Java

Load .crl, Convert to XML, Get Revoked Serial Numbers and Dates

See more Certificates Examples

Load a binary .crl file (Certificate Revocation List), converts to XML, and then gets the revoked certificate serial numbers and revocation dates.

Note: This example requires Chilkat v9.5.0.77 or greater.

Java

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    boolean success = false;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Load a binary .crl file.
    CkBinData bdCrl = new CkBinData();
    success = bdCrl.LoadFile("qa_data/crl/ca1.crl");
    if (success != true) {
        System.out.println("Failed to load CRL file.");
        return;
        }

    CkAsn asn = new CkAsn();
    success = asn.LoadBd(bdCrl);
    if (success != true) {
        System.out.println(asn.lastErrorText());
        return;
        }

    // Convert ASN.1 to XML and load into xml and re-emit for pretty printing..
    CkXml xml = new CkXml();
    xml.LoadXml(asn.asnToXml());
    success = xml.SaveXml("qa_output/crl.xml");

    // Use this online tool to generate parsing code from CRL XML: 
    // Generate Parsing Code from XML

    // Here's code to parse the XML.  This code was generated by the above tool,
    // and then we modified it by removing unneeded code and changing some names
    int i;
    int count_i;
    String tagPath;
    int j;
    int count_j;
    int k;
    int count_k;

    String revokedCertSerialHex;
    String dateRevoked;

    CkDateTime dt = new CkDateTime();

    i = 0;
    count_i = xml.NumChildrenHavingTag("sequence");
    while (i < count_i) {
        xml.put_I(i);

        j = 0;
        count_j = xml.NumChildrenHavingTag("sequence[i]|sequence");
        while (j < count_j) {
            xml.put_J(j);

            k = 0;
            count_k = xml.NumChildrenHavingTag("sequence[i]|sequence[j]|sequence");
            while (k < count_k) {
                xml.put_K(k);

                // Get the revoked certificate's serial number in uppercase hex.
                revokedCertSerialHex = xml.getChildContent("sequence[i]|sequence[j]|sequence[k]|int");
                System.out.println("serial number: " + revokedCertSerialHex);

                // Get the date/time revoked.  It will be a string formatted as "YYMMDDhhmmssZ", such as "181023093028Z"
                dateRevoked = xml.getChildContent("sequence[i]|sequence[j]|sequence[k]|utctime");

                // Starting in Chilkat v9.5.0.77, date/time strings formatted as YYMMDDhhmmssZ can be parsed as follows:
                dt.SetFromTimestamp(dateRevoked);
                System.out.println("date revoked: " + dt.getAsRfc822(false));

                k = k+1;
                }

            j = j+1;
            }

        i = i+1;
        }
  }
}