CertRevocMBean

Overview  |   Related MBeans  |   Attributes  |   Operations

Overview

This MBean represents the configuration of the certificate revocation checking across all certificate authorities. Many of the attributes in this MBean may be overridden per certificate authority using the specific CertRevocCaMBean.

   
Fully Qualified Interface NameIf you use the getMBeanInfo operation in MBeanTypeServiceMBean, supply the following value as this MBean's fully qualified interface name:
weblogic.management.configuration.CertRevocMBean

For more information, see:
Factory Methods No factory methods. Instances of this MBean are created automatically.
Access Points You can access this MBean from the following MBean attributes:

    Related MBeans

    This section describes attributes that provide access to other MBeans.

      CertRevocCas

      Returns the CertRevocCaMBeans representing the certificate authority overrides, which have been configured to be part of this certificate revocation checking configuration.

                 
      Factory MethodscreateCertRevocCa (java.lang.String name)

      destroyCertRevocCa (CertRevocCaMBean child)

      Factory methods do not return objects.

      See Using factory methods.
      Lookup OperationlookupCertRevocCa(String name)

      Returns a javax.management.ObjectName for the instance of CertRevocCaMBean named name.
      Privileges Read only
      TypeCertRevocCaMBean[]
      Relationship type: Containment.

      Attributes

      This section describes the following attributes:

      CachingDisabled

      Private property that disables caching in proxies.

             
      Privileges Read only
      Typeboolean
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      CheckingEnabled

      Determines whether certificate revocation checking is enabled.

             
      Privileges Read/Write
      Typeboolean

      CrlCacheRefreshPeriodPercent

      Determines the refresh period for the CRL local cache, expressed as a percentage of the validity period of the CRL.

      For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.

      The validity period is determined by the CRL, and is calculated as the (next reported update time) - (this update time).

      The valid range is 1 through 100.

             
      Privileges Read/Write
      Typeint
      Default Value100
      Minimum value1
      Maximum value100

      CrlCacheType

      Determines the type of CRL cache, related to the physical storage of the CRLs. The ldap CRL cache type can be specified, but is not currently supported.

      The value specified in this attribute determines which related CrlCacheType* attributes apply.

             
      Privileges Read/Write
      Typejava.lang.String
      Default ValueFILE
      Legal Values
      • FILE
      • LDAP

      CrlDpBackgroundDownloadEnabled

      Determines whether the CRL Distribution Point background downloading, to automatically update the local CRL cache, is enabled.

             
      Privileges Read/Write
      Typeboolean

      CrlDpDownloadTimeout

      Determines the overall timeout for the Distribution Point CRL download, expressed in seconds.

      The valid range is 1 thru 300 seconds.

             
      Privileges Read/Write
      Typelong
      Default Value10
      Minimum value1
      Maximum value300

      CrlDpEnabled

      Determines whether the CRL Distribution Point processing to update the local CRL cache is enabled.

             
      Privileges Read/Write
      Typeboolean
      Default Valuetrue

      DynamicallyCreated

      Return whether the MBean was created dynamically or is persisted to config.xml

             
      Privileges Read only
      Typeboolean
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      FailOnUnknownRevocStatus

      Determines whether certificate path checking should fail, if revocation status could not be determined.

             
      Privileges Read/Write
      Typeboolean

      Id

      Return the unique id of this MBean instance

             
      Privileges Read only
      Typelong
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      MBeanInfo

      Returns the MBean info for this MBean.

      Deprecated.

             
      Privileges Read only
      Typejavax.management.MBeanInfo
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      MethodOrder

      Determines the certificate revocation checking method order.

      NOTE that omission of a specific method disables that method.

             
      Privileges Read/Write
      Typejava.lang.String
      Default ValueOCSP_THEN_CRL
      Legal Values
      • OCSP
      • CRL
      • OCSP_THEN_CRL
      • CRL_THEN_OCSP

      Name

      The user-specified name of this MBean instance.

      This name is included as one of the key properties in the MBean's javax.management.ObjectName:

      Name=user-specified-name

             
      Privileges Read/Write
      Typejava.lang.String

      Notes

      Optional information that you can include to describe this configuration.

      WebLogic Server saves this note in the domain's configuration file (config.xml) as XML PCDATA. All left angle brackets (<) are converted to the XML entity &lt;. Carriage returns/line feeds are preserved.

      Note: If you create or edit a note from the Administration Console, the Administration Console does not preserve carriage returns/line feeds.

             
      Privileges Read/Write
      Typejava.lang.String

      ObjectName

      Returns the ObjectName under which this MBean is registered in the MBean server.

      Deprecated.

             
      Privileges Read only
      Typeweblogic.management.WebLogicObjectName
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      OcspNonceEnabled

      Determines whether a nonce is sent with OCSP requests, to force a fresh (not pre-signed) response.

             
      Privileges Read/Write
      Typeboolean

      OcspResponseCacheCapacity

      Determines the maximum number of entries supported by the OCSP response local cache. The minimum value is 1.

             
      Privileges Read/Write
      Typeint
      Default Value1024
      Minimum value1
      Maximum value2147483647

      OcspResponseCacheEnabled

      Determines whether the OCSP response local cache is enabled.

             
      Privileges Read/Write
      Typeboolean
      Default Valuetrue

      OcspResponseCacheRefreshPeriodPercent

      Determines the refresh period for the OCSP response local cache, expressed as a percentage of the validity period of the response.

      For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.

      The validity period is determined by the OCSP response, and is calculated as the (next reported update time) - (this update time).

      The valid range is 1 through 100.

             
      Privileges Read/Write
      Typeint
      Default Value100
      Minimum value1
      Maximum value100

      OcspResponseTimeout

      Determines the timeout for the OCSP response, expressed in seconds.

      The valid range is 1 thru 300 seconds.

             
      Privileges Read/Write
      Typelong
      Default Value10
      Minimum value1
      Maximum value300

      OcspTimeTolerance

      Determines the time tolerance value for handling clock-skew differences between clients and responders, expressed in seconds.

      The validity period of the response is extended both into the future and into the past by the specified amount of time, effectively widening the validity interval.

      The value is >=0 and <=900. The maximum allowed tolerance is 15 minutes.

             
      Privileges Read/Write
      Typeint
      Default Value0
      Minimum value0
      Maximum value900

      Parent

      Return the immediate parent for this MBean

             
      Privileges Read/Write
      Type

      Registered

      Returns false if the MBean represented by this object has been unregistered.

      Deprecated.

             
      Privileges Read only
      Typeboolean
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      Tags

      Return all tags on this Configuration MBean

             
      Available Since Release 12.2.1.0
      Privileges Read/Write
      Typeclass java.lang.String[]

      Type

      Returns the type of the MBean.

             
      Privileges Read only
      Typejava.lang.String
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      Operations

      This section describes the following operations:

      addTag

      Add a tag to this Configuration MBean. Adds a tag to the current set of tags on the Configuration MBean. Tags may contain white spaces.

         
      Operation Name"addTag"
      ParametersObject [] {  tag }

      where:

      • tag is an object of type java.lang.String that specifies:

        tag to be added to the MBean
      SignatureString [] { "java.lang.String" }
      Returns boolean
      Exceptions
      • java.lang.IllegalArgumentException
        IllegalArgumentException if the tag contains illegal punctuation

      freezeCurrentValue

      If the specified attribute has not been set explicitly, and if the attribute has a default value, this operation forces the MBean to persist the default value.

      Unless you use this operation, the default value is not saved and is subject to change if you update to a newer release of WebLogic Server. Invoking this operation isolates this MBean from the effects of such changes.

      Note: To insure that you are freezing the default value, invoke the restoreDefaultValue operation before you invoke this.

      This operation has no effect if you invoke it on an attribute that does not provide a default value or on an attribute for which some other value has been set.

      Deprecated. 9.0.0.0

         
      Operation Name"freezeCurrentValue"
      ParametersObject [] {  attributeName }

      where:

      • attributeName is an object of type java.lang.String that specifies:

        attributeName
      SignatureString [] { "java.lang.String" }
      Returns void
      Exceptions
      • javax.management.AttributeNotFoundException
      • javax.management.MBeanException

      getInheritedProperties

      Return all properties' names whose value is inherited from template mbean. this is a convenient method to get inheritance info on multiple properties in one jmx call.

         
      Operation Name"getInheritedProperties"
      ParametersObject [] {  propertyNames }

      where:

      • propertyNames is an object of type [Ljava.lang.String; that specifies:

        properties to check
      SignatureString [] { "[Ljava.lang.String;" }
      Returns class

      isInherited

      Check if the value of a property is inherited from template mbean or not.

         
      Operation Name"isInherited"
      ParametersObject [] {  propertyName }

      where:

      • propertyName is an object of type java.lang.String that specifies:

        the name of the property
      SignatureString [] { "java.lang.String" }
      Returns boolean

      isSet

      Returns true if the specified attribute has been set explicitly in this MBean instance.

         
      Operation Name"isSet"
      ParametersObject [] {  propertyName }

      where:

      • propertyName is an object of type java.lang.String that specifies:

        property to check
      SignatureString [] { "java.lang.String" }
      Returns boolean

      removeTag

      Remove a tag from this Configuration MBean

         
      Operation Name"removeTag"
      ParametersObject [] {  tag }

      where:

      • tag is an object of type java.lang.String that specifies:

        tag to be removed from the MBean
      SignatureString [] { "java.lang.String" }
      Returns boolean
      Exceptions
      • java.lang.IllegalArgumentException
        IllegalArgumentException if the tag contains illegal punctuation

      restoreDefaultValue

      If the specified attribute has a default value, this operation removes any value that has been set explicitly and causes the attribute to use the default value.

      Default values are subject to change if you update to a newer release of WebLogic Server. To prevent the value from changing if you update to a newer release, invoke the freezeCurrentValue operation.

      This operation has no effect if you invoke it on an attribute that does not provide a default value or on an attribute that is already using the default.

      Deprecated. 9.0.0.0

         
      Operation Name"restoreDefaultValue"
      ParametersObject [] {  attributeName }

      where:

      • attributeName is an object of type java.lang.String that specifies:

        attributeName
      SignatureString [] { "java.lang.String" }
      Returns void
      Exceptions
      • javax.management.AttributeNotFoundException

      unSet

      Restore the given property to its default value.

         
      Operation Name"unSet"
      ParametersObject [] {  propertyName }

      where:

      • propertyName is an object of type java.lang.String that specifies:

        property to restore
      SignatureString [] { "java.lang.String" }
      Returns void