ESYAE-imza Kütüphaneleri

Bu sayfa salt okunur. Kaynağı görebilirsiniz ama değiştiremezsiniz. Bunun yanlış olduğunu düşünüyorsanız yöneticiye danışın.

<h2>Certificate Validation Policy</h2>
<div class="level2">

<p>
The certificate validation policy file coming the downloaded api, provides standard controls for a certificate
to be considered as valid. It uses only the certificates store as the source of trusted certificates. The certificate store contains legally valid root certificates. Therefore, in order to work with test certificates
you have to define the root of the test certificates as trusted in the certificate validation policy file. You can see section Configuring The Policy at Run-time.
</p>

<p>
You can also specify the method of revocation control, via either  OCSP  or CRL. Validation of a certificate requires validation of the all certificates on the certificate chain. Not all of the certificates on the chain
is available for OCSP query. So it is not possible to validate a certificate using only OCSP queries. By configuring the validation policy properly, validation operation first tries OCSP and if it is not available then tries CRL control for the certificate revocation check. In this case, the method that must be performed first must be placed before the other in the policy file. 
</p>

</div>

<h3>Configuring The Policy at Run-time</h3>
<div class="level3">

<p>
The policy file can be edited after read from the file system. For example, the code below, demonstrates how to add TrustedCertificateFinderFromFileSystem to the validation policy at run-time.
</p>

<p>
<em><</em>sxh java; title: Java>
ValidationPolicy POLICY = PolicyReader.readValidationPolicy(new FileInputStream(POLICY_FILE));
</p>

<p>
<em>For UEKAE Test Environment, we add our test roots.
HashMap</em><<em>String, Object> parameters = new HashMap</em><<em>String, Object>();
parameters.put("dizin", "T:\\MA3\\api-cmssignature\\testdata\\support\\UGRootCerts\\");
POLICY.bulmaPolitikasiAl().addTrustedCertificateFinder("tr.gov.tubitak.uekae.esya.api.certificate.validation.find.certificate.trusted.TrustedCertificateFinderFromFileSystem", parameters);
</em><<em>/sxh>

</em><<em>sxh csharp; title:C#>
ValidationPolicy POLICY = PolicyReader.readValidationPolicy(POLICY_FILE);

</em>For UEKAE Test Environment, we add our test roots.
Dictionary<em><</em>String, Object> parameters = new Dictionary<em><</em>String, Object>();
parameters.Add("dizin", "T:\\MA3\\api-cmssignature\\testdata\\support\\UGRootCerts\\");
POLICY.bulmaPolitikasiAl().addTrustedCertificateFinder("tr.gov.tubitak.uekae.esya.api.certificate.validation.find.certificate.trusted.TrustedCertificateFinderFromFileSystem", parameters);
<em><</em>/sxh>
</p>

</div>

<h3>Policy File Elements</h3>
<div class="level3">

<p>
The classes that can be included in the policy file are listed in the table below. In this table, the character "*" in the section where possible values for a paramater are listed denotes the default value. The symbol [O] denotes that the parameter is optional. The XML tags next to each header shows the place where the classes under that header should be in the policy file.
</p>

</div>

<h3>Tablo 1 ESYA API Checker List</h3>
<div class="level3">

<span class='np_break'> </span>
<div class="table"><table class="inline">
	<tr class="row0">
		<th class="col0 centeralign" colspan="4">  TRUSTED CERTIFICATE CHECKERS <code><em><</em>policy><em><</em>validate><em><</em>certificate><em><</em>trustedcertificate></code>  </th>
	</tr>
	<tr class="row1">
		<td class="col0" colspan="2"> <code>CertificateDateChecker</code> </td><td class="col2 leftalign" colspan="2"> Validates that the validity period in the certificate covers the validation time.  </td>
	</tr>
	<tr class="row2">
		<td class="col0" colspan="2"> <code>SelfSignatureChecker</code> </td><td class="col2" colspan="2"> Validates that the signature in the certificate is created by the public key in the certificate. </td>
	</tr>
	<tr class="row3">
		<th class="col0 centeralign" colspan="4">  CERTIFICATE SELF CHECKERS <code><em><</em>policy><em><</em>validate><em><</em>certificate><em><</em>self></code>  </th>
	</tr>
	<tr class="row4">
		<td class="col0" colspan="2"> <code>CertificateDateChecker</code> </td><td class="col2 rightalign" colspan="2">   Validates that the validity period in the certificate covers the validation time. </td>
	</tr>
	<tr class="row5">
		<td class="col0" colspan="2"> <code>CertificateExtensionChecker</code> </td><td class="col2" colspan="2"> Validates that the extension information in the certificate is compatible with RFC 5280. </td>
	</tr>
	<tr class="row6">
		<td class="col0" colspan="2"> <code>PositiveSerialNumberChecker</code> </td><td class="col2" colspan="2"> Validates that the certificate serial number is positive integer. </td>
	</tr>
	<tr class="row7">
		<td class="col0" colspan="2"> <code>SignatureAlgConsistencyChecker</code> </td><td class="col2" colspan="2"> Validates thet the signature algorithms in the certificate are matching. </td>
	</tr>
	<tr class="row8">
		<td class="col0" colspan="2"> <code>VersionChecker</code> </td><td class="col2" colspan="2"> Validates that the version information in the certificate is compatible with RFC 5280. </td>
	</tr>
	<tr class="row9">
		<td class="col0" colspan="2"> <code>QualifiedCertificateChecker</code> </td><td class="col2" colspan="2"> Validates that the certificate has qualified certificate properties. </td>
	</tr>
	<tr class="row10">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> statementoids </td><td class="col3"> Given oids is required in the certificate. In some cases multiple oids are required. You can combine multiple oids with AND or OR relation. Different oids are used in differnet countries. In such cases, oids are combined with OR relation. ( i.e. "(0.4.0.1862.1.1 AND 2.16.792.1.61.0.1.5070.1.1) OR (4.3.2.1 AND 1.2.3.4)") </td>
	</tr>
	<tr class="row11">
		<th class="col0 centeralign" colspan="4">  CERTIFICATE CHAIN CHECKERS <code><em><</em>policy><em><</em>validate><em><</em>certificate><em><</em>issuer></code>  </th>
	</tr>
	<tr class="row12">
		<td class="col0" colspan="2"> <code>BasicConstraintCAChecker</code> </td><td class="col2" colspan="2"> Validates that the basic constraints extension in the issuer certificate is compatible with RFC 5280. </td>
	</tr>
	<tr class="row13">
		<td class="col0" colspan="2"> <code>CertificateKeyUsageChecker</code> </td><td class="col2" colspan="2">Validates that the key usage extension in the issuer certificate is compatible with RFC 5280. </td>
	</tr>
	<tr class="row14">
		<td class="col0" colspan="2"> <code>CertificateNameChecker</code> </td><td class="col2" colspan="2"> Validates that the issuer information in the certificate is matching with the subject information in the issuer certificate. </td>
	</tr>
	<tr class="row15">
		<td class="col0" colspan="2"> <code>CertificateSignatureChecker</code> </td><td class="col2" colspan="2"> Validates that the signature in the certificate is created by the issuer certificate by cryptographic verification. </td>
	</tr>
	<tr class="row16">
		<td class="col0" colspan="2"> <code>KeyIdentifierChecker</code> </td><td class="col2" colspan="2"> Validates that the authority key identifier extension in the certificate is matching with the subject key identifier extension in the issuer certificate. </td>
	</tr>
	<tr class="row17">
		<td class="col0" colspan="2"> <code>NameConstraintsChecker</code> </td><td class="col2" colspan="2"> Validates that the relation between subject information in the certificate and the name constraints extension in the issuer certificate is compatible with RFC 5280. </td>
	</tr>
	<tr class="row18">
		<td class="col0" colspan="2"> <code>PathLenConstraintChecker</code> </td><td class="col2" colspan="2"> Validates that the path length constraints extension in the issuer certificate is compatible with RFC 5280. </td>
	</tr>
	<tr class="row19">
		<td class="col0" colspan="2"> <code>PolicyConstraintsChecker</code> </td><td class="col2" colspan="2">Validates that the policy constraints extension in the issuer certificate is compatible with RFC 5280. </td>
	</tr>
	<tr class="row20">
		<th class="col0 centeralign" colspan="4">  CERTIFICATE REVOCATION CHECKERS <code><em><</em>policy><em><</em>validate><em><</em>certificate><em><</em>revocation></code>  </th>
	</tr>
	<tr class="row21">
		<td class="col0" colspan="2"> <code>RevocationFromCRLChecker</code> </td><td class="col2" colspan="2"> Performs revocation control of a certificate by looking at the corresponding CRL.</td>
	</tr>
	<tr class="row22">
		<td class="col0" rowspan="3"> </td><td class="col1" rowspan="3"> Parameters</td><td class="col2"> cevrimdisicalis </td><td class="col3"> [true,false*] <br/>
Indicates that the validation is performed offline. When specified as True, revocation checker return successful result iven if it can not find any crl. This parameter is defined in order to validate certificates in offline environments where online crls are not available. Must be used with care! </td>
	</tr>
	<tr class="row23">
		<td class="col0"> checkAllCRLs </td><td class="col1"> [true,false*] <br/>
Normally, it is enough to check one valid CRL for the revocation control of a certificate from a crl. In some cases, user may want to check all crls that can be found by the finders. If so, this parameter must be set to true. </td>
	</tr>
	<tr class="row24">
		<td class="col0"> devam </td><td class="col1"> [true,false*] <br/>
If it is true, then the validation process continues to the next crl even if the control for the current crl completed successfully. </td>
	</tr>
	<tr class="row25">
		<td class="col0" colspan="2"> <code>RevocationFromOCSPChecker</code> </td><td class="col2" colspan="2"> </td>
	</tr>
	<tr class="row26">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> devam </td><td class="col3"> [true,false*] <br/>
If it is true, then the validation process continues to the next ocsp response even if the control for the current ocsp response completed successfully. </td>
	</tr>
	<tr class="row27">
		<th class="col0 centeralign" colspan="4">  CRL SELF CHECKERS <code><em><</em>policy><em><</em>validate><em><</em>crl><em><</em>crlself></code>  </th>
	</tr>
	<tr class="row28">
		<td class="col0" colspan="2"> <code>CRLDateChecker</code> </td><td class="col2" colspan="2"> Validates that the validity period in the crl covers the validation time. </td>
	</tr>
	<tr class="row29">
		<td class="col0" colspan="2"> <code>CRLExtensionChecker</code> </td><td class="col2" colspan="2"> Validates that the extension information in the crl is compatible with RFC 5280. </td>
	</tr>
	<tr class="row30">
		<th class="col0 centeralign" colspan="4">  CRL CHAIN CHECKERS <code><em><</em>policy><em><</em>validate><em><</em>crl><em><</em>crlissuer></code>  </th>
	</tr>
	<tr class="row31">
		<td class="col0" colspan="2"> <code>CRLKeyUsageChecker</code> </td><td class="col2" colspan="2"> Validates that the key usage extension in the issuer crl certificate is compatible with RFC 5280. </td>
	</tr>
	<tr class="row32">
		<td class="col0" colspan="2"> <code>CRLSignatureChecker</code> </td><td class="col2" colspan="2"> Validates that the signature in the crl is created by the crl issuer certificate by cryptographic verification. </td>
	</tr>
	<tr class="row33">
		<th class="col0 centeralign" colspan="4">  DELTA CRL CHECKERS <code><em><</em>policy><em><</em>validate><deltacrl></code>  </th>
	</tr>
	<tr class="row34">
		<td class="col0" colspan="2"> <code>FreshestCRLChecker</code> </td><td class="col2" colspan="2"> Validates that the freshest crl extension in the delta crl is compatible with RFC 5280. </td>
	</tr>
	<tr class="row35">
		<td class="col0" colspan="2"> <code>DeltaCRLIndicatorChecker</code> </td><td class="col2" colspan="2"> Validates that the delta crl indicator extension in the delta crl is compatible with RFC 5280. </td>
	</tr>
	<tr class="row36">
		<th class="col0 centeralign" colspan="4">  OCSP RESPONSE CHECKERS <code><em><</em>policy><em><</em>validate><em><</em>ocsp></code>  </th>
	</tr>
	<tr class="row37">
		<td class="col0" colspan="2"> <code>SigningCertificateChecker</code> </td><td class="col2" colspan="2"> Validates the ocsp response signing certificate. </td>
	</tr>
	<tr class="row38">
		<td class="col0" colspan="2"> <code>OCSPSignatureChecker</code> </td><td class="col2" colspan="2"> Validates that the signature in the ocsp response is created by the oscp issuer certificate by cryptographic verification. </td>
	</tr>
	<tr class="row39">
		<td class="col0" colspan="2"> <code>ResponseStatusChecker</code> </td><td class="col2" colspan="2"> Validates that the response status information in the ocsp response is valid. </td>
	</tr>
	<tr class="row40">
		<td class="col0" colspan="2"> <code>OCSPResponseDateChecker</code> </td><td class="col2" colspan="2">Validates that the validity period in the ocsp response covers the validation time. </td>
	</tr>
</table>
<span class='np_break'> </span>
</div>
</div>

<h3>Tablo 2 ESYA API Matcher List</h3>
<div class="level3">

<span class='np_break'> </span>
<div class="table"><table class="inline">
	<tr class="row0">
		<th class="col0 centeralign" colspan="2">  CERTIFICATE MATCHERS <code><em><</em>policy><em><</em>match><em><</em>certificate></code>  </th>
	</tr>
	<tr class="row1">
		<td class="col0"> <code>IssuerSubjectMatcher</code> </td><td class="col1 leftalign"> Matches the issuer info in the certificate with the subject info in the issuer certificate.  </td>
	</tr>
	<tr class="row2">
		<th class="col0 centeralign" colspan="2">  CRL MATCHERS <code><em><</em>policy><em><</em>match><em><</em>certificate></code>  </th>
	</tr>
	<tr class="row3">
		<td class="col0"> <code>CRLDistributionPointMatcher</code> </td><td class="col1"> Matches the CRL Distribution Points (CDP) extension in the certificate and the Issuing Distribution Point (IDP) extension in the CRL. </td>
	</tr>
	<tr class="row4">
		<td class="col0"> <code>CRLDistributionPointOnlyContainsMatcher</code> </td><td class="col1"> Matches "onlyContains" feautres in the Issuing Distribution Point (IDP) extension in the CRL and Basic Constraints extension in the certificate. </td>
	</tr>
	<tr class="row5">
		<td class="col0"> <code>CRLIssuerMatcher</code> </td><td class="col1"> Matches the issuer info in the CRL and the issuer info in the certificate. </td>
	</tr>
	<tr class="row6">
		<td class="col0"> <code>CRLKeyIDMatcher</code> </td><td class="col1"> Matches the authority key identifier extension in the crl and the authority key identifier extension in the certificate. </td>
	</tr>
	<tr class="row7">
		<th class="col0 centeralign" colspan="2">  Delta CRL MATCHERS<code><em><</em>policy><em><</em>match><em><</em>certificate></code>  </th>
	</tr>
	<tr class="row8">
		<td class="col0"> <code>BaseCRLNumberMatcher</code> </td><td class="col1"> Matches the Base CRL Number extension in the delta crl with the CRL Number extension in the crl. </td>
	</tr>
	<tr class="row9">
		<td class="col0"> <code>CRLNumberMatcher</code> </td><td class="col1"> Matches the CRL Number extension in the delta crl with the CRL Number extension in the crl, by checking the former is greater than the latter. </td>
	</tr>
	<tr class="row10">
		<td class="col0"> <code>DeltaCRLIssuerMatcher</code> </td><td class="col1"> Matches the issuer information in the delta crl with the issuer information in the base crl. </td>
	</tr>
	<tr class="row11">
		<td class="col0"> <code>ScopeMatcher</code> </td><td class="col1"> Matches the Issuing Distribution Point extension in the delta crl with the Issuing Distribution Point extension in the vase crl. </td>
	</tr>
	<tr class="row12">
		<th class="col0 centeralign" colspan="2">  OCSP RESPONSE MATCHERS <code><em><</em>policy><em><</em>match><em><</em>ocsp></code>  </th>
	</tr>
	<tr class="row13">
		<td class="col0"> <code>CertIDOCSPResponseMatcher</code> </td><td class="col1"> Matches the certificate with the ocsp response by looking at the Cert ID field in the ocsp response. </td>
	</tr>
	<tr class="row14">
		<th class="col0 centeralign" colspan="2">  CROSS CERTIFICATE MATCHERS <code><em><</em>policy><em><</em>match><em><</em>crosscertificate></code>  </th>
	</tr>
	<tr class="row15">
		<td class="col0"> <code>PublicKeyMatcher</code> </td><td class="col1"> Matches the public key in the issuer certificate with the public key in the cross certificate. </td>
	</tr>
	<tr class="row16">
		<td class="col0"> <code>SKIMatcher</code> </td><td class="col1"> Matches the Subject Key Identifier extension in the issuer certificate with the Subject Key Identifier extension in the cross certificate. </td>
	</tr>
	<tr class="row17">
		<td class="col0"> <code>SubjectMatcher</code> </td><td class="col1"> Matches the subject information in the issuer certificate with the subject information in the cross certificate. </td>
	</tr>
</table>
<span class='np_break'> </span>
</div>
</div>

<h3>Table 3 Esya API Finder List</h3>
<div class="level3">

<span class='np_break'> </span>
<div class="table"><table class="inline">
	<tr class="row0">
		<th class="col0 centeralign" colspan="4">  TRUSTED CERTFICATE FINDERS<em><</em>policy> <code><em><</em>find><em><</em>trustedcertificate></code>  </th>
	</tr>
	<tr class="row1">
		<td class="col0" colspan="2"> <code>TrustedCertificateFinderFromECertStore</code> </td><td class="col2" colspan="2"> Finds the issuer certificates stored in the local certificate store.</td>
	</tr>
	<tr class="row2">
		<td class="col0" rowspan="2"> </td><td class="col1" rowspan="2"> Parameters</td><td class="col2"> securitylevel</td><td class="col3"> [PERSONAL*, ORGANIZATIONAL, LEGAL]<br/>
Specifies the trust level of the found certificates. For personally defined certificates PERSONAL is used. ORGANIZATIONAL is used for trusting the certificates defined by the organization. LEGAL is used when only legally trusted certificates are trusted. </td>
	</tr>
	<tr class="row3">
		<td class="col0"> storepath [O] </td><td class="col1"> Specifies the location of the certificate store in the file system. </td>
	</tr>
	<tr class="row4">
		<td class="col0" colspan="2"> <code>TrustedCertificateFinderFromFileSystem</code> </td><td class="col2"></td><td class="col3"></td>
	</tr>
</table>
<span class='np_break'> </span>
</div>
<p>
 ||
</p>

<span class='np_break'> </span>
<div class="table"><table class="inline">
	<tr class="row0">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> dizin </td><td class="col3"> Folder address </td>
	</tr>
	<tr class="row1">
		<td class="col0" colspan="2"> <code>TrustedCertificateFinderFromXml</code> </td><td class="col2" colspan="2"> Finds issuer certificates in an XML file at the given URL. </td>
	</tr>
	<tr class="row2">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> storepath [O] </td><td class="col3"> URL address </td>
	</tr>
	<tr class="row3">
		<th class="col0 centeralign" colspan="4">  CERTIFICATE FINDERS <code><em><</em>policy><em><</em>find><em><</em>certificate></code>  </th>
	</tr>
	<tr class="row4">
		<td class="col0" colspan="2"> <code>CertificateFinderFromECertStore</code> </td><td class="col2" colspan="2"> Finds the certificates stored in the local certificate store </td>
	</tr>
	<tr class="row5">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> storepath [0] </td><td class="col3"> Specifies the location of the certificate store in the file system. </td>
	</tr>
	<tr class="row6">
		<td class="col0" colspan="2"> <code>CertificateFinderFromFile</code> </td><td class="col2" colspan="2"> Finds the certificate in the file system. </td>
	</tr>
	<tr class="row7">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> dosyayolu </td><td class="col3"> File address </td>
	</tr>
	<tr class="row8">
		<td class="col0" colspan="2"> <code>CertificateFinderFromXml</code> </td><td class="col2" colspan="2"> Finds the certificate in an XML file at the given URL. </td>
	</tr>
	<tr class="row9">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> storepath [O] </td><td class="col3"> URL address </td>
	</tr>
	<tr class="row10">
		<td class="col0" colspan="2"> <code>CertificateFinderFromHTTP</code> </td><td class="col2" colspan="2"> Finds the issuer certificate by looking at the HTTP address in the Authority Info Access extension in the certificate. </td>
	</tr>
	<tr class="row11">
		<td class="col0" colspan="2"> <code>CertificateFinderFromLDAP</code> </td><td class="col2" colspan="2"> Finds the issuer certificate by looking at the LDAP address in the Authority Info Access extension in the certificate. </td>
	</tr>
	<tr class="row12">
		<th class="col0 centeralign" colspan="4">  CRL FINDERS <code><em><</em>policy><em><</em>validate><em><</em>certificate><em><</em>revocation><em><</em>find></code>  </th>
	</tr>
	<tr class="row13">
		<td class="col0" colspan="2"> <code>CRLFinderFromECertStore</code> </td><td class="col2" colspan="2"> Finds the crls stored in the local certificate store. </td>
	</tr>
	<tr class="row14">
		<td class="col0" rowspan="2"> </td><td class="col1" rowspan="2"> Parameters</td><td class="col2"> storepath [0] </td><td class="col3"> Specifies the location of the certificate store in the file system. </td>
	</tr>
	<tr class="row15">
		<td class="col0"> getactivecrl </td><td class="col1"> [true,false*] <br/>
For the certificate validation bo be more certain, the crls that are published after the validation time must be used. But in some cases, the new crl to be published may not be waited. In such cases, this parameter must be set to true. </td>
	</tr>
	<tr class="row16">
		<td class="col0" colspan="2"> <code>CRLFinderFromFile</code> </td><td class="col2" colspan="2"> Finds the crl in the file system. </td>
	</tr>
	<tr class="row17">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> dosyayolu </td><td class="col3"> File address </td>
	</tr>
	<tr class="row18">
		<td class="col0" colspan="2"> <code>CRLFinderFromHTTP</code> </td><td class="col2" colspan="2"> Finds the crl by looking at the HTTP address in the CRL Distribution Points extension in the certificate. </td>
	</tr>
	<tr class="row19">
		<td class="col0" colspan="2"> <code>CRLFinderFromLDAP</code> </td><td class="col2" colspan="2"> Finds the crl by looking at the LDAP address in the CRL Distribution Points extension in the certificate. </td>
	</tr>
	<tr class="row20">
		<th class="col0 centeralign" colspan="4">  OCSP RESPONSE FINDERS <code><em><</em>policy><em><</em>validate><em><</em>certificate><em><</em>revocation><em><</em>find></code>  </th>
	</tr>
	<tr class="row21">
		<td class="col0" colspan="2"> <code>OCSPResponseFinderFromECertStore</code> </td><td class="col2" colspan="2"> Finds the ocsp reponses stored in the local certificate store. </td>
	</tr>
	<tr class="row22">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> storepath [0] </td><td class="col3 leftalign"> Specifies the location of the certificate store in the file system.  </td>
	</tr>
	<tr class="row23">
		<td class="col0" colspan="2"> <code>OCSPResponseFinderFromAIA</code> </td><td class="col2" colspan="2"> Finds the crl by looking at the OCSP server address in the Authority Information Access extension in the certificate. </td>
	</tr>
	<tr class="row24">
		<th class="col0 centeralign" colspan="4">  DELTA CRL FINDERS <code><em><</em>find><deltacrl></code>  </th>
	</tr>
	<tr class="row25">
		<td class="col0" colspan="2"> <code>DeltaCRLFinderFromECertStore</code> </td><td class="col2" colspan="2"> Finds the delta crls stored in the local certificate store. </td>
	</tr>
	<tr class="row26">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> storepath [0] </td><td class="col3"> Specifies the location of the certificate store in the file system. </td>
	</tr>
	<tr class="row27">
		<td class="col0" colspan="2"> <code>DeltaCRLFinderFromFile</code> </td><td class="col2" colspan="2"> Finds the delta crl in the file system. </td>
	</tr>
	<tr class="row28">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> dosyayolu </td><td class="col3"> File address </td>
	</tr>
	<tr class="row29">
		<th class="col0 centeralign" colspan="4">  CROSS CERTIFICATE FINDERS <code><em><</em>find><em><</em>crosscertificate></code>  </th>
	</tr>
	<tr class="row30">
		<td class="col0" colspan="2"> <code>CrossCertificateFinderFromECertStore</code> </td><td class="col2" colspan="2"> Finds the delta crls stored in the local certificate store. </td>
	</tr>
	<tr class="row31">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> storepath [0] </td><td class="col3"> Specifies the location of the certificate store in the file system. </td>
	</tr>
	<tr class="row32">
		<td class="col0" colspan="2"> <code>CrossCertificateFinderFromFile</code> </td><td class="col2 leftalign" colspan="2"> Finds the cross certificates in the file system.  </td>
	</tr>
	<tr class="row33">
		<td class="col0"> </td><td class="col1"> Parameters </td><td class="col2"> dosyayolu </td><td class="col3"> File address </td>
	</tr>
</table>
<span class='np_break'> </span>
</div>
</div>

<h3>Tablo 4 Esya API Saver List</h3>
<div class="level3">

<span class='np_break'> </span>
<div class="table"><table class="inline">
	<tr class="row0">
		<th class="col0 centeralign" colspan="4">  SAVERS<code><em><</em>policy><em><</em>save></code>  </th>
	</tr>
	<tr class="row1">
		<td class="col0" colspan="2"> <code>CertStoreCertificateSaver</code> </td><td class="col2" colspan="2"> Saves the certificates found during the validation into the local certificate store. </td>
	</tr>
	<tr class="row2">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2 leftalign"> storepath [O]	</td><td class="col3"> Specifies the location of the certificate store in the file system. </td>
	</tr>
	<tr class="row3">
		<td class="col0" colspan="2"> <code>CertStoreCRLSaver</code> </td><td class="col2 leftalign" colspan="2"> Saves the crls found during the validation into the local certificate store.   </td>
	</tr>
	<tr class="row4">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2"> storepath [O] </td><td class="col3"> Specifies the location of the certificate store in the file system. </td>
	</tr>
	<tr class="row5">
		<td class="col0" colspan="2"> <code>CertStoreOCSPResponseSaver</code> </td><td class="col2" colspan="2"> Saves the ocsp responses found during the validation into the local certificate store. </td>
	</tr>
	<tr class="row6">
		<td class="col0"> </td><td class="col1"> Parameters</td><td class="col2 leftalign">storepath [O]	</td><td class="col3"> Specifies the location of the certificate store in the file system. </td>
	</tr>
</table>
<span class='np_break'> </span>
</div>
</div>
ESYAE-imza Kütüphaneleri

User Tools

Site Tools

Page Tools
