- All Superinterfaces:
TlsTransportMappingConfig<X509Certificate>
The
TlsTransportMappingConfig interface provides means to plug in a TlsTmSecurityCallback into
a TransportMapping that uses X509Certificates for TLS.- Since:
- 3.6
- Author:
- Frank Fock
-
Method Summary
Modifier and TypeMethodDescriptionGets the (optional and possiblynull) revocation checker for the cert path validation of X509 certificates.Gets the X509 certificate revocation list (CRL) URI, if defined.voidsetPKIXRevocationChecker(PKIXRevocationChecker pkixRevocationChecker) Sets the (optional and possiblynull) revocation checker for the cert path validation of X509 certificates.voidSets the X509 certificate revocation list (CRL) URI, to enable CRL checking.Methods inherited from interface org.snmp4j.transport.tls.TlsTransportMappingConfig
getKeyStore, getKeyStorePassword, getLocalCertificateAlias, getProtocolVersionPropertyName, getProtocolVersions, getSecurityCallback, getTrustStore, getTrustStorePassword, setKeyStore, setKeyStorePassword, setLocalCertificateAlias, setProtocolVersions, setSecurityCallback, setTrustStore, setTrustStorePassword
-
Method Details
-
getPKIXRevocationChecker
PKIXRevocationChecker getPKIXRevocationChecker()Gets the (optional and possiblynull) revocation checker for the cert path validation of X509 certificates.- Returns:
nullto disable cert path validation with CLR checking or a properly configured cert path checker instance.- Since:
- 3.6
-
setPKIXRevocationChecker
Sets the (optional and possiblynull) revocation checker for the cert path validation of X509 certificates.- Parameters:
pkixRevocationChecker-nullto disable cert path validation with CLR checking or a properly configured cert path checker instance.- Since:
- 3.6
-
getX509CertificateRevocationListURI
String getX509CertificateRevocationListURI()Gets the X509 certificate revocation list (CRL) URI, if defined.- Returns:
nullif there is no CRL available/necessary or a URI string that points to a CRL file.- Since:
- 3.6.0
-
setX09CertificateRevocationListURI
Sets the X509 certificate revocation list (CRL) URI, to enable CRL checking.- Parameters:
crlURI-nullif there is no CRL available/necessary or a URI string that points to a CRL file.- Since:
- 3.6.0
-