Is there a best way to check certificate revocation status in Java?

223 views Asked by At

I implemented java code, with java.security framework, which sends OCSP requests to an EJBCA OCSP responder in order to check the certificate revocation status of users who send HTTPS requests to my SOAP WebService.

I call this code from a SOAPHandler, so each time a HTTPS request is sends to my SOAP WebService the SOAPHandler catch it and then calls the code which sends the OCSP request. All of this works well.

My question is, is there java handlers for https connection or a way to make java.security framework calls my PKIXCertPathChecker check method automatically at each HTTPS connection ? It would allow me, in case of HTTPS Persistent Connections, to send OCSP request to EJBCA responder only at connection and not at each requests.

0

There are 0 answers