import org.bouncycastle.ocsp.OCSPReq; //导入依赖的package包/类
public static OCSPReq GenOcspReq(X509Certificate nextCert,
		X509Certificate nextIssuer) throws OCSPException {

	OCSPReqGenerator ocspRequestGenerator = new OCSPReqGenerator();
	CertificateID certId = new CertificateID(CertificateID.HASH_SHA1,
			nextIssuer, nextCert.getSerialNumber());
	ocspRequestGenerator.addRequest(certId);

	BigInteger nonce = BigInteger.valueOf(System.currentTimeMillis());
	Vector<DERObjectIdentifier> oids = new Vector<DERObjectIdentifier>();
	Vector<X509Extension> values = new Vector<X509Extension>();

	oids.add(OCSPObjectIdentifiers.id_pkix_ocsp_nonce);
	values.add(new X509Extension(false, new DEROctetString(nonce
			.toByteArray())));

	ocspRequestGenerator.setRequestExtensions(new X509Extensions(oids,
			values));
	return ocspRequestGenerator.generate();
}
 

import org.bouncycastle.ocsp.OCSPReq; //导入依赖的package包/类
private void testIrregularVersionReq()
    throws Exception
{
    OCSPReq ocspRequest = new OCSPReq(irregReq);
    X509Certificate cert = ocspRequest.getCerts("BC")[0];
    if (!ocspRequest.verify(cert.getPublicKey(), "BC"))
    {
        fail("extra version encoding test failed");
    }
}
 

import org.bouncycastle.ocsp.OCSPReq; //导入依赖的package包/类
/**
 * Sends the OCSP request to Notary and
 * retrieves the response
 * @param req OCSP request
 * @param httpFrom HTTP_FROM value (optional)
 * @returns OCSP response
 */
private OCSPResp sendRequest(OCSPReq req, String httpFrom, String format, String formatVer)
    throws DigiDocException 
{
	String responderUrl = ConfigManager.instance().
    	getProperty("DIGIDOC_OCSP_RESPONDER_URL");
	return sendRequestToUrl(req, responderUrl, httpFrom, format, formatVer);
}
 

import org.bouncycastle.ocsp.OCSPReq; //导入依赖的package包/类
private OCSPResp xchangeOcsp(String ocspUrl, OCSPReq req)
		throws MalformedURLException, IOException, OCSPQueryException {
	URL url = new URL(ocspUrl);
	HttpURLConnection con = (HttpURLConnection) url.openConnection();

	con.setAllowUserInteraction(false);
	con.setDoInput(true);
	con.setDoOutput(true);
	con.setUseCaches(false);
	con.setInstanceFollowRedirects(false);
	con.setRequestMethod("POST"); //$NON-NLS-1$

	con
			.setRequestProperty(
					"Content-Length", Integer.toString(req //$NON-NLS-1$
									.getEncoded().length));
	con
			.setRequestProperty(
					"Content-Type", "application/ocsp-request"); //$NON-NLS-1$ //$NON-NLS-2$

	con.connect();
	OutputStream os = con.getOutputStream();
	os.write(req.getEncoded());
	os.close();

	if (con.getResponseCode() != HttpURLConnection.HTTP_OK) {
		throw new OCSPQueryException("Server did not respond with HTTP_OK(200) but with "
				+ con.getResponseCode());
	}

	if ((con.getContentType() == null)
			|| !con.getContentType().equals(
					"application/ocsp-response")) { //$NON-NLS-1$
		throw new OCSPQueryException("Response MIME type is not application/ocsp-response"); //$NON-NLS-1$
	}

	// Read response
	InputStream reader = con.getInputStream();

	int resplen = con.getContentLength();
	byte[] ocspResponseEncoded = new byte[resplen];

	int offset = 0;
	int bread;
	while ((resplen > 0)
			&& (bread = reader.read(ocspResponseEncoded, offset, resplen)) != -1) {
		offset += bread;
		resplen -= bread;
	}

	reader.close();
	con.disconnect();
	return new OCSPResp(ocspResponseEncoded);
}
 

import org.bouncycastle.ocsp.OCSPReq; //导入依赖的package包/类
private OCSPReq GenOcspReq(X509Certificate nextCert,
		X509Certificate nextIssuer) throws OCSPException, CertificateEncodingException, OperatorCreationException, IOException {

return DerEncoder.GenOcspReq(nextCert, nextIssuer);
}