import org.bouncycastle.ocsp.BasicOCSPResp; //导入依赖的package包/类
/**
 * Get String represetation of ResponderID
 * @param basResp
 * @return stringified responder ID
 */
private String responderIDtoString(BasicOCSPResp basResp) {
	if(basResp != null) {
		ResponderID respid = basResp.getResponseData().getResponderId().toASN1Object();
		Object o = ((DERTaggedObject)respid.toASN1Object()).getObject();
		if(o instanceof org.bouncycastle.asn1.DEROctetString) {
			org.bouncycastle.asn1.DEROctetString oc = (org.bouncycastle.asn1.DEROctetString)o;
			return "byKey: " + SignedDoc.bin2hex(oc.getOctets()); 
		} else {
			X509Name name = new X509Name((ASN1Sequence)o);
			return "byName: " + name.toString();
		}
	}
	else
		return null;
}
 

import org.bouncycastle.ocsp.BasicOCSPResp; //导入依赖的package包/类
private Date xtractNextUpdate(OCSPResp ocspResponse) throws OCSPQueryException {
		int status = ocspResponse.getStatus();
		switch (status) {
//		case OCSPRespStatus.SUCCESSFUL:
//			break;
//		case OCSPResp.INTERNAL_ERROR:
//		case OCSPRespStatus.MALFORMED_REQUEST:
//		case OCSPRespStatus.SIGREQUIRED:
//		case OCSPRespStatus.TRY_LATER:
//		case OCSPRespStatus.UNAUTHORIZED:

		case OCSPResp.SUCCESSFUL:
			break;
		case OCSPResp.INTERNAL_ERROR:
		case OCSPResp.MALFORMED_REQUEST:
		case OCSPResp.SIG_REQUIRED:
		case OCSPResp.TRY_LATER:
		case OCSPResp.UNAUTHORIZED:

		
			throw new OCSPQueryException(
					"OCSP Error: " //$NON-NLS-1$
					+ Integer.toString(status));
		default:
			throw new OCSPQueryException("***"); //$NON-NLS-1$
		}

		try {
			BasicOCSPResp bresp = (BasicOCSPResp) ocspResponse
					.getResponseObject();

			if (bresp == null) {
				throw new OCSPQueryException("***"); //$NON-NLS-1$
			}
//			X509Certificate[] ocspcerts = bresp.getCerts(Messages
//					.getString("ValidateSignAndCertBase.71")); //$NON-NLS-1$

			// Verify all except trusted anchor
			// for (i = 0; i < ocspcerts.length - 1; i++) {
			// ocspcerts[i].verify(ocspcerts[i + 1].getPublicKey());
			// }
			// if (rootcert != null) {
			// ocspcerts[i].verify(rootcert.getPublicKey());
			// }

			SingleResp[] certstat = bresp.getResponses();
			for (SingleResp singleResp : certstat) {
				// if (singleResp.getCertStatus() == null) {
				// return true;
				// }
				if (singleResp.getCertStatus() instanceof RevokedStatus) {
					throw new RevokedException();
				}
				return singleResp.getNextUpdate();
			}

		} catch (Exception e) {
			throw new OCSPQueryException(e);
		}

		return null;
	}
 

import org.bouncycastle.ocsp.BasicOCSPResp; //导入依赖的package包/类
/**
 * Verifies that the OCSP response is about our signers
 * cert and the response status is successfull
 * @param sig Signature object
 * @param basResp OCSP Basic response
 * @throws DigiDocException if the response is not successfull
 */
private void checkCertStatus(Signature sig, BasicOCSPResp basResp)
    throws DigiDocException
{
    checkCertStatus(sig.getKeyInfo().getSignersCertificate(), basResp, null);
}