CertRevocMBean

Overview  |   Related MBeans  |   Attributes  |   Operations

Overview

This MBean represents the configuration of the certificate revocation checking across all certificate authorities. Many of the attributes in this MBean may be overridden per certificate authority using the specific CertRevocCaMBean.

   
Fully Qualified Interface NameIf you use the getMBeanInfo operation in MBeanTypeServiceMBean, supply the following value as this MBean's fully qualified interface name:
weblogic.management.configuration.CertRevocMBean

For more information, see:
Factory Methods No factory methods. Instances of this MBean are created automatically.

Related MBeans

This section describes attributes that provide access to other MBeans.

    CertRevocCas

    Returns the CertRevocCaMBeans representing the certificate authority overrides, which have been configured to be part of this certificate revocation checking configuration.

               
    Factory MethodscreateCertRevocCa (java.lang.String name)

    destroyCertRevocCa (CertRevocCaMBean child)

    Factory methods do not return objects.

    See Using factory methods.
    Lookup OperationlookupCertRevocCa(String name)

    Returns a javax.management.ObjectName for the instance of CertRevocCaMBean named name.
    Privileges Read only
    TypeCertRevocCaMBean[]
    Relationship type: Containment.

    Attributes

    This section describes the following attributes:

    CachingDisabled

    Private property that disables caching in proxies.

           
    Privileges Read only
    Typeboolean
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    CheckingEnabled

    Determines whether certificate revocation checking is enabled.

           
    Privileges Read/Write
    Typeboolean

    CrlCacheRefreshPeriodPercent

    Determines the refresh period for the CRL local cache, expressed as a percentage of the validity period of the CRL.

    For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.

    The validity period is determined by the CRL, and is calculated as the (next reported update time) - (this update time).

    The valid range is 1 through 100.

           
    Privileges Read/Write
    Typeint
    Default Value100
    Minimum value1
    Maximum value100

    CrlCacheType

    Determines the type of CRL cache, related to the physical storage of the CRLs.

    The value specified in this attribute determines which related CrlCacheType* attributes apply. For example, if CrlCacheType is ldap, see related attributes like CrlCacheTypeLdapHostname.

           
    Privileges Read/Write
    Typejava.lang.String
    Default ValueFILE
    Legal Values
    • FILE
    • LDAP

    CrlCacheTypeLdapHostname

    Determines the remote hostname for the LDAP server containing CRLs.

    This attribute applies when value CertRevocMBean#CRL_CACHE_TYPE_LDAP is returned from CrlCacheType.

           
    Privileges Read/Write
    Typejava.lang.String

    CrlCacheTypeLdapPort

    Determines the remote port for the LDAP server containing CRLs.

    This attribute applies when value CertRevocMBean#CRL_CACHE_TYPE_LDAP is returned from CrlCacheType.

    The valid range is -1, 1 through 65535.

           
    Privileges Read/Write
    Typeint
    Default Value-1

    CrlCacheTypeLdapSearchTimeout

    Determines how long to wait for CRL search results from the LDAP server.

    This attribute applies when value CertRevocMBean#CRL_CACHE_TYPE_LDAP is returned from CrlCacheType.

    The valid range is 1 thru 300 seconds.

           
    Privileges Read/Write
    Typeint
    Default Value10
    Minimum value1
    Maximum value300

    CrlDpBackgroundDownloadEnabled

    Determines whether the CRL Distribution Point background downloading, to automatically update the local CRL cache, is enabled.

           
    Privileges Read/Write
    Typeboolean

    CrlDpDownloadTimeout

    Determines the overall timeout for the Distribution Point CRL download, expressed in seconds.

    The valid range is 1 thru 300 seconds.

           
    Privileges Read/Write
    Typelong
    Default Value10
    Minimum value1
    Maximum value300

    CrlDpEnabled

    Determines whether the CRL Distribution Point processing to update the local CRL cache is enabled.

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    FailOnUnknownRevocStatus

    Determines whether certificate path checking should fail, if revocation status could not be determined.

           
    Privileges Read/Write
    Typeboolean

    MBeanInfo

    Returns the MBean info for this MBean.

    Deprecated.

           
    Privileges Read only
    Typejavax.management.MBeanInfo
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    MethodOrder

    Determines the certificate revocation checking method order.

    NOTE THAT omission of a specific method disables that method.

           
    Privileges Read/Write
    Typejava.lang.String
    Default ValueOCSP_THEN_CRL
    Legal Values
    • OCSP
    • CRL
    • OCSP_THEN_CRL
    • CRL_THEN_OCSP

    Name

    The user-specified name of this MBean instance.

    This name is included as one of the key properties in the MBean's javax.management.ObjectName:
    Name=user-specified-name

           
    Privileges Read/Write
    Typejava.lang.String

    Notes

    Optional information that you can include to describe this configuration.

    WebLogic Server saves this note in the domain's configuration file (config.xml) as XML PCDATA. All left angle brackets (<) are converted to the XML entity &lt;. Carriage returns/line feeds are preserved.

    Note:

    If you create or edit a note from the Administration Console, the Administration Console does not preserve carriage returns/line feeds.

           
    Privileges Read/Write
    Typejava.lang.String

    ObjectName

    Returns the ObjectName under which this MBean is registered in the MBean server.

    Deprecated.

           
    Privileges Read only
    Typeweblogic.management.WebLogicObjectName
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    OcspNonceEnabled

    Determines whether a nonce is sent with OCSP requests, to force a fresh (not pre-signed) response.

           
    Privileges Read/Write
    Typeboolean

    OcspResponseCacheCapacity

    Determines the maximum number of entries supported by the OCSP response local cache. The minimum value is 1.

           
    Privileges Read/Write
    Typeint
    Default Value1024
    Minimum value1
    Maximum value2147483647

    OcspResponseCacheEnabled

    Determines whether the OCSP response local cache is enabled.

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    OcspResponseCacheRefreshPeriodPercent

    Determines the refresh period for the OCSP response local cache, expressed as a percentage of the validity period of the response.

    For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.

    The validity period is determined by the OCSP response, and is calculated as the (next reported update time) - (this update time).

    The valid range is 1 through 100.

           
    Privileges Read/Write
    Typeint
    Default Value100
    Minimum value1
    Maximum value100

    OcspResponseTimeout

    Determines the timeout for the OCSP response, expressed in seconds.

    The valid range is 1 thru 300 seconds.

           
    Privileges Read/Write
    Typelong
    Default Value10
    Minimum value1
    Maximum value300

    OcspTimeTolerance

    Determines the time tolerance value for handling clock-skew differences between clients and responders, expressed in seconds.

    The validity period of the response is extended both into the future and into the past by the specified amount of time, effectively widening the validity interval.

    The value is >=0 and <=900. The maximum allowed tolerance is 15 minutes.

           
    Privileges Read/Write
    Typeint
    Default Value0
    Minimum value0
    Maximum value900

    Parent

    Return the immediate parent for this MBean

           
    Privileges Read/Write
    Type

    Registered

    Returns false if the MBean represented by this object has been unregistered.

    Deprecated.

           
    Privileges Read only
    Typeboolean
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    Type

    Returns the type of the MBean.

           
    Privileges Read only
    Typejava.lang.String
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    Operations

    This section describes the following operations:

    freezeCurrentValue

    If the specified attribute has not been set explicitly, and if the attribute has a default value, this operation forces the MBean to persist the default value.

    Unless you use this operation, the default value is not saved and is subject to change if you update to a newer release of WebLogic Server. Invoking this operation isolates this MBean from the effects of such changes.

    Note:

    To insure that you are freezing the default value, invoke the restoreDefaultValue operation before you invoke this.

    This operation has no effect if you invoke it on an attribute that does not provide a default value or on an attribute for which some other value has been set.

    Deprecated. 9.0.0.0

       
    Operation Name"freezeCurrentValue"
    ParametersObject [] {  attributeName }

    where:

    • attributeName is an object of type java.lang.String that specifies:

      attributeName
    SignatureString [] { "java.lang.String" }
    Returns void
    Exceptions
    • javax.management.AttributeNotFoundException
    • javax.management.MBeanException

    isSet

    Returns true if the specified attribute has been set explicitly in this MBean instance.

       
    Operation Name"isSet"
    ParametersObject [] {  propertyName }

    where:

    • propertyName is an object of type java.lang.String that specifies:

      property to check
    SignatureString [] { "java.lang.String" }
    Returns boolean

    restoreDefaultValue

    If the specified attribute has a default value, this operation removes any value that has been set explicitly and causes the attribute to use the default value.

    Default values are subject to change if you update to a newer release of WebLogic Server. To prevent the value from changing if you update to a newer release, invoke the freezeCurrentValue operation.

    This operation has no effect if you invoke it on an attribute that does not provide a default value or on an attribute that is already using the default.

    Deprecated. 9.0.0.0

       
    Operation Name"restoreDefaultValue"
    ParametersObject [] {  attributeName }

    where:

    • attributeName is an object of type java.lang.String that specifies:

      attributeName
    SignatureString [] { "java.lang.String" }
    Returns void
    Exceptions
    • javax.management.AttributeNotFoundException

    unSet

    Restore the given property to its default value.

       
    Operation Name"unSet"
    ParametersObject [] {  propertyName }

    where:

    • propertyName is an object of type java.lang.String that specifies:

      property to restore
    SignatureString [] { "java.lang.String" }
    Returns void