Java

OCSP Check Domain's Server Certificate Revocation Status

See more HTTP Examples

Sends an OCSP request to determine the revocation status for an SSL server certificate. Java

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkHttp http = new CkHttp();

    // Check the revocation status of the SSL server certificate for chilkatsoft.com
    int status = http.OcspCheck("chilkatsoft.com",443);

    System.out.println("chilkatsoft.com status = " + status);

    // The status can have 4 values:
    // -1: Unable to check because of an error.
    //  0: Good
    //  1: Revoked
    //  2: Unknown

    if (status < 0) {
        System.out.println(http.lastErrorText());
        }

    // Now check the status for a revoked server certificate.
    status = http.OcspCheck("revoked.badssl.com",443);

    System.out.println("revoked.badssl.com status = " + status);
  }
}