1 files changed, 22 insertions, 21 deletions
diff --git a/bcprov/src/main/java/org/bouncycastle/crypto/tls/TlsServer.java b/bcprov/src/main/java/org/bouncycastle/crypto/tls/TlsServer.java
index 0b46391..85c0a9a 100644
--- a/bcprov/src/main/java/org/bouncycastle/crypto/tls/TlsServer.java
+++ b/bcprov/src/main/java/org/bouncycastle/crypto/tls/TlsServer.java
@@ -7,11 +7,9 @@ import java.util.Vector;
 public interface TlsServer
     extends TlsPeer
 {
-
     void init(TlsServerContext context);
 
-    void notifyClientVersion(ProtocolVersion clientVersion)
-        throws IOException;
+    void notifyClientVersion(ProtocolVersion clientVersion) throws IOException;
 
     void notifyOfferedCipherSuites(int[] offeredCipherSuites)
         throws IOException;
@@ -19,9 +17,6 @@ public interface TlsServer
     void notifyOfferedCompressionMethods(short[] offeredCompressionMethods)
         throws IOException;
 
-    void notifySecureRenegotiation(boolean secureNegotiation)
-        throws IOException;
-
     // Hashtable is (Integer -> byte[])
     void processClientExtensions(Hashtable clientExtensions)
         throws IOException;
@@ -46,32 +41,41 @@ public interface TlsServer
     TlsCredentials getCredentials()
         throws IOException;
 
+    /**
+     * This method will be called (only) if the server included an extension of type
+     * "status_request" with empty "extension_data" in the extended server hello. See <i>RFC 3546
+     * 3.6. Certificate Status Request</i>. If a non-null {@link CertificateStatus} is returned, it
+     * is sent to the client as a handshake message of type "certificate_status".
+     * 
+     * @return A {@link CertificateStatus} to be sent to the client (or null for none).
+     * @throws IOException
+     */
+    CertificateStatus getCertificateStatus()
+        throws IOException;
+
     TlsKeyExchange getKeyExchange()
         throws IOException;
 
-    CertificateRequest getCertificateRequest();
+    CertificateRequest getCertificateRequest()
+        throws IOException;
 
     // Vector is (SupplementalDataEntry)
     void processClientSupplementalData(Vector clientSupplementalData)
         throws IOException;
 
     /**
-     * Called by the protocol handler to report the client certificate, only if a Certificate
-     * {@link #getCertificateRequest()} returned non-null. Note: this method is responsible for
-     * certificate verification and validation.
-     *
-     * @param clientCertificate the effective client certificate (may be an empty chain).
+     * Called by the protocol handler to report the client certificate, only if
+     * {@link #getCertificateRequest()} returned non-null.
+     * 
+     * Note: this method is responsible for certificate verification and validation.
+     * 
+     * @param clientCertificate
+     *            the effective client certificate (may be an empty chain).
      * @throws IOException
      */
     void notifyClientCertificate(Certificate clientCertificate)
         throws IOException;
 
-    TlsCompression getCompression()
-        throws IOException;
-
-    TlsCipher getCipher()
-        throws IOException;
-
     /**
      * RFC 5077 3.3. NewSessionTicket Handshake Message.
      * <p/>
@@ -83,7 +87,4 @@ public interface TlsServer
      */
     NewSessionTicket getNewSessionTicket()
         throws IOException;
-
-    void notifyHandshakeComplete()
-        throws IOException;
 }