如何在OCSP请求中使用代理

Question

I need to validate X509 Certificate using OCSP using http proxy. Here is my code:

                List<X509Certificate> certificates = Collections.singletonList(certificate);
            CertPath cp = factory.generateCertPath(certificates);
            Set<TrustAnchor> trust = new HashSet<>();
            trust.add(new TrustAnchor(issuerCertificate, null));
            PKIXParameters params = new PKIXParameters(trust);
            params.setRevocationEnabled(true);
            CertPathValidator cpv =
                    CertPathValidator.getInstance(CertPathValidator.getDefaultType());

            PKIXCertPathValidatorResult validationResult =
                    (PKIXCertPathValidatorResult) cpv.validate(cp, params);

I know, that I can set proxy using System.setProperty("http.proxy", "...") but I need to set it only for my request, not for whole system.

Answer 1

我找到了基于一个Apache Open Source项目Apache Open Source项目编写自己的OCSP验证代码的最简单方法，并将其扩展为使用可配置的HTTP代理进行请求