You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pdfbox.apache.org by ti...@apache.org on 2019/11/24 16:13:05 UTC

svn commit: r1870311 - /pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/validation/CertInformationCollector.java

Author: tilman
Date: Sun Nov 24 16:13:05 2019
New Revision: 1870311

URL: http://svn.apache.org/viewvc?rev=1870311&view=rev
Log:
PDFBOX-4696: avoid multiple certificate downloads

Modified:
    pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/validation/CertInformationCollector.java

Modified: pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/validation/CertInformationCollector.java
URL: http://svn.apache.org/viewvc/pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/validation/CertInformationCollector.java?rev=1870311&r1=1870310&r2=1870311&view=diff
==============================================================================
--- pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/validation/CertInformationCollector.java (original)
+++ pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/validation/CertInformationCollector.java Sun Nov 24 16:13:05 2019
@@ -63,6 +63,7 @@ public class CertInformationCollector
     private static final int MAX_CERTIFICATE_CHAIN_DEPTH = 5;
 
     private final Set<X509Certificate> certificateSet = new HashSet<>();
+    private final Set<String> urlSet = new HashSet<>();
 
     private final JcaX509CertificateConverter certConverter = new JcaX509CertificateConverter();
 
@@ -270,6 +271,11 @@ public class CertInformationCollector
     private void getAlternativeIssuerCertificate(CertSignatureInformation certInfo, int maxDepth)
             throws CertificateProccessingException
     {
+        if (urlSet.contains(certInfo.issuerUrl))
+        {
+            return;
+        }
+        urlSet.add(certInfo.issuerUrl);
         LOG.info("Get alternative issuer certificate from: " + certInfo.issuerUrl);
         try
         {