Uses of Class
org.opensaml.security.SecurityException

Packages that use SecurityException

Package	Description
org.apache.wss4j.common.saml.builder
org.opensaml.saml.common.messaging	Support classes for SAML message security operations.
org.opensaml.security.credential.criteria.impl	Implementations of Criterion where the parameterized evaluation target type is Credential.
org.opensaml.security.crypto	General cryptographic functionality.
org.opensaml.security.messaging	Messaging-related security classes.
org.opensaml.security.trust	Interfaces and classes used to evaluate the trustworthiness and validity of Credentials.
org.opensaml.security.trust.impl	TrustEngine implementation classes.
org.opensaml.security.x509	X.509-based credential and trust classes.
org.opensaml.security.x509.impl	TrustEngine implementation classes related to PKIX.
org.opensaml.soap.client	SOAP client functionality.
org.opensaml.soap.client.http	SOAP HTTP client functionality.
org.opensaml.xmlsec.crypto	Support classes for XML Security operations.
org.opensaml.xmlsec.keyinfo	Classes in support of processing XML Signature KeyInfo material.
org.opensaml.xmlsec.keyinfo.impl	Interfaces and classes for working with XML KeyInfo elements.
org.opensaml.xmlsec.keyinfo.impl.provider	Specific implementations of KeyInfoProvider.
org.opensaml.xmlsec.signature.support	Functional support for XML Signature.
org.opensaml.xmlsec.signature.support.impl	Implementations of signature evaluation functions.

Uses of SecurityException in org.apache.wss4j.common.saml.builder

Methods in org.apache.wss4j.common.saml.builder that throw SecurityException

Modifier and Type	Method and Description
static KeyInfo	SAML1ComponentBuilder.createKeyInfo(KeyInfoBean keyInfo) Create an Opensaml KeyInfo object from the parameters
static Subject	SAML1ComponentBuilder.createSaml1v1Subject(SubjectBean subjectBean) Create a SAML Subject from a SubjectBean instance
static Subject	SAML2ComponentBuilder.createSaml2Subject(SubjectBean subjectBean) Create a Subject.
static List<AttributeStatement>	SAML1ComponentBuilder.createSamlv1AttributeStatement(List<AttributeStatementBean> attributeData) Create SAML 1.1 attribute statement(s)
static List<AuthenticationStatement>	SAML1ComponentBuilder.createSamlv1AuthenticationStatement(List<AuthenticationStatementBean> authBeans) Create SAML 1.1 authentication statement(s)
static List<AuthorizationDecisionStatement>	SAML1ComponentBuilder.createSamlv1AuthorizationDecisionStatement(List<AuthDecisionStatementBean> decisionData) Create SAML 1.1 Authorization Decision Statement(s)
static SubjectConfirmationData	SAML2ComponentBuilder.createSubjectConfirmationData(SubjectConfirmationDataBean subjectConfirmationDataBean, KeyInfoBean keyInfoBean) Create a SubjectConfirmationData object

Uses of SecurityException in org.opensaml.saml.common.messaging

Methods in org.opensaml.saml.common.messaging that throw SecurityException

Modifier and Type	Method and Description
static void	SAMLMessageSecuritySupport.signMessage(org.opensaml.messaging.context.MessageContext<SAMLObject> messageContext) Signs the SAML message represented in the message context if it is a SignableXMLObject and the message context contains signing parameters as determined by SAMLMessageSecuritySupport.getContextSigningParameters(MessageContext).

Uses of SecurityException in org.opensaml.security.credential.criteria.impl

Methods in org.opensaml.security.credential.criteria.impl that throw SecurityException

Modifier and Type	Method and Description
static EvaluableCredentialCriterion	EvaluableCredentialCriteriaRegistry.getEvaluator(Criterion criteria) Get an instance of EvaluableCredentialCriterion which can evaluate the supplied criteria's requirements against a Credential target.

Uses of SecurityException in org.opensaml.security.crypto

Methods in org.opensaml.security.crypto that throw SecurityException

Modifier and Type	Method and Description
static boolean	KeySupport.matchKeyPair(PublicKey pubKey, PrivateKey privKey) Compare the supplied public and private keys, and determine if they correspond to the same key pair.
static byte[]	SigningUtil.sign(Credential signingCredential, String jcaAlgorithmID, boolean isMAC, byte[] input) Compute the signature or MAC value over the supplied input.
static byte[]	SigningUtil.sign(PrivateKey signingKey, String jcaAlgorithmID, byte[] input) Compute the raw signature value over the supplied input.
static byte[]	SigningUtil.signMAC(Key signingKey, String jcaAlgorithmID, byte[] input) Compute the Message Authentication Code (MAC) value over the supplied input.
static boolean	SigningUtil.verify(Credential verificationCredential, String jcaAlgorithmID, boolean isMAC, byte[] signature, byte[] input) Verify the signature value computed over the supplied input against the supplied signature value.
static boolean	SigningUtil.verify(PublicKey verificationKey, String jcaAlgorithmID, byte[] signature, byte[] input) Verify the signature value computed over the supplied input against the supplied signature value.
static boolean	SigningUtil.verifyMAC(Key verificationKey, String jcaAlgorithmID, byte[] signature, byte[] input) Verify the Message Authentication Code (MAC) value computed over the supplied input against the supplied MAC value.

Uses of SecurityException in org.opensaml.security.messaging

Constructors in org.opensaml.security.messaging that throw SecurityException

Constructor and Description
ServletRequestX509CredentialAdapter(ServletRequest request) Constructor.

Uses of SecurityException in org.opensaml.security.trust

Methods in org.opensaml.security.trust that throw SecurityException

Modifier and Type	Method and Description
boolean	TrustEngine.validate(TokenType token, CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.

Uses of SecurityException in org.opensaml.security.trust.impl

Methods in org.opensaml.security.trust.impl that throw SecurityException

Modifier and Type	Method and Description
boolean	ExplicitKeyTrustEngine.validate(Credential untrustedCredential, CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.
boolean	ChainingTrustEngine.validate(TokenType token, CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.
boolean	ExplicitX509CertificateTrustEngine.validate(X509Credential untrustedCredential, CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.

Uses of SecurityException in org.opensaml.security.x509

Methods in org.opensaml.security.x509 that throw SecurityException

Modifier and Type	Method and Description
static X509Certificate	X509Support.determineEntityCertificate(Collection<X509Certificate> certs, PrivateKey privateKey) Determines the certificate, from the collection, associated with the private key.
static byte[]	X509Support.getX509Digest(X509Certificate certificate, String jcaAlgorithm) Get the XML Signature-compliant digest of an X.509 certificate.
boolean	PKIXTrustEvaluator.validate(PKIXValidationInformation validationInfo, X509Credential untrustedCredential) Validate the specified credential against the specified set of trusted validation information.

Uses of SecurityException in org.opensaml.security.x509.impl

Methods in org.opensaml.security.x509.impl that throw SecurityException

Modifier and Type	Method and Description
protected boolean	PKIXX509CredentialTrustEngine.checkNames(Set<String> trustedNames, X509Credential untrustedCredential) Evaluate the credential against the set of trusted names.
boolean	X509CredentialNameEvaluator.evaluate(X509Credential credential, Set<String> trustedNames) Evaluate the specified credential against the specified set of trusted names.
boolean	BasicX509CredentialNameEvaluator.evaluate(X509Credential credential, Set<String> trustedNames) Evaluate the specified credential against the specified set of trusted names.
boolean	CertPathPKIXTrustEvaluator.validate(PKIXValidationInformation validationInfo, X509Credential untrustedCredential) Validate the specified credential against the specified set of trusted validation information.
boolean	PKIXX509CredentialTrustEngine.validate(X509Credential untrustedCredential, CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.
protected boolean	PKIXX509CredentialTrustEngine.validate(X509Credential untrustedX509Credential, Set<String> trustedNames, Iterable<PKIXValidationInformation> validationInfoSet) Perform PKIX validation on the untrusted credential, using PKIX validation information based on the supplied set of trusted credentials.

Uses of SecurityException in org.opensaml.soap.client

Methods in org.opensaml.soap.client that throw SecurityException

Modifier and Type	Method and Description
void	SOAPClient.send(String endpoint, org.opensaml.messaging.context.InOutOperationContext context) Sends a message and waits for a response.

Uses of SecurityException in org.opensaml.soap.client.http

Methods in org.opensaml.soap.client.http that throw SecurityException

Modifier and Type	Method and Description
void	HttpSOAPClient.send(String endpoint, org.opensaml.messaging.context.InOutOperationContext context) Sends a message and waits for a response.

Uses of SecurityException in org.opensaml.xmlsec.crypto

Methods in org.opensaml.xmlsec.crypto that throw SecurityException

Modifier and Type	Method and Description
static byte[]	XMLSigningUtil.signWithURI(Credential signingCredential, String algorithmURI, byte[] input) Compute the signature or MAC value over the supplied input.
static boolean	XMLSigningUtil.verifyWithURI(Credential verificationCredential, String algorithmURI, byte[] signature, byte[] input) Verify the signature value computed over the supplied input against the supplied signature value.

Uses of SecurityException in org.opensaml.xmlsec.keyinfo

Methods in org.opensaml.xmlsec.keyinfo that throw SecurityException

Modifier and Type	Method and Description
KeyInfo	KeyInfoGenerator.generate(Credential credential) Generate a new KeyInfo object based on keying material and other information within a credential.

Uses of SecurityException in org.opensaml.xmlsec.keyinfo.impl

Methods in org.opensaml.xmlsec.keyinfo.impl that throw SecurityException

Modifier and Type	Method and Description
KeyInfo	X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.generate(Credential credential) Generate a new KeyInfo object based on keying material and other information within a credential.
KeyInfo	StaticKeyInfoGenerator.generate(Credential credential) Generate a new KeyInfo object based on keying material and other information within a credential.
KeyInfo	BasicKeyInfoGeneratorFactory.BasicKeyInfoGenerator.generate(Credential credential) Generate a new KeyInfo object based on keying material and other information within a credential.
Collection<Credential>	KeyInfoProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
protected void	X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processCertX509DataOptions(X509Data x509Data, X509Certificate cert) Process the options related to generation of child elements of X509Data based on certificate data.
protected void	X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processCertX509Digest(X509Data x509Data, X509Certificate cert) Process the options related to generation of the X509Digest child element of X509Data based on certificate data.
protected void	X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processCRLs(KeyInfo keyInfo, X509Data x509Data, X509Credential credential) Process the value of X509Credential.getCRLs().
protected void	X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processEntityCertificate(KeyInfo keyInfo, X509Data x509Data, X509Credential credential) Process the value of X509Credential.getEntityCertificate().
protected void	X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processEntityCertificateChain(KeyInfo keyInfo, X509Data x509Data, X509Credential credential) Process the value of X509Credential.getEntityCertificateChain().
protected void	BasicKeyInfoGeneratorFactory.BasicKeyInfoGenerator.processPublicKey(KeyInfo keyInfo, Credential credential) Process the value of Credential.getPublicKey().

Uses of SecurityException in org.opensaml.xmlsec.keyinfo.impl.provider

Methods in org.opensaml.xmlsec.keyinfo.impl.provider that throw SecurityException

Modifier and Type	Method and Description
Collection<Credential>	RSAKeyValueProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
Collection<Credential>	KeyInfoReferenceProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
Collection<Credential>	InlineX509DataProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
Collection<Credential>	DSAKeyValueProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
Collection<Credential>	DEREncodedKeyValueProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.

Uses of SecurityException in org.opensaml.xmlsec.signature.support

Methods in org.opensaml.xmlsec.signature.support that throw SecurityException

Modifier and Type	Method and Description
static void	SignatureSupport.prepareSignatureParams(Signature signature, SignatureSigningParameters parameters) Prepare a Signature with necessary additional information prior to signing.
static void	SignatureSupport.signObject(SignableXMLObject signable, SignatureSigningParameters parameters) Signs a SignableXMLObject.
boolean	SignatureTrustEngine.validate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.

Uses of SecurityException in org.opensaml.xmlsec.signature.support.impl

Methods in org.opensaml.xmlsec.signature.support.impl that throw SecurityException

Modifier and Type	Method and Description
protected boolean	PKIXSignatureTrustEngine.checkNames(Set<String> trustedNames, X509Credential untrustedCredential) Evaluate the credential against the set of trusted names.
protected void	BaseSignatureTrustEngine.checkParams(Signature signature, CriteriaSet trustBasisCriteria) Check the signature and credential criteria for required values.
protected void	BaseSignatureTrustEngine.checkParamsRaw(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria) Check the signature and credential criteria for required values.
protected boolean	PKIXSignatureTrustEngine.doValidate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.
protected boolean	ExplicitKeySignatureTrustEngine.doValidate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.
protected abstract boolean	BaseSignatureTrustEngine.doValidate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.
protected boolean	PKIXSignatureTrustEngine.doValidate(Signature signature, CriteriaSet trustBasisCriteria) Validate the signature using the supplied trust criteria.
protected boolean	ExplicitKeySignatureTrustEngine.doValidate(Signature signature, CriteriaSet trustBasisCriteria) Validate the signature using the supplied trust criteria.
protected abstract boolean	BaseSignatureTrustEngine.doValidate(Signature signature, CriteriaSet trustBasisCriteria) Validate the signature using the supplied trust criteria.
protected boolean	ExplicitKeySignatureTrustEngine.evaluateTrust(Credential untrustedCredential, Iterable<Credential> trustedCredentials) Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
protected boolean	PKIXSignatureTrustEngine.evaluateTrust(Credential untrustedCredential, Pair<Set<String>,Iterable<PKIXValidationInformation>> validationPair) Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
protected abstract boolean	BaseSignatureTrustEngine.evaluateTrust(Credential untrustedCredential, TrustBasisType trustBasis) Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
protected Pair<Set<String>,Iterable<PKIXValidationInformation>>	PKIXSignatureTrustEngine.resolveValidationInfo(CriteriaSet trustBasisCriteria) Resolve and return a set of trusted validation information.
boolean	ChainingSignatureTrustEngine.validate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.
boolean	BaseSignatureTrustEngine.validate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.
boolean	ChainingSignatureTrustEngine.validate(Signature token, CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.
boolean	BaseSignatureTrustEngine.validate(Signature signature, CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.
protected boolean	BaseSignatureTrustEngine.validate(Signature signature, TrustBasisType trustBasis) Attempt to establish trust by resolving signature verification credentials from the Signature's KeyInfo.