| Package | Description |
|---|---|
| org.opensaml.saml.common.messaging |
Support classes for SAML message security operations.
|
| org.opensaml.security.credential.criteria.impl |
Implementations of
Criterion where the
parameterized evaluation target type is Credential. |
| org.opensaml.security.crypto |
General cryptographic functionality.
|
| org.opensaml.security.messaging |
Messaging-related security classes.
|
| org.opensaml.security.trust |
Interfaces and classes used to evaluate the trustworthiness and validity of
Credentials. |
| org.opensaml.security.trust.impl |
TrustEngine implementation classes. |
| org.opensaml.security.x509 |
X.509-based credential and trust classes.
|
| org.opensaml.security.x509.impl |
TrustEngine implementation classes related to PKIX. |
| org.opensaml.soap.client |
SOAP client functionality.
|
| org.opensaml.soap.client.http |
SOAP HTTP client functionality.
|
| org.opensaml.xmlsec.crypto |
Support classes for XML Security operations.
|
| org.opensaml.xmlsec.keyinfo |
Classes in support of processing XML Signature KeyInfo material.
|
| org.opensaml.xmlsec.keyinfo.impl |
Interfaces and classes for working with XML KeyInfo elements.
|
| org.opensaml.xmlsec.keyinfo.impl.provider |
Specific implementations of
KeyInfoProvider. |
| org.opensaml.xmlsec.signature.support |
Functional support for XML Signature.
|
| org.opensaml.xmlsec.signature.support.impl |
Implementations of signature evaluation functions.
|
| Modifier and Type | Method and Description |
|---|---|
static void |
SAMLMessageSecuritySupport.signMessage(MessageContext<SAMLObject> messageContext)
Signs the SAML message represented in the message context if it is a
SignableXMLObject
and the message context contains signing parameters as determined
by SAMLMessageSecuritySupport.getContextSigningParameters(MessageContext). |
| Modifier and Type | Method and Description |
|---|---|
static EvaluableCredentialCriterion |
EvaluableCredentialCriteriaRegistry.getEvaluator(net.shibboleth.utilities.java.support.resolver.Criterion criteria)
Get an instance of
EvaluableCredentialCriterion which can evaluate the supplied criteria's
requirements against a Credential target. |
| Modifier and Type | Method and Description |
|---|---|
static boolean |
KeySupport.matchKeyPair(java.security.PublicKey pubKey,
java.security.PrivateKey privKey)
Compare the supplied public and private keys, and determine if they correspond to the same key pair.
|
static byte[] |
SigningUtil.sign(Credential signingCredential,
java.lang.String jcaAlgorithmID,
boolean isMAC,
byte[] input)
Compute the signature or MAC value over the supplied input.
|
static byte[] |
SigningUtil.sign(java.security.PrivateKey signingKey,
java.lang.String jcaAlgorithmID,
byte[] input)
Compute the raw signature value over the supplied input.
|
static byte[] |
SigningUtil.signMAC(java.security.Key signingKey,
java.lang.String jcaAlgorithmID,
byte[] input)
Compute the Message Authentication Code (MAC) value over the supplied input.
|
static boolean |
SigningUtil.verify(Credential verificationCredential,
java.lang.String jcaAlgorithmID,
boolean isMAC,
byte[] signature,
byte[] input)
Verify the signature value computed over the supplied input against the supplied signature value.
|
static boolean |
SigningUtil.verify(java.security.PublicKey verificationKey,
java.lang.String jcaAlgorithmID,
byte[] signature,
byte[] input)
Verify the signature value computed over the supplied input against the supplied signature value.
|
static boolean |
SigningUtil.verifyMAC(java.security.Key verificationKey,
java.lang.String jcaAlgorithmID,
byte[] signature,
byte[] input)
Verify the Message Authentication Code (MAC) value computed over the supplied input against the supplied MAC
value.
|
| Constructor and Description |
|---|
ServletRequestX509CredentialAdapter(javax.servlet.ServletRequest request)
Constructor.
|
| Modifier and Type | Method and Description |
|---|---|
boolean |
TrustEngine.validate(TokenType token,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validates the token against trusted information obtained in an
implementation-specific manner.
|
| Modifier and Type | Method and Description |
|---|---|
boolean |
ExplicitKeyTrustEngine.validate(Credential untrustedCredential,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validates the token against trusted information obtained in an
implementation-specific manner.
|
boolean |
ChainingTrustEngine.validate(TokenType token,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validates the token against trusted information obtained in an
implementation-specific manner.
|
boolean |
ExplicitX509CertificateTrustEngine.validate(X509Credential untrustedCredential,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validates the token against trusted information obtained in an
implementation-specific manner.
|
| Modifier and Type | Method and Description |
|---|---|
static java.security.cert.X509Certificate |
X509Support.determineEntityCertificate(java.util.Collection<java.security.cert.X509Certificate> certs,
java.security.PrivateKey privateKey)
Determines the certificate, from the collection, associated with the private key.
|
static byte[] |
X509Support.getX509Digest(java.security.cert.X509Certificate certificate,
java.lang.String jcaAlgorithm)
Get the XML Signature-compliant digest of an X.509 certificate.
|
boolean |
PKIXTrustEvaluator.validate(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Validate the specified credential against the specified set of trusted validation information.
|
| Modifier and Type | Method and Description |
|---|---|
protected boolean |
PKIXX509CredentialTrustEngine.checkNames(java.util.Set<java.lang.String> trustedNames,
X509Credential untrustedCredential)
Evaluate the credential against the set of trusted names.
|
boolean |
X509CredentialNameEvaluator.evaluate(X509Credential credential,
java.util.Set<java.lang.String> trustedNames)
Evaluate the specified credential against the specified set of trusted names.
|
boolean |
BasicX509CredentialNameEvaluator.evaluate(X509Credential credential,
java.util.Set<java.lang.String> trustedNames)
Evaluate the specified credential against the specified set of trusted names.
|
boolean |
CertPathPKIXTrustEvaluator.validate(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Validate the specified credential against the specified set of trusted validation information.
|
boolean |
PKIXX509CredentialTrustEngine.validate(X509Credential untrustedCredential,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validates the token against trusted information obtained in an
implementation-specific manner.
|
protected boolean |
PKIXX509CredentialTrustEngine.validate(X509Credential untrustedX509Credential,
java.util.Set<java.lang.String> trustedNames,
java.lang.Iterable<PKIXValidationInformation> validationInfoSet)
Perform PKIX validation on the untrusted credential, using PKIX validation information based on the supplied set
of trusted credentials.
|
| Modifier and Type | Method and Description |
|---|---|
void |
SOAPClient.send(java.lang.String endpoint,
InOutOperationContext context)
Sends a message and waits for a response.
|
| Modifier and Type | Method and Description |
|---|---|
void |
HttpSOAPClient.send(java.lang.String endpoint,
InOutOperationContext context)
Sends a message and waits for a response.
|
| Modifier and Type | Method and Description |
|---|---|
static byte[] |
XMLSigningUtil.signWithURI(Credential signingCredential,
java.lang.String algorithmURI,
byte[] input)
Compute the signature or MAC value over the supplied input.
|
static boolean |
XMLSigningUtil.verifyWithURI(Credential verificationCredential,
java.lang.String algorithmURI,
byte[] signature,
byte[] input)
Verify the signature value computed over the supplied input against the supplied signature value.
|
| Modifier and Type | Method and Description |
|---|---|
KeyInfo |
KeyInfoGenerator.generate(Credential credential)
Generate a new KeyInfo object based on keying material and other information within a credential.
|
| Modifier and Type | Method and Description |
|---|---|
private KeyInfo |
StaticKeyInfoGenerator.clone(KeyInfo origKeyInfo)
Clone a KeyInfo and return the new object.
|
KeyInfo |
StaticKeyInfoGenerator.generate(Credential credential)
Generate a new KeyInfo object based on keying material and other information within a credential.
|
KeyInfo |
X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.generate(Credential credential)
Generate a new KeyInfo object based on keying material and other information within a credential.
|
KeyInfo |
BasicKeyInfoGeneratorFactory.BasicKeyInfoGenerator.generate(Credential credential)
Generate a new KeyInfo object based on keying material and other information within a credential.
|
private Marshaller |
StaticKeyInfoGenerator.getMarshaller()
Get a KeyInfo marshaller.
|
private Unmarshaller |
StaticKeyInfoGenerator.getUnmarshaller()
Get a KeyInfo unmarshaller.
|
java.util.Collection<Credential> |
KeyInfoProvider.process(KeyInfoCredentialResolver resolver,
XMLObject keyInfoChild,
net.shibboleth.utilities.java.support.resolver.CriteriaSet criteriaSet,
KeyInfoResolutionContext kiContext)
Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
|
protected void |
X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processCertX509DataOptions(X509Data x509Data,
java.security.cert.X509Certificate cert)
Process the options related to generation of child elements of X509Data based on certificate data.
|
protected void |
X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processCertX509Digest(X509Data x509Data,
java.security.cert.X509Certificate cert)
Process the options related to generation of the X509Digest child element of X509Data
based on certificate data.
|
protected void |
X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processCRLs(KeyInfo keyInfo,
X509Data x509Data,
X509Credential credential)
Process the value of
X509Credential.getCRLs(). |
protected void |
X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processEntityCertificate(KeyInfo keyInfo,
X509Data x509Data,
X509Credential credential)
Process the value of
X509Credential.getEntityCertificate(). |
protected void |
X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.processEntityCertificateChain(KeyInfo keyInfo,
X509Data x509Data,
X509Credential credential)
Process the value of
X509Credential.getEntityCertificateChain(). |
protected void |
BasicKeyInfoGeneratorFactory.BasicKeyInfoGenerator.processPublicKey(KeyInfo keyInfo,
Credential credential)
Process the value of
Credential.getPublicKey(). |
| Modifier and Type | Method and Description |
|---|---|
private java.util.List<java.security.cert.X509Certificate> |
InlineX509DataProvider.extractCertificates(X509Data x509Data)
Extract certificates from the X509Data.
|
private java.util.List<java.security.cert.X509CRL> |
InlineX509DataProvider.extractCRLs(X509Data x509Data)
Extract CRLs from the X509Data.
|
java.util.Collection<Credential> |
KeyInfoReferenceProvider.process(KeyInfoCredentialResolver resolver,
XMLObject keyInfoChild,
net.shibboleth.utilities.java.support.resolver.CriteriaSet criteriaSet,
KeyInfoResolutionContext kiContext)
Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
|
java.util.Collection<Credential> |
DEREncodedKeyValueProvider.process(KeyInfoCredentialResolver resolver,
XMLObject keyInfoChild,
net.shibboleth.utilities.java.support.resolver.CriteriaSet criteriaSet,
KeyInfoResolutionContext kiContext)
Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
|
java.util.Collection<Credential> |
InlineX509DataProvider.process(KeyInfoCredentialResolver resolver,
XMLObject keyInfoChild,
net.shibboleth.utilities.java.support.resolver.CriteriaSet criteriaSet,
KeyInfoResolutionContext kiContext)
Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
|
java.util.Collection<Credential> |
DSAKeyValueProvider.process(KeyInfoCredentialResolver resolver,
XMLObject keyInfoChild,
net.shibboleth.utilities.java.support.resolver.CriteriaSet criteriaSet,
KeyInfoResolutionContext kiContext)
Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
|
java.util.Collection<Credential> |
RSAKeyValueProvider.process(KeyInfoCredentialResolver resolver,
XMLObject keyInfoChild,
net.shibboleth.utilities.java.support.resolver.CriteriaSet criteriaSet,
KeyInfoResolutionContext kiContext)
Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.
|
| Modifier and Type | Method and Description |
|---|---|
static void |
SignatureSupport.prepareSignatureParams(Signature signature,
SignatureSigningParameters parameters)
Prepare a
Signature with necessary additional information prior to signing. |
static void |
SignatureSupport.signObject(SignableXMLObject signable,
SignatureSigningParameters parameters)
Signs a
SignableXMLObject. |
boolean |
SignatureTrustEngine.validate(byte[] signature,
byte[] content,
java.lang.String algorithmURI,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria,
Credential candidateCredential)
Determines whether a raw signature over specified content is valid and signed by a trusted credential.
|
| Modifier and Type | Method and Description |
|---|---|
protected boolean |
PKIXSignatureTrustEngine.checkNames(java.util.Set<java.lang.String> trustedNames,
X509Credential untrustedCredential)
Evaluate the credential against the set of trusted names.
|
protected void |
BaseSignatureTrustEngine.checkParams(Signature signature,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Check the signature and credential criteria for required values.
|
protected void |
BaseSignatureTrustEngine.checkParamsRaw(byte[] signature,
byte[] content,
java.lang.String algorithmURI,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Check the signature and credential criteria for required values.
|
protected boolean |
ExplicitKeySignatureTrustEngine.doValidate(byte[] signature,
byte[] content,
java.lang.String algorithmURI,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria,
Credential candidateCredential)
Determines whether a raw signature over specified content is valid and signed by a trusted credential.
|
protected boolean |
PKIXSignatureTrustEngine.doValidate(byte[] signature,
byte[] content,
java.lang.String algorithmURI,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria,
Credential candidateCredential)
Determines whether a raw signature over specified content is valid and signed by a trusted credential.
|
protected abstract boolean |
BaseSignatureTrustEngine.doValidate(byte[] signature,
byte[] content,
java.lang.String algorithmURI,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria,
Credential candidateCredential)
Determines whether a raw signature over specified content is valid and signed by a trusted credential.
|
protected boolean |
ExplicitKeySignatureTrustEngine.doValidate(Signature signature,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validate the signature using the supplied trust criteria.
|
protected boolean |
PKIXSignatureTrustEngine.doValidate(Signature signature,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validate the signature using the supplied trust criteria.
|
protected abstract boolean |
BaseSignatureTrustEngine.doValidate(Signature signature,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validate the signature using the supplied trust criteria.
|
protected boolean |
ExplicitKeySignatureTrustEngine.evaluateTrust(Credential untrustedCredential,
java.lang.Iterable<Credential> trustedCredentials)
Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
|
protected boolean |
PKIXSignatureTrustEngine.evaluateTrust(Credential untrustedCredential,
net.shibboleth.utilities.java.support.collection.Pair<java.util.Set<java.lang.String>,java.lang.Iterable<PKIXValidationInformation>> validationPair)
Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
|
protected abstract boolean |
BaseSignatureTrustEngine.evaluateTrust(Credential untrustedCredential,
TrustBasisType trustBasis)
Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
|
protected net.shibboleth.utilities.java.support.collection.Pair<java.util.Set<java.lang.String>,java.lang.Iterable<PKIXValidationInformation>> |
PKIXSignatureTrustEngine.resolveValidationInfo(net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Resolve and return a set of trusted validation information.
|
boolean |
ChainingSignatureTrustEngine.validate(byte[] signature,
byte[] content,
java.lang.String algorithmURI,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria,
Credential candidateCredential)
Determines whether a raw signature over specified content is valid and signed by a trusted credential.
|
boolean |
BaseSignatureTrustEngine.validate(byte[] signature,
byte[] content,
java.lang.String algorithmURI,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria,
Credential candidateCredential)
Determines whether a raw signature over specified content is valid and signed by a trusted credential.
|
boolean |
ChainingSignatureTrustEngine.validate(Signature token,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validates the token against trusted information obtained in an
implementation-specific manner.
|
boolean |
BaseSignatureTrustEngine.validate(Signature signature,
net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Validates the token against trusted information obtained in an
implementation-specific manner.
|
protected boolean |
BaseSignatureTrustEngine.validate(Signature signature,
TrustBasisType trustBasis)
Attempt to establish trust by resolving signature verification credentials from the Signature's KeyInfo.
|