprecated. Use `enableRevocationCheck` instead.

tomcat/src/main/java/org/dogtagpki/jss/tomcat/Http11NioProtocol.java

+11-3
Original file line numberDiff line numberDiff line change
@@ -73,12 +73,20 @@ public void setServerCertNickFile(String serverCertNickFile) {
7373
tomcatjss.setServerCertNickFile(serverCertNickFile);
7474
}
7575

76-
public boolean getEnabledOCSP() {
77-
return tomcatjss.getEnableOCSP();
76+
public boolean getEnableOCSP() {
77+
return tomcatjss.getEnableRevocationCheck();
7878
}
7979

8080
public void setEnableOCSP(boolean enableOCSP) {
81-
tomcatjss.setEnableOCSP(enableOCSP);
81+
tomcatjss.setEnableRevocationCheck(enableOCSP);
82+
}
83+
84+
public boolean getEnableRevocationCheck() {
85+
return tomcatjss.getEnableRevocationCheck();
86+
}
87+
88+
public void setEnableRevocationCheck(boolean enableRevocationCheck) {
89+
tomcatjss.setEnableRevocationCheck(enableRevocationCheck);
8290
}
8391

8492
public String getOcspResponderURL() {

tomcat/src/main/java/org/dogtagpki/jss/tomcat/TomcatJSS.java

+27-19
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,7 @@ public class TomcatJSS implements SSLSocketListener {
8888
boolean requireClientAuth;
8989
boolean wantClientAuth;
9090

91-
boolean enableOCSP;
91+
boolean enableRevocationCheck;
9292
String ocspResponderURL;
9393
String ocspResponderCertNickname;
9494
int ocspCacheSize = 1000; // entries
@@ -183,12 +183,12 @@ public boolean getWantClientAuth() {
183183
return wantClientAuth;
184184
}
185185

186-
public boolean getEnableOCSP() {
187-
return enableOCSP;
186+
public boolean getEnableRevocationCheck() {
187+
return enableRevocationCheck;
188188
}
189189

190-
public void setEnableOCSP(boolean enableOCSP) {
191-
this.enableOCSP = enableOCSP;
190+
public void setEnableRevocationCheck(boolean enableRevocationCheck) {
191+
this.enableRevocationCheck = enableRevocationCheck;
192192
}
193193

194194
public String getOcspResponderURL() {
@@ -269,7 +269,11 @@ public void loadJSSConfig(Properties config) {
269269

270270
String enableOCSPProp = config.getProperty("enableOCSP");
271271
if (enableOCSPProp != null)
272-
setEnableOCSP(Boolean.parseBoolean(enableOCSPProp));
272+
setEnableRevocationCheck(Boolean.parseBoolean(enableOCSPProp));
273+
274+
String enableRevocationCheckProp = config.getProperty("enableRevocationCheck");
275+
if (enableRevocationCheckProp != null)
276+
setEnableRevocationCheck(Boolean.parseBoolean(enableRevocationCheckProp));
273277

274278
String ocspResponderURLProp = config.getProperty("ocspResponderURL");
275279
if (ocspResponderURLProp != null)
@@ -328,31 +332,35 @@ public void loadTomcatConfig(Document document) throws XPathExpressionException
328332
}
329333

330334
String certDbProp = connector.getAttribute("certdbDir");
331-
if (certDbProp != null)
335+
if (StringUtils.isNotEmpty(certDbProp))
332336
setCertdbDir(certDbProp);
333337

334338
String passwordClassProp = connector.getAttribute("passwordClass");
335-
if (passwordClassProp != null)
339+
if (StringUtils.isNotEmpty(passwordClassProp))
336340
setPasswordClass(passwordClassProp);
337341

338342
String passwordFileProp = connector.getAttribute("passwordFile");
339-
if (passwordFileProp != null)
343+
if (StringUtils.isNotEmpty(passwordFileProp))
340344
setPasswordFile(passwordFileProp);
341345

342346
String serverCertNickFileProp = connector.getAttribute("serverCertNickFile");
343-
if (serverCertNickFileProp != null)
347+
if (StringUtils.isNotEmpty(serverCertNickFileProp))
344348
setServerCertNickFile(serverCertNickFileProp);
345349

346350
String enableOCSPProp = connector.getAttribute("enableOCSP");
347-
if (enableOCSPProp != null)
348-
setEnableOCSP(Boolean.parseBoolean(enableOCSPProp));
351+
if (StringUtils.isNotEmpty(enableOCSPProp))
352+
setEnableRevocationCheck(Boolean.parseBoolean(enableOCSPProp));
353+
354+
String enableRevocationCheckProp = connector.getAttribute("enableRevocationCheck");
355+
if (StringUtils.isNotEmpty(enableRevocationCheckProp))
356+
setEnableRevocationCheck(Boolean.parseBoolean(enableRevocationCheckProp));
349357

350358
String ocspResponderURLProp = connector.getAttribute("ocspResponderURL");
351-
if (ocspResponderURLProp != null)
359+
if (StringUtils.isNotEmpty(ocspResponderURLProp))
352360
setOcspResponderURL(ocspResponderURLProp);
353361

354362
String ocspResponderCertNicknameProp = connector.getAttribute("ocspResponderCertNickname");
355-
if (ocspResponderCertNicknameProp != null)
363+
if (StringUtils.isNotEmpty(ocspResponderCertNicknameProp))
356364
setOcspResponderCertNickname(ocspResponderCertNicknameProp);
357365

358366
String ocspCacheSizeProp = connector.getAttribute("ocspCacheSize");
@@ -469,7 +477,7 @@ public void init() throws KeyDatabaseException, CertDatabaseException, GeneralSe
469477
logger.debug("wantClientAuth: {}", wantClientAuth);
470478

471479
if (requireClientAuth || wantClientAuth) {
472-
configureOCSP();
480+
configureRevocationCheck();
473481
}
474482

475483
// 12 hours = 43200 seconds
@@ -549,12 +557,12 @@ public CryptoToken getToken(String tag) throws NoSuchTokenException {
549557
return null;
550558
}
551559

552-
public void configureOCSP() throws GeneralSecurityException, ConfigurationException {
560+
public void configureRevocationCheck() throws GeneralSecurityException, ConfigurationException {
553561

554-
logger.info("configuring OCSP");
562+
logger.info("configuring Revocation Check");
555563

556-
logger.debug("enableOCSP: {}", enableOCSP);
557-
if (!enableOCSP) {
564+
logger.debug("enableCertificateCheck: {}", enableRevocationCheck);
565+
if (!enableRevocationCheck) {
558566
return;
559567
}
560568

0 commit comments

Comments
 (0)