10

I'm currently writing a network TCP server using SSL. In production, we'll finally require clients to authenticate with a certificate.

In order to revoke certificates in case of a emergency, we would also like to establish a CRL.

My question is: Does Java check CRLs (if provided with the certificate) out of the box or do I need to manually implement such checks?

For testing, I prepared a certificate with a CRL set but Java does not seem to try to validate it (I dropped it into a local web server and there's no access).

I only found the com.sun.net.ssl.checkRevocation=true VM option, but apparently it doesn't query the CRL. VM debugging set to java.security.debug=certpath does not generate any output, either...

Java seems to have related classes in its subsystems (e.g. java.security.cert.X509CRLSelector), but it does not come into play, obviously.

edit: Removed outdated Dropbox link

3

4 Answers 4

13

I figured how to enable CRL checking within a SSLContext without implementing a custom validator, as suggested in the comments.

It is mainly about properly initializing the SSLContext's TrustManagers with a revocation checker, only a few lines, no custom check logic and the CRL is now checked automatically as well as the verification path.

Here's a snippet...

KeyStore ts = KeyStore.getInstance("JKS");
FileInputStream tfis = new FileInputStream(trustStorePath);
ts.load(tfis, trustStorePass.toCharArray());

KeyManagerFactory kmf =  KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());

// initialize certification path checking for the offered certificates and revocation checks against CLRs
CertPathBuilder cpb = CertPathBuilder.getInstance("PKIX");
PKIXRevocationChecker rc = (PKIXRevocationChecker)cpb.getRevocationChecker();
rc.setOptions(EnumSet.of(
    PKIXRevocationChecker.Option.PREFER_CRLS, // prefer CLR over OCSP
    PKIXRevocationChecker.Option.ONLY_END_ENTITY, 
PKIXRevocationChecker.Option.NO_FALLBACK)); // don't fall back to OCSP checking

PKIXBuilderParameters pkixParams = new PKIXBuilderParameters(ts, new X509CertSelector());
pkixParams.addCertPathChecker(rc);

tmf.init( new CertPathTrustManagerParameters(pkixParams) );
// init KeyManagerFactory
kmf.init(...)

SSLContext ctx = SSLContext.getInstance("TLS");
ctx.init(kmf.getKeyManagers), tmf.getTrustManagers(), null);

That essentially did what I needed in my application, checking whether a certificate issued to a client is revoked in our CRL. Only checking the end entity and allowing the CRL check to fail is accepted because its all our infrastructure.

10
  • Hey, is there a similar solution for java 1.7 ?
    – mdavid
    Dec 7, 2016 at 8:01
  • 1
    Hi @DoNuT, does it take care of fetching CRL from remote location (provided in cert) and caching it till the next update time? And then fetching the new CRL again? Thanks in advance.
    – ramtech
    Sep 22, 2017 at 15:09
  • 1
    @ramtech: I haven't checked implementation, but as far as I know from my tests using the SOFT_FAIL option (might be unavailable in my scenerio), it doesn't cache an hits the CRL location every time.
    – DoNuT
    Sep 25, 2017 at 5:34
  • 2
    ok nvm it get cloned for every request, so seems like ugly but thread-safe Dec 30, 2019 at 9:46
  • 1
    Edit: turns out if you have no CRL source defined it will always fail
    – OrangeDog
    Aug 25, 2022 at 14:45
6

Is OCSP OK for you?

bellow code enables OCSP for me:

// for debugging:
System.setProperty("javax.net.debug", "all");
System.setProperty("java.security.debug", "all");

System.setProperty("com.sun.net.ssl.checkRevocation", "true");
Security.setProperty("ocsp.enable", "true");

failed on CRL for errors like: How to check revocation status of X509Certificate chain using JAVA?

2

Notice that disabling revocation checking is a bad security practice. You can do it, but make sure you know the risk!

The currently accepted answer by @DoNuT works by setting PKIXRevocationChecker.Option.SOFT_FAIL, which causes the validator not to throw an exception even if revocation checking fails. The following answer disables revocation checking altogether, thus it is faster in case you don't want validation at all. This is because performing revocation checks needs contacting CRL distribution points or OCSP servers, and if you don't want that, you need not pay the price.

You can simply use setRevocationEnabled(false) on an object of type PKIXBuilderParameters.

// Initialize "anchors" to trusted certificates
// Initialize "selector" to the certificate you want to validate
PKIXBuilderParameters pbParams = new PKIXBuilderParameters(anchors, selector);

pbParams.setRevocationEnabled(false); // disable revocation check

CertPathBuilder cpb = CertPathBuilder.getInstance("PKIX");
CertPathBuilderResult cpbResult = cpb.build(pbParams);

CertPathValidator cpv = CertPathValidator.getInstance("PKIX");
CertPathValidatorResult result = cpv.validate(cpbResult.getCertPath(), pbParams);

System.out.println(result);
3
  • 3
    I'm not sure you fully get what I wanted to achieve here? I indeed want revocation checking in place, you advise to totally disable it? SOFT_FAIL was acceptable for my use case with self-signed certs and an internal CRL (don't break the application if the CRL is temporarily unavailable), but I've taken it out the example to avoid people pasting it into their code.
    – DoNuT
    Dec 11, 2018 at 8:27
  • 1
    @DoNuT The word temporarily will make sense if SOFT_FAIL has an upper bound time, imho!
    – faghani
    Apr 24, 2019 at 7:21
  • This isn't needed for SSL/TLS which was the Q and selfA (now modified BTW); JSSE automatically does setRevocationChecking(false) unless you set a sysprop -- correctly given in fishautumn's new A. Nov 24, 2019 at 6:32
1

First of all, the revocation checking that you can configure in jcontrol (from 1.8) applies only for applet and WebStart downloads and signer certificate checks ! For a programmed https client you can use the PKIXRevocationChecker mentioned above, but by my experience the Oracle implementation doesnt support LDAP CDP downloads at all. When I had this problem I needed to implement the full certificate chain check with CRL and immediate CA cert downloads from LDAP, behind my custom TrustManager's checkXXXX functions...

1
  • You're right, the VM option listed above didn't have an effect. As long as a SSLContext respectively the underlying TrustManagers are used, you should get away with the approach of adding a PKIXRevocationChecker, so Java HTTP clients and Apache Frameworks. As far as I can remember it only supports CRLs and OSCP, LDAP might be a different topic, but you can always add complexity. I had certificate handling for client and server in my hands, so I went for the simplest approach, being CRLs.
    – DoNuT
    Oct 1, 2018 at 10:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.