Class CertificateValidator

A comprehensive certificate validator that checks certificate validity, expiration, and revocation status using CRLs and OCSP responses.

This class provides methods to validate X.509 certificates against various criteria including:

Certificate expiration dates
Revocation status via Certificate Revocation Lists (CRLs)
Revocation status via Online Certificate Status Protocol (OCSP)
Certificate chain validation (when issuer certificates are provided)

Example

const validator = new CertificateValidator()

// Basic validation
const result = await validator.validate(certificate)

// Validation with revocation checking
const result = await validator.validate(certificate, {
  checkCRL: true,
  checkOCSP: true
}, {
  crls: [crl1, crl2],
  ocspResponses: [ocspResponse]
})

Index

Constructors

constructor

Methods

buildCertificateChain validate validateChain

Constructors

constructor

new CertificateValidator(): CertificateValidator
Returns CertificateValidator

Methods

buildCertificateChain

buildCertificateChain(
certificate: Certificate,
options: CertificateValidationOptions,
): Promise<CertificateChain>
Builds a certificate chain from the end-entity certificate to a trusted root.
Parameters
- certificate: Certificate
- options: CertificateValidationOptions
Returns Promise<CertificateChain>
- Defined in packages/pki-lite/src/core/CertificateValidator.ts:363

validate

validate(
    certificate: Certificate,
    options?: CertificateValidationOptions,
    revocationData?: {
        crls?: CertificateList[];
        issuerCertificate?: Certificate;
        ocspResponses?: OCSPResponse[];
    },
): Promise<CertificateValidationResult>
Validates a certificate against various criteria.
Parameters
- certificate: Certificate
  The certificate to validate
- options: CertificateValidationOptions = {}
  Validation options
- OptionalrevocationData: {
      crls?: CertificateList[];
      issuerCertificate?: Certificate;
      ocspResponses?: OCSPResponse[];
  }
  Optional revocation data (CRLs and OCSP responses)
Returns Promise<CertificateValidationResult>
Promise resolving to validation result
- Defined in packages/pki-lite/src/core/CertificateValidator.ts:180

validateChain

validateChain(
    chain: CertificateChain,
    options: CertificateValidationOptions,
    revocationData?: {
        crls?: CertificateList[];
        issuerCertificate?: Certificate;
        ocspResponses?: OCSPResponse[];
    },
): Promise<CertificateValidationResult>
Validates a complete certificate chain.
Parameters
- chain: CertificateChain
- options: CertificateValidationOptions
- OptionalrevocationData: {
      crls?: CertificateList[];
      issuerCertificate?: Certificate;
      ocspResponses?: OCSPResponse[];
  }
Returns Promise<CertificateValidationResult>
- Defined in packages/pki-lite/src/core/CertificateValidator.ts:447

Class CertificateValidator

Example

Index

Constructors

Methods

Constructors

constructor

Returns CertificateValidator

Methods

buildCertificateChain

Parameters

Returns Promise<CertificateChain>

validate

Parameters

Returns Promise<CertificateValidationResult>

validateChain

Parameters

Returns Promise<CertificateValidationResult>

Settings

On This Page