private void buildCRL(X509Certificate x509Certificate, String crlPath) throws Exception { X509v2CRLBuilder builder = new JcaX509v2CRLBuilder(x509Certificate.getIssuerX500Principal(), certStartTime); builder.addCRLEntry(x509Certificate.getSerialNumber(), certStartTime, CRLReason.cACompromise); builder.setNextUpdate(certEndTime); builder.addExtension(Extension.authorityKeyIdentifier, false, new JcaX509ExtensionUtils() .createAuthorityKeyIdentifier(rootCertificate)); builder.addExtension(Extension.cRLNumber, false, new CRLNumber(new BigInteger("1000"))); X509CRLHolder cRLHolder = builder.build(contentSigner); PemWriter pemWriter = new PemWriter(new FileWriter(crlPath)); pemWriter.writeObject(new MiscPEMGenerator(cRLHolder)); pemWriter.flush(); pemWriter.close(); }
Date issueDate = now.toDate(); Date nextUpdate = now.plusYears(5).toDate(); X509v2CRLBuilder builder = new JcaX509v2CRLBuilder(issuer, issueDate); builder.setNextUpdate(nextUpdate); builder.addExtension(Extension.authorityKeyIdentifier, false,
Date issueDate = now.toDate(); Date nextUpdate = now.plusYears(5).toDate(); X509v2CRLBuilder builder = new JcaX509v2CRLBuilder(issuer, issueDate); builder.setNextUpdate(nextUpdate); builder.addExtension(Extension.authorityKeyIdentifier, false,
Date nextUpdate = now.plusYears(5).toDate(); X509v2CRLBuilder builder = new JcaX509v2CRLBuilder(crl.getIssuerX500Principal(), thisUpdate); builder.setNextUpdate(nextUpdate);
Date nextUpdate = now.plusYears(5).toDate(); X509v2CRLBuilder builder = new JcaX509v2CRLBuilder(crl.getIssuerX500Principal(), thisUpdate); builder.setNextUpdate(nextUpdate);