How to use

getCrl

method

in

io.servicecomb.foundation.ssl.SSLOption

private void checkCRL(X509Certificate[] chain) throws CertificateException {
 String crl = option.getCrl();
 crl = custom.getFullPath(crl);
 File file = new File(crl);
 if (!file.exists()) {
  return;
 }
 CRL[] crls = KeyStoreUtil.createCRL(crl);
 X509Certificate owner = CertificateUtil.findOwner(chain);
 for (CRL c : crls) {
  if (c.isRevoked(owner)) {
   LOG.error("certificate revoked");
   throw new CertificateException("certificate revoked");
  }
 }
}

if (isFileExists(sslCustom.getFullPath(sslOption.getCrl()))) {
 httpClientOptions.addCrlPath(sslCustom.getFullPath(sslOption.getCrl()));

  "ssl." + tag + ".keyStoreValue",
  "ssl.keyStoreValue");
option.crl = getStringProperty(configSource, DEFAULT_OPTION.getCrl(), "ssl." + tag + ".crl", "ssl.crl");
option.sslCustomClass =
  getStringProperty(configSource, null, "ssl." + tag + ".sslCustomClass", "ssl.sslCustomClass");