weblogic.management.configuration
Interface CertRevocMBean

All Superinterfaces:

ConfigurationMBean, DescriptorBean, DynamicMBean, MBeanRegistration, NotificationBroadcaster, SettableBean, WebLogicMBean

public interface CertRevocMBean
extends ConfigurationMBean

This MBean represents the configuration of the certificate revocation checking across all certificate authorities. Many of the attributes in this MBean may be overridden per certificate authority using the specific CertRevocCaMBean.

See Also:

CertRevocCaMBean

isCheckingEnabled

boolean isCheckingEnabled()

Determines whether certificate revocation checking is enabled.

Returns:

The checkingEnabled value

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_CHECKING_ENABLED

setCheckingEnabled

void setCheckingEnabled(boolean checkingEnabled)

Specifies whether certificate revocation checking is enabled.

]

Parameters:

checkingEnabled - The checkingEnabled value

See Also:

CertRevocMBean.isCheckingEnabled()

isFailOnUnknownRevocStatus

boolean isFailOnUnknownRevocStatus()

Determines whether certificate path checking should fail, if revocation status could not be determined.

Returns:

The failOnUnknownRevocStatus value

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_FAIL_ON_UNKNOWN_REVOC_STATUS

setFailOnUnknownRevocStatus

void setFailOnUnknownRevocStatus(boolean failOnUnknownRevocStatus)

Specifies whether certificate path checking should fail, if revocation status could not be determined.

Parameters:

failOnUnknownRevocStatus - The failOnUnknownRevocStatus value

See Also:

CertRevocMBean.isFailOnUnknownRevocStatus()

getMethodOrder

String getMethodOrder()

Determines the certificate revocation checking method order.

NOTE THAT omission of a specific method disables that method.

Returns:

A String containing the method order.

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_METHOD_ORDER

Valid Values:

CertRevocMBean.METHOD_OCSP, CertRevocMBean.METHOD_CRL, CertRevocMBean.METHOD_OCSP_THEN_CRL, CertRevocMBean.METHOD_CRL_THEN_OCSP

setMethodOrder

void setMethodOrder(String methodOrder)

Specifies the certificate revocation checking method order.

NOTE THAT omission of a specific method disables that method.

Parameters:

methodOrder - A String containing the method order.

See Also:

CertRevocMBean.getMethodOrder()

isOcspNonceEnabled

boolean isOcspNonceEnabled()

Determines whether a nonce is sent with OCSP requests, to force a fresh (not pre-signed) response.

Returns:

The ocspNonceEnabled value

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_OCSP_NONCE_ENABLED

setOcspNonceEnabled

void setOcspNonceEnabled(boolean ocspNonceEnabled)

Specifies whether a nonce is sent with OCSP requests, to force a fresh (not pre-signed) response.

Parameters:

ocspNonceEnabled - The ocspNonceEnabled value

See Also:

CertRevocMBean.isOcspNonceEnabled()

isOcspResponseCacheEnabled

boolean isOcspResponseCacheEnabled()

Determines whether the OCSP response local cache is enabled.

Returns:

The ocspResponseCacheEnabled value

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_OCSP_RESPONSE_CACHE_ENABLED

setOcspResponseCacheEnabled

void setOcspResponseCacheEnabled(boolean ocspResponseCacheEnabled)

Specifies whether the OCSP response local cache is enabled.

Parameters:

ocspResponseCacheEnabled - The ocspResponseCacheEnabled value

See Also:

CertRevocMBean.isOcspResponseCacheEnabled()

getOcspResponseCacheCapacity

int getOcspResponseCacheCapacity()

Determines the maximum number of entries supported by the OCSP response local cache. The minimum value is 1.

Returns:

The ocspResponseCacheCapacity value

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_OCSP_RESPONSE_CACHE_CAPACITY

Maximum Value:

java.lang.Integer.MAX_VALUE

Minimum Value:

1

setOcspResponseCacheCapacity

void setOcspResponseCacheCapacity(int ocspResponseCacheCapacity)

Specifies the maximum number of entries supported by the OCSP response local cache. The minimum value is 1.

Parameters:

ocspResponseCacheCapacity - The ocspResponseCacheCapacity value

See Also:

CertRevocMBean.getOcspResponseCacheCapacity()

getOcspResponseCacheRefreshPeriodPercent

int getOcspResponseCacheRefreshPeriodPercent()

Determines the refresh period for the OCSP response local cache, expressed as a percentage of the validity period of the response.

For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.

The validity period is determined by the OCSP response, and is calculated as the (next reported update time) - (this update time).

The valid range is 1 through 100.

Returns:

The ocspResponseCacheRefreshPeriodPercent value

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_OCSP_RESPONSE_CACHE_REFRESH_PERIOD_PERCENT

Maximum Value:

100

Minimum Value:

1

setOcspResponseCacheRefreshPeriodPercent

void setOcspResponseCacheRefreshPeriodPercent(int ocspResponseCacheRefreshPeriodPercent)

Specifies the refresh period for the OCSP response local cache, expressed as a percentage of the validity period of the response.

For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.

The validity period is determined by the OCSP response, and is calculated as the (next reported update time) - (this update time).

The valid range is 1 through 100.

Parameters:

ocspResponseCacheRefreshPeriodPercent - The ocspResponseCacheRefreshPeriodPercent value

See Also:

CertRevocMBean.getOcspResponseCacheRefreshPeriodPercent()

getOcspResponseTimeout

long getOcspResponseTimeout()

Determines the timeout for the OCSP response, expressed in seconds.

The valid range is 1 thru 300 seconds.

Returns:

The ocspResponseTimeout in seconds.

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_OCSP_RESPONSE_TIMEOUT

Maximum Value:

CertRevocMBean.MAX_OCSP_RESPONSE_TIMEOUT

Minimum Value:

CertRevocMBean.MIN_OCSP_RESPONSE_TIMEOUT

setOcspResponseTimeout

void setOcspResponseTimeout(long ocspResponseTimeout)

Specifies the timeout for the OCSP response, expressed in seconds.

The valid range is 1 thru 300 seconds.

Parameters:

ocspResponseTimeout - The ocspResponseTimeout in seconds.

See Also:

CertRevocMBean.getOcspResponseTimeout()

getOcspTimeTolerance

int getOcspTimeTolerance()

Determines the time tolerance value for handling clock-skew differences between clients and responders, expressed in seconds.

The validity period of the response is extended both into the future and into the past by the specified amount of time, effectively widening the validity interval.

The value is >=0 and <=900. The maximum allowed tolerance is 15 minutes.

Returns:

The ocspTimeTolerance value in seconds.

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_OCSP_TIME_TOLERANCE

Maximum Value:

CertRevocMBean.MAX_OCSP_TIME_TOLERANCE

Minimum Value:

CertRevocMBean.MIN_OCSP_TIME_TOLERANCE

setOcspTimeTolerance

void setOcspTimeTolerance(int ocspTimeTolerance)

Specifies the time tolerance value for handling clock-skew differences between clients and responders, expressed in seconds.

The validity period of the response is extended both into the future and into the past by the specified amount of time, effectively widening the validity interval.

The value is >=0 and <=900. The maximum allowed tolerance is 15 minutes.

Parameters:

ocspTimeTolerance - The ocspTimeTolerance value in seconds.

See Also:

CertRevocMBean.getOcspTimeTolerance()

getCrlCacheType

String getCrlCacheType()

Determines the type of CRL cache, related to the physical storage of the CRLs.

The value specified in this attribute determines which related CrlCacheType* attributes apply. For example, if CrlCacheType is ldap, see related attributes like CertRevocMBean.getCrlCacheTypeLdapHostname().

Returns:

The crlCacheType value

Default Value:

CertRevocMBean.DEFAULT_CRL_CACHE_TYPE

Valid Values:

CertRevocMBean.CRL_CACHE_TYPE_FILE, CertRevocMBean.CRL_CACHE_TYPE_LDAP

setCrlCacheType

void setCrlCacheType(String crlCacheType)

Specifies the type of CRL cache, related to the physical storage of the CRLs.

The value specified in this attribute determines which related CrlCacheType* attributes apply. For example, if CrlCacheType is ldap, see related attributes like CertRevocMBean.getCrlCacheTypeLdapHostname().

Parameters:

crlCacheType - The crlCacheType value

See Also:

CertRevocMBean.getCrlCacheType()

getCrlCacheTypeLdapHostname

String getCrlCacheTypeLdapHostname()

Determines the remote hostname for the LDAP server containing CRLs.

This attribute applies when value CertRevocMBean.CRL_CACHE_TYPE_LDAP is returned from CertRevocMBean.getCrlCacheType().

Returns:

The crlCacheTypeLdapHostname value, null if unspecified.

Default Value:

CertRevocMBean.DEFAULT_CRL_CACHE_TYPE_LDAP_HOST_NAME

setCrlCacheTypeLdapHostname

void setCrlCacheTypeLdapHostname(String crlCacheTypeLdapHostname)

Specifies the remote hostname for the LDAP server containing CRLs.

This attribute applies when value CertRevocMBean.CRL_CACHE_TYPE_LDAP is returned from CertRevocMBean.getCrlCacheType().

Parameters:

crlCacheTypeLdapHostname - The crlCacheTypeLdapHostname value, null if unspecified.

See Also:

CertRevocMBean.getCrlCacheTypeLdapHostname()

getCrlCacheTypeLdapPort

int getCrlCacheTypeLdapPort()

Determines the remote port for the LDAP server containing CRLs.

This attribute applies when value CertRevocMBean.CRL_CACHE_TYPE_LDAP is returned from CertRevocMBean.getCrlCacheType().

The valid range is -1, 1 through 65535.

Returns:

The crlCacheTypeLdapPort value, -1 if unspecified.

Default Value:

CertRevocMBean.DEFAULT_CRL_CACHE_TYPE_LDAP_PORT

setCrlCacheTypeLdapPort

void setCrlCacheTypeLdapPort(int crlCacheTypeLdapPort)

Specifies the remote port for the LDAP server containing CRLs.

This attribute applies when value CertRevocMBean.CRL_CACHE_TYPE_LDAP is returned from CertRevocMBean.getCrlCacheType().

The valid range is -1, 1 through 65535.

Parameters:

crlCacheTypeLdapPort - The crlCacheTypeLdapPort value, -1 if unspecified.

See Also:

CertRevocMBean.getCrlCacheTypeLdapPort()

getCrlCacheTypeLdapSearchTimeout

int getCrlCacheTypeLdapSearchTimeout()

Determines how long to wait for CRL search results from the LDAP server.

This attribute applies when value CertRevocMBean.CRL_CACHE_TYPE_LDAP is returned from CertRevocMBean.getCrlCacheType().

The valid range is 1 thru 300 seconds.

Returns:

The crlCacheTypeLdapSearchTimeout value in seconds.

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_CRL_CACHE_TYPE_LDAP_SEARCH_TIMEOUT

Maximum Value:

CertRevocMBean.MAX_CRL_CACHE_TYPE_LDAP_SEARCH_TIMEOUT

Minimum Value:

CertRevocMBean.MIN_CRL_CACHE_TYPE_LDAP_SEARCH_TIMEOUT

setCrlCacheTypeLdapSearchTimeout

void setCrlCacheTypeLdapSearchTimeout(int crlCacheTypeLdapSearchTimeout)

Specifies how long to wait for CRL search results from the LDAP server.

This attribute applies when value CertRevocMBean.CRL_CACHE_TYPE_LDAP is returned from CertRevocMBean.getCrlCacheType().

The valid range is 1 thru 300 seconds.

Parameters:

crlCacheTypeLdapSearchTimeout - The crlCacheTypeLdapSearchTimeout value in seconds.

See Also:

CertRevocMBean.getCrlCacheTypeLdapSearchTimeout()

getCrlCacheRefreshPeriodPercent

int getCrlCacheRefreshPeriodPercent()

Determines the refresh period for the CRL local cache, expressed as a percentage of the validity period of the CRL.

For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.

The validity period is determined by the CRL, and is calculated as the (next reported update time) - (this update time).

The valid range is 1 through 100.

Returns:

The crlCacheRefreshPeriodPercent value

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_CRL_CACHE_REFRESH_PERIOD_PERCENT

Maximum Value:

100

Minimum Value:

1

setCrlCacheRefreshPeriodPercent

void setCrlCacheRefreshPeriodPercent(int crlCacheRefreshPeriodPercent)

Specifies the refresh period for the CRL local cache, expressed as a percentage of the validity period of the CRL.

For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.

The validity period is determined by the CRL, and is calculated as the (next reported update time) - (this update time).

The valid range is 1 through 100.

Parameters:

crlCacheRefreshPeriodPercent - The crlCacheRefreshPeriodPercent value

See Also:

CertRevocMBean.getCrlCacheRefreshPeriodPercent()

isCrlDpEnabled

boolean isCrlDpEnabled()

Determines whether the CRL Distribution Point processing to update the local CRL cache is enabled.

Returns:

The crlDpEnabled value

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_CRL_DP_ENABLED

setCrlDpEnabled

void setCrlDpEnabled(boolean crlDpEnabled)

Specifies whether the CRL Distribution Point processing to update the local CRL cache is enabled.

Parameters:

crlDpEnabled - The crlDpEnabled value

See Also:

CertRevocMBean.isCrlDpEnabled()

getCrlDpDownloadTimeout

long getCrlDpDownloadTimeout()

Determines the overall timeout for the Distribution Point CRL download, expressed in seconds.

The valid range is 1 thru 300 seconds.

Returns:

The crlDpDownloadTimeout value in seconds.

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_CRL_DP_DOWNLOAD_TIMEOUT

Maximum Value:

CertRevocMBean.MAX_CRL_DP_DOWNLOAD_TIMEOUT

Minimum Value:

CertRevocMBean.MIN_CRL_DP_DOWNLOAD_TIMEOUT

setCrlDpDownloadTimeout

void setCrlDpDownloadTimeout(long crlDpDownloadTimeout)

Specifies the overall timeout for the Distribution Point CRL download, expressed in seconds.

The valid range is 1 thru 300 seconds.

Parameters:

crlDpDownloadTimeout - The crlDpDownloadTimeout value in seconds.

See Also:

CertRevocMBean.getCrlDpDownloadTimeout()

isCrlDpBackgroundDownloadEnabled

boolean isCrlDpBackgroundDownloadEnabled()

Determines whether the CRL Distribution Point background downloading, to automatically update the local CRL cache, is enabled.

Returns:

The crlDpBackgroundDownloadEnabled value

Changes take effect after you redeploy the module or restart the server.

Default Value:

CertRevocMBean.DEFAULT_CRL_DP_BACKGROUND_DOWNLOAD_ENABLED

setCrlDpBackgroundDownloadEnabled

void setCrlDpBackgroundDownloadEnabled(boolean crlDpBackgroundDownloadEnabled)

Specifies whether the CRL Distribution Point background downloading, to automatically update the local CRL cache, is enabled.

Parameters:

crlDpBackgroundDownloadEnabled - The crlDpBackgroundDownloadEnabled value

See Also:

CertRevocMBean.isCrlDpBackgroundDownloadEnabled()

getCertRevocCas

CertRevocCaMBean[] getCertRevocCas()

Returns the CertRevocCaMBeans representing the certificate authority overrides, which have been configured to be part of this certificate revocation checking configuration.

Returns:

The CA overrides

Changes take effect after you redeploy the module or restart the server.

createCertRevocCa

CertRevocCaMBean createCertRevocCa(String name)

This is the factory method for certificate revocation checking configuration CA overrides.

The short name, which is specified, must be unique among all object instances of type CertRevocCaMBean. The new CA override, which is created, will have this certificate revocation checking configuration as its parent and must be destroyed with the CertRevocMBean.destroyCertRevocCa(weblogic.management.configuration.CertRevocCaMBean) method.

Parameters:

name - Unique short name

Returns:

A CertRevocCaMBean instance.

destroyCertRevocCa

void destroyCertRevocCa(CertRevocCaMBean child)

Destroys and removes a certificate authority override, which is a child of this certificate revocation checking configuration.

Parameters:

child - CertRevocCaMBean to destroy

lookupCertRevocCa

CertRevocCaMBean lookupCertRevocCa(String name)

Lookup a particular CertRevocCaMBean from the list.

Parameters:

name - Unique short name

Returns:

A CertRevocCaMBean instance.