|
Oracle Fusion Middleware Java API Reference for Oracle WebLogic Server 12c (12.1.2) Part Number E27170-02 |
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
public interface CertRevocMBean
This MBean represents the configuration of the certificate revocation
checking across all certificate authorities. Many of the attributes in this
MBean may be overridden per certificate authority using the
specific CertRevocCaMBean
.
CertRevocCaMBean
Field Summary |
---|
Fields inherited from interface weblogic.management.configuration.ConfigurationMBean |
---|
DEFAULT_EMPTY_BYTE_ARRAY |
Method Summary | |
---|---|
CertRevocCaMBean |
createCertRevocCa(String name)
This is the factory method for certificate revocation checking configuration CA overrides. |
void |
destroyCertRevocCa(CertRevocCaMBean child)
Destroys and removes a certificate authority override, which is a child of this certificate revocation checking configuration. |
CertRevocCaMBean[] |
getCertRevocCas()
Returns the CertRevocCaMBeans representing the certificate authority overrides, which have been configured to be part of this certificate revocation checking configuration. |
int |
getCrlCacheRefreshPeriodPercent()
Determines the refresh period for the CRL local cache, expressed as a percentage of the validity period of the CRL. |
String |
getCrlCacheType()
Determines the type of CRL cache, related to the physical storage of the CRLs. |
String |
getCrlCacheTypeLdapHostname()
Determines the remote hostname for the LDAP server containing CRLs. |
int |
getCrlCacheTypeLdapPort()
Determines the remote port for the LDAP server containing CRLs. |
int |
getCrlCacheTypeLdapSearchTimeout()
Determines how long to wait for CRL search results from the LDAP server. |
long |
getCrlDpDownloadTimeout()
Determines the overall timeout for the Distribution Point CRL download, expressed in seconds. |
String |
getMethodOrder()
Determines the certificate revocation checking method order. |
int |
getOcspResponseCacheCapacity()
Determines the maximum number of entries supported by the OCSP response local cache. |
int |
getOcspResponseCacheRefreshPeriodPercent()
Determines the refresh period for the OCSP response local cache, expressed as a percentage of the validity period of the response. |
long |
getOcspResponseTimeout()
Determines the timeout for the OCSP response, expressed in seconds. |
int |
getOcspTimeTolerance()
Determines the time tolerance value for handling clock-skew differences between clients and responders, expressed in seconds. |
boolean |
isCheckingEnabled()
Determines whether certificate revocation checking is enabled. |
boolean |
isCrlDpBackgroundDownloadEnabled()
Determines whether the CRL Distribution Point background downloading, to automatically update the local CRL cache, is enabled. |
boolean |
isCrlDpEnabled()
Determines whether the CRL Distribution Point processing to update the local CRL cache is enabled. |
boolean |
isFailOnUnknownRevocStatus()
Determines whether certificate path checking should fail, if revocation status could not be determined. |
boolean |
isOcspNonceEnabled()
Determines whether a nonce is sent with OCSP requests, to force a fresh (not pre-signed) response. |
boolean |
isOcspResponseCacheEnabled()
Determines whether the OCSP response local cache is enabled. |
CertRevocCaMBean |
lookupCertRevocCa(String name)
Lookup a particular CertRevocCaMBean from the list. |
void |
setCheckingEnabled(boolean checkingEnabled)
Specifies whether certificate revocation checking is enabled. |
void |
setCrlCacheRefreshPeriodPercent(int crlCacheRefreshPeriodPercent)
Specifies the refresh period for the CRL local cache, expressed as a percentage of the validity period of the CRL. |
void |
setCrlCacheType(String crlCacheType)
Specifies the type of CRL cache, related to the physical storage of the CRLs. |
void |
setCrlCacheTypeLdapHostname(String crlCacheTypeLdapHostname)
Specifies the remote hostname for the LDAP server containing CRLs. |
void |
setCrlCacheTypeLdapPort(int crlCacheTypeLdapPort)
Specifies the remote port for the LDAP server containing CRLs. |
void |
setCrlCacheTypeLdapSearchTimeout(int crlCacheTypeLdapSearchTimeout)
Specifies how long to wait for CRL search results from the LDAP server. |
void |
setCrlDpBackgroundDownloadEnabled(boolean crlDpBackgroundDownloadEnabled)
Specifies whether the CRL Distribution Point background downloading, to automatically update the local CRL cache, is enabled. |
void |
setCrlDpDownloadTimeout(long crlDpDownloadTimeout)
Specifies the overall timeout for the Distribution Point CRL download, expressed in seconds. |
void |
setCrlDpEnabled(boolean crlDpEnabled)
Specifies whether the CRL Distribution Point processing to update the local CRL cache is enabled. |
void |
setFailOnUnknownRevocStatus(boolean failOnUnknownRevocStatus)
Specifies whether certificate path checking should fail, if revocation status could not be determined. |
void |
setMethodOrder(String methodOrder)
Specifies the certificate revocation checking method order. |
void |
setOcspNonceEnabled(boolean ocspNonceEnabled)
Specifies whether a nonce is sent with OCSP requests, to force a fresh (not pre-signed) response. |
void |
setOcspResponseCacheCapacity(int ocspResponseCacheCapacity)
Specifies the maximum number of entries supported by the OCSP response local cache. |
void |
setOcspResponseCacheEnabled(boolean ocspResponseCacheEnabled)
Specifies whether the OCSP response local cache is enabled. |
void |
setOcspResponseCacheRefreshPeriodPercent(int ocspResponseCacheRefreshPeriodPercent)
Specifies the refresh period for the OCSP response local cache, expressed as a percentage of the validity period of the response. |
void |
setOcspResponseTimeout(long ocspResponseTimeout)
Specifies the timeout for the OCSP response, expressed in seconds. |
void |
setOcspTimeTolerance(int ocspTimeTolerance)
Specifies the time tolerance value for handling clock-skew differences between clients and responders, expressed in seconds. |
Methods inherited from interface weblogic.management.configuration.ConfigurationMBean |
---|
freezeCurrentValue, getId, getInheritedProperties, getName, getNotes, isDynamicallyCreated, isInherited, isSet, restoreDefaultValue, setComments, setDefaultedMBean, setName, setNotes, setPersistenceEnabled, unSet |
Methods inherited from interface weblogic.management.WebLogicMBean |
---|
getMBeanInfo, getObjectName, getParent, getType, isCachingDisabled, isRegistered, setParent |
Methods inherited from interface javax.management.DynamicMBean |
---|
getAttribute, getAttributes, invoke, setAttribute, setAttributes |
Methods inherited from interface javax.management.MBeanRegistration |
---|
postDeregister, postRegister, preDeregister, preRegister |
Methods inherited from interface javax.management.NotificationBroadcaster |
---|
addNotificationListener, getNotificationInfo, removeNotificationListener |
Methods inherited from interface weblogic.descriptor.DescriptorBean |
---|
addPropertyChangeListener, createChildCopyIncludingObsolete, getParentBean, isEditable, removePropertyChangeListener |
Method Detail |
---|
boolean isCheckingEnabled()
Determines whether certificate revocation checking is enabled.
void setCheckingEnabled(boolean checkingEnabled)
Specifies whether certificate revocation checking is enabled.
]
checkingEnabled
- The checkingEnabled valueCertRevocMBean.isCheckingEnabled()
boolean isFailOnUnknownRevocStatus()
Determines whether certificate path checking should fail, if revocation status could not be determined.
void setFailOnUnknownRevocStatus(boolean failOnUnknownRevocStatus)
Specifies whether certificate path checking should fail, if revocation status could not be determined.
failOnUnknownRevocStatus
- The failOnUnknownRevocStatus valueCertRevocMBean.isFailOnUnknownRevocStatus()
String getMethodOrder()
Determines the certificate revocation checking method order.
NOTE THAT omission of a specific method disables that method.
void setMethodOrder(String methodOrder)
Specifies the certificate revocation checking method order.
NOTE THAT omission of a specific method disables that method.
methodOrder
- A String containing the method order.CertRevocMBean.getMethodOrder()
boolean isOcspNonceEnabled()
Determines whether a nonce is sent with OCSP requests, to force a fresh (not pre-signed) response.
void setOcspNonceEnabled(boolean ocspNonceEnabled)
Specifies whether a nonce is sent with OCSP requests, to force a fresh (not pre-signed) response.
ocspNonceEnabled
- The ocspNonceEnabled valueCertRevocMBean.isOcspNonceEnabled()
boolean isOcspResponseCacheEnabled()
Determines whether the OCSP response local cache is enabled.
void setOcspResponseCacheEnabled(boolean ocspResponseCacheEnabled)
Specifies whether the OCSP response local cache is enabled.
ocspResponseCacheEnabled
- The ocspResponseCacheEnabled valueCertRevocMBean.isOcspResponseCacheEnabled()
int getOcspResponseCacheCapacity()
void setOcspResponseCacheCapacity(int ocspResponseCacheCapacity)
ocspResponseCacheCapacity
- The ocspResponseCacheCapacity valueCertRevocMBean.getOcspResponseCacheCapacity()
int getOcspResponseCacheRefreshPeriodPercent()
For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.
The validity period is determined by the OCSP response, and is calculated as the (next reported update time) - (this update time).
The valid range is 1 through 100.
void setOcspResponseCacheRefreshPeriodPercent(int ocspResponseCacheRefreshPeriodPercent)
For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.
The validity period is determined by the OCSP response, and is calculated as the (next reported update time) - (this update time).
The valid range is 1 through 100.
ocspResponseCacheRefreshPeriodPercent
- The ocspResponseCacheRefreshPeriodPercent valueCertRevocMBean.getOcspResponseCacheRefreshPeriodPercent()
long getOcspResponseTimeout()
The valid range is 1 thru 300 seconds.
void setOcspResponseTimeout(long ocspResponseTimeout)
The valid range is 1 thru 300 seconds.
ocspResponseTimeout
- The ocspResponseTimeout in seconds.CertRevocMBean.getOcspResponseTimeout()
int getOcspTimeTolerance()
The validity period of the response is extended both into the future and into the past by the specified amount of time, effectively widening the validity interval.
The value is >=0 and <=900. The maximum allowed tolerance is 15 minutes.
void setOcspTimeTolerance(int ocspTimeTolerance)
The validity period of the response is extended both into the future and into the past by the specified amount of time, effectively widening the validity interval.
The value is >=0 and <=900. The maximum allowed tolerance is 15 minutes.
ocspTimeTolerance
- The ocspTimeTolerance value in seconds.CertRevocMBean.getOcspTimeTolerance()
String getCrlCacheType()
The value specified in this attribute determines
which related CrlCacheType*
attributes apply.
For example, if CrlCacheType
is ldap
,
see related attributes like
.
CertRevocMBean.getCrlCacheTypeLdapHostname()
void setCrlCacheType(String crlCacheType)
The value specified in this attribute determines
which related CrlCacheType*
attributes apply.
For example, if CrlCacheType
is ldap
,
see related attributes like
.
CertRevocMBean.getCrlCacheTypeLdapHostname()
crlCacheType
- The crlCacheType valueCertRevocMBean.getCrlCacheType()
String getCrlCacheTypeLdapHostname()
This attribute applies when value
is returned from
CertRevocMBean.CRL_CACHE_TYPE_LDAP
.
CertRevocMBean.getCrlCacheType()
null
if unspecified.void setCrlCacheTypeLdapHostname(String crlCacheTypeLdapHostname)
This attribute applies when value
is returned from
CertRevocMBean.CRL_CACHE_TYPE_LDAP
.
CertRevocMBean.getCrlCacheType()
crlCacheTypeLdapHostname
- The crlCacheTypeLdapHostname value,
null
if unspecified.CertRevocMBean.getCrlCacheTypeLdapHostname()
int getCrlCacheTypeLdapPort()
This attribute applies when value
is returned from
CertRevocMBean.CRL_CACHE_TYPE_LDAP
.
CertRevocMBean.getCrlCacheType()
The valid range is -1, 1 through 65535.
void setCrlCacheTypeLdapPort(int crlCacheTypeLdapPort)
This attribute applies when value
is returned from
CertRevocMBean.CRL_CACHE_TYPE_LDAP
.
CertRevocMBean.getCrlCacheType()
The valid range is -1, 1 through 65535.
crlCacheTypeLdapPort
- The crlCacheTypeLdapPort value,
-1 if unspecified.CertRevocMBean.getCrlCacheTypeLdapPort()
int getCrlCacheTypeLdapSearchTimeout()
This attribute applies when value
is returned from
CertRevocMBean.CRL_CACHE_TYPE_LDAP
.
CertRevocMBean.getCrlCacheType()
The valid range is 1 thru 300 seconds.
void setCrlCacheTypeLdapSearchTimeout(int crlCacheTypeLdapSearchTimeout)
This attribute applies when value
is returned from
CertRevocMBean.CRL_CACHE_TYPE_LDAP
.
CertRevocMBean.getCrlCacheType()
The valid range is 1 thru 300 seconds.
crlCacheTypeLdapSearchTimeout
- The crlCacheTypeLdapSearchTimeout
value in seconds.CertRevocMBean.getCrlCacheTypeLdapSearchTimeout()
int getCrlCacheRefreshPeriodPercent()
For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.
The validity period is determined by the CRL, and is calculated as the (next reported update time) - (this update time).
The valid range is 1 through 100.
void setCrlCacheRefreshPeriodPercent(int crlCacheRefreshPeriodPercent)
For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.
The validity period is determined by the CRL, and is calculated as the (next reported update time) - (this update time).
The valid range is 1 through 100.
crlCacheRefreshPeriodPercent
- The crlCacheRefreshPeriodPercent valueCertRevocMBean.getCrlCacheRefreshPeriodPercent()
boolean isCrlDpEnabled()
void setCrlDpEnabled(boolean crlDpEnabled)
crlDpEnabled
- The crlDpEnabled valueCertRevocMBean.isCrlDpEnabled()
long getCrlDpDownloadTimeout()
The valid range is 1 thru 300 seconds.
void setCrlDpDownloadTimeout(long crlDpDownloadTimeout)
The valid range is 1 thru 300 seconds.
crlDpDownloadTimeout
- The crlDpDownloadTimeout value
in seconds.CertRevocMBean.getCrlDpDownloadTimeout()
boolean isCrlDpBackgroundDownloadEnabled()
void setCrlDpBackgroundDownloadEnabled(boolean crlDpBackgroundDownloadEnabled)
crlDpBackgroundDownloadEnabled
- The crlDpBackgroundDownloadEnabled valueCertRevocMBean.isCrlDpBackgroundDownloadEnabled()
CertRevocCaMBean[] getCertRevocCas()
Returns the CertRevocCaMBeans representing the certificate authority overrides, which have been configured to be part of this certificate revocation checking configuration.
CertRevocCaMBean createCertRevocCa(String name)
This is the factory method for certificate revocation checking configuration CA overrides.
The short name, which is specified, must be unique
among all object instances of type CertRevocCaMBean.
The new CA override, which is
created, will have this certificate revocation checking
configuration as its parent and must be destroyed
with the
method.CertRevocMBean.destroyCertRevocCa(weblogic.management.configuration.CertRevocCaMBean)
name
- Unique short name
void destroyCertRevocCa(CertRevocCaMBean child)
Destroys and removes a certificate authority override, which is a child of this certificate revocation checking configuration.
child
- CertRevocCaMBean to destroyCertRevocCaMBean lookupCertRevocCa(String name)
Lookup a particular CertRevocCaMBean from the list.
name
- Unique short name
|
Copyright 1996, 2013, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Oracle Fusion Middleware Java API Reference for Oracle WebLogic Server 12c (12.1.2) Part Number E27170-02 |
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |