Package | Description |
---|---|
org.opensaml.saml.metadata.resolver.impl |
Class for retrieving, filtering, and querying metadata.
|
org.opensaml.security.credential.impl |
CredentialResolver implementation classes. |
org.opensaml.security.httpclient.impl | |
org.opensaml.security.messaging |
Messaging-related security classes.
|
org.opensaml.security.messaging.impl |
Message handler implementations.
|
org.opensaml.security.trust.impl |
TrustEngine implementation classes. |
org.opensaml.security.x509 |
X.509-based credential and trust classes.
|
org.opensaml.security.x509.impl |
TrustEngine implementation classes related to PKIX. |
org.opensaml.security.x509.tls |
TLS security functionality.
|
org.opensaml.security.x509.tls.impl |
Implementation classes for client TLS security.
|
org.opensaml.xmlsec.keyinfo.impl |
Interfaces and classes for working with XML KeyInfo elements.
|
org.opensaml.xmlsec.signature.support.impl |
Implementations of signature evaluation functions.
|
Modifier and Type | Method and Description |
---|---|
void |
HTTPMetadataResolver.setTLSTrustEngine(TrustEngine<? super X509Credential> engine)
Sets the optional trust engine used in evaluating server TLS credentials.
|
void |
AbstractDynamicHTTPMetadataResolver.setTLSTrustEngine(TrustEngine<? super X509Credential> engine)
Sets the optional trust engine used in evaluating server TLS credentials.
|
Modifier and Type | Method and Description |
---|---|
protected X509Credential |
KeyStoreCredentialResolver.processPrivateKeyEntry(KeyStore.PrivateKeyEntry privateKeyEntry,
String entityID,
UsageType usage)
Build an X509Credential from a keystore private key entry.
|
protected X509Credential |
KeyStoreCredentialResolver.processTrustedCertificateEntry(KeyStore.TrustedCertificateEntry trustedCertEntry,
String entityID,
UsageType usage)
Build an X509Credential from a keystore trusted certificate entry.
|
Modifier and Type | Method and Description |
---|---|
protected X509Credential |
TrustEngineTLSSocketFactory.extractCredential(SSLSocket sslSocket)
Extract the server TLS
X509Credential from the supplied SSLSocket . |
Modifier and Type | Class and Description |
---|---|
class |
ServletRequestX509CredentialAdapter
An adapter that exposes the X.509 certificates contained in the servlet request attribute.
|
Modifier and Type | Method and Description |
---|---|
protected TrustEngine<? super X509Credential> |
BaseClientCertAuthSecurityHandler.resolveTrustEngine(org.opensaml.messaging.context.MessageContext messageContext)
Resolve a TrustEngine instance of the appropriate type from the message context.
|
Modifier and Type | Method and Description |
---|---|
protected void |
BaseClientCertAuthSecurityHandler.doEvaluate(X509Credential requestCredential,
org.opensaml.messaging.context.MessageContext messageContext)
Evaluate the request credential.
|
protected String |
BaseClientCertAuthSecurityHandler.evaluateCertificateNameDerivedPresenters(X509Credential requestCredential,
org.opensaml.messaging.context.MessageContext messageContext)
Evaluate candidate presenter entity ID's which may be derived from the request credential's entity certificate
according to the options supplied via
CertificateNameOptions . |
protected String |
BaseClientCertAuthSecurityHandler.evaluateDerivedPresenters(X509Credential requestCredential,
org.opensaml.messaging.context.MessageContext messageContext)
Evaluate any candidate presenter entity ID's which may be derived from the credential or other message context
information.
|
protected String |
BaseClientCertAuthSecurityHandler.evaluateSubjectAltNames(X509Credential requestCredential,
org.opensaml.messaging.context.MessageContext messageContext)
Evaluate the presenter entity ID as derived from the cert subject alternative names specified by types enumerated
in
CertificateNameOptions.getSubjectAltNames() . |
protected String |
BaseClientCertAuthSecurityHandler.evaluateSubjectCommonName(X509Credential requestCredential,
org.opensaml.messaging.context.MessageContext messageContext)
Evaluate the presenter entity ID as derived from the cert subject common name (CN).
|
protected String |
BaseClientCertAuthSecurityHandler.evaluateSubjectDN(X509Credential requestCredential,
org.opensaml.messaging.context.MessageContext messageContext)
Evaluate the presenter entity ID as derived from the cert subject DN.
|
Modifier and Type | Method and Description |
---|---|
boolean |
ExplicitX509CertificateTrustEngine.validate(X509Credential untrustedCredential,
CriteriaSet trustBasisCriteria)
Validates the token against trusted information obtained in an
implementation-specific manner.
|
boolean |
ExplicitX509CertificateTrustEvaluator.validate(X509Credential untrustedCredential,
Iterable<Credential> trustedCredentials)
Evaluate trust.
|
boolean |
ExplicitX509CertificateTrustEvaluator.validate(X509Credential untrustedCredential,
X509Credential trustedCredential)
Evaluate trust.
|
Modifier and Type | Class and Description |
---|---|
class |
BasicX509Credential
A basic implementation of
X509Credential . |
Modifier and Type | Method and Description |
---|---|
static String |
X509Support.getIdentifiersToken(X509Credential credential,
X500DNHandler handler)
Gets a formatted string representing identifier information from the supplied credential.
|
boolean |
PKIXTrustEvaluator.validate(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Validate the specified credential against the specified set of trusted validation information.
|
Modifier and Type | Class and Description |
---|---|
class |
KeyStoreX509CredentialAdapter
A wrapper that changes a
KeyStore in to a X509Credential . |
class |
X509KeyManagerX509CredentialAdapter
A class that wraps a
X509KeyManager and exposes it as an X509Credential . |
Modifier and Type | Method and Description |
---|---|
protected CertStore |
CertPathPKIXTrustEvaluator.buildCertStore(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Creates the certificate store that will be used during validation.
|
protected boolean |
PKIXX509CredentialTrustEngine.checkNames(Set<String> trustedNames,
X509Credential untrustedCredential)
Evaluate the credential against the set of trusted names.
|
boolean |
X509CredentialNameEvaluator.evaluate(X509Credential credential,
Set<String> trustedNames)
Evaluate the specified credential against the specified set of trusted names.
|
boolean |
BasicX509CredentialNameEvaluator.evaluate(X509Credential credential,
Set<String> trustedNames)
Evaluate the specified credential against the specified set of trusted names.
|
protected PKIXBuilderParameters |
CertPathPKIXTrustEvaluator.getPKIXBuilderParameters(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Creates the set of PKIX builder parameters to use when building the cert path builder.
|
protected boolean |
BasicX509CredentialNameEvaluator.processNameChecks(X509Credential credential,
Set<String> trustedNames)
Process any name checks that are enabled.
|
boolean |
CertPathPKIXTrustEvaluator.validate(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Validate the specified credential against the specified set of trusted validation information.
|
boolean |
PKIXX509CredentialTrustEngine.validate(X509Credential untrustedCredential,
CriteriaSet trustBasisCriteria)
Validates the token against trusted information obtained in an
implementation-specific manner.
|
protected boolean |
PKIXX509CredentialTrustEngine.validate(X509Credential untrustedX509Credential,
Set<String> trustedNames,
Iterable<PKIXValidationInformation> validationInfoSet)
Perform PKIX validation on the untrusted credential, using PKIX validation information based on the supplied set
of trusted credentials.
|
Modifier and Type | Method and Description |
---|---|
TrustEngine<? super X509Credential> |
ClientTLSValidationParameters.getX509TrustEngine()
Get a
TrustEngine instance used to validate a client TLS X509Credential . |
TrustEngine<? super X509Credential> |
ClientTLSValidationConfiguration.getX509TrustEngine()
Get a
TrustEngine instance used to validate a client TLS X509Credential . |
Modifier and Type | Method and Description |
---|---|
void |
ClientTLSValidationParameters.setX509TrustEngine(TrustEngine<? super X509Credential> engine)
Set a
TrustEngine instance used to validate a client TLS X509Credential . |
Modifier and Type | Method and Description |
---|---|
TrustEngine<? super X509Credential> |
BasicClientTLSValidationConfiguration.getX509TrustEngine()
Get a
TrustEngine instance used to validate a client TLS X509Credential . |
protected TrustEngine<? super X509Credential> |
BasicClientTLSValidationParametersResolver.resolveTrustEngine(CriteriaSet criteria)
Resolve and return the effective
super X509Credential> . |
Modifier and Type | Method and Description |
---|---|
void |
BasicClientTLSValidationConfiguration.setX509TrustEngine(TrustEngine<? super X509Credential> engine)
Set a
TrustEngine instance used to validate a client TLS X509Credential . |
Modifier and Type | Method and Description |
---|---|
protected void |
X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processCRLs(KeyInfo keyInfo,
X509Data x509Data,
X509Credential credential)
Process the value of
getCRLs() . |
protected void |
X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processEntityCertificate(KeyInfo keyInfo,
X509Data x509Data,
X509Credential credential)
Process the value of
getEntityCertificate() . |
protected void |
X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processEntityCertificateChain(KeyInfo keyInfo,
X509Data x509Data,
X509Credential credential)
Process the value of
getEntityCertificateChain() . |
Modifier and Type | Method and Description |
---|---|
protected boolean |
PKIXSignatureTrustEngine.checkNames(Set<String> trustedNames,
X509Credential untrustedCredential)
Evaluate the credential against the set of trusted names.
|
Copyright © 2016 JBoss by Red Hat. All rights reserved.