Java

Load .crl, Convert to XML, Get Revoked Serial Numbers and Dates

See more Certificates Examples

Load a binary .crl file (Certificate Revocation List), converts to XML, and then gets the revoked certificate serial numbers and revocation dates.

Note: This example requires Chilkat v9.5.0.77 or greater.

Chilkat2 Java

import com.chilkatsoft.chilkat2.Asn;
import com.chilkatsoft.chilkat2.BinData;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.DateTime;
import com.chilkatsoft.chilkat2.Xml;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        // Load a binary .crl file.
        BinData bdCrl = new BinData();
        try {
            bdCrl.loadFile("qa_data/crl/ca1.crl");
        } catch (ChilkatException e) {
            System.out.println("Failed to load CRL file.");
            return;
        }

        Asn asn = new Asn();
        try {
            asn.loadBd(bdCrl);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Convert ASN.1 to XML and load into xml and re-emit for pretty printing..
        Xml xml = new Xml();
        xml.loadXml(asn.asnToXml());
        xml.saveXml("qa_output/crl.xml");

        // Use this online tool to generate parsing code from CRL XML:
        // Generate Parsing Code from XML

        // Here's code to parse the XML.  This code was generated by the above tool,
        // and then we modified it by removing unneeded code and changing some names
        int j = 0;
        int count_j = 0;
        int k = 0;
        int count_k = 0;

        String revokedCertSerialHex = "";
        String dateRevoked = "";

        DateTime dt = new DateTime();

        int i = 0;
        int count_i = xml.numChildrenHavingTag("sequence");
        while (i < count_i) {
            xml.setI(i);

            j = 0;
            count_j = xml.numChildrenHavingTag("sequence[i]|sequence");
            while (j < count_j) {
                xml.setJ(j);

                k = 0;
                count_k = xml.numChildrenHavingTag("sequence[i]|sequence[j]|sequence");
                while (k < count_k) {
                    xml.setK(k);

                    // Get the revoked certificate's serial number in uppercase hex.
                    revokedCertSerialHex = xml.getChildContent("sequence[i]|sequence[j]|sequence[k]|int");
                    System.out.println("serial number: " + revokedCertSerialHex);

                    // Get the date/time revoked.  It will be a string formatted as "YYMMDDhhmmssZ", such as "181023093028Z"
                    dateRevoked = xml.getChildContent("sequence[i]|sequence[j]|sequence[k]|utctime");

                    // Starting in Chilkat v9.5.0.77, date/time strings formatted as YYMMDDhhmmssZ can be parsed as follows:
                    dt.setFromTimestamp(dateRevoked);
                    System.out.println("date revoked: " + dt.getAsRfc822(false));

                    k = k + 1;
                }

                j = j + 1;
            }

            i = i + 1;
        }
    }
}