| Package | Description |
|---|---|
| org.opensaml.security.x509 |
X.509-based credential and trust classes.
|
| org.opensaml.security.x509.impl |
TrustEngine implementation classes related to PKIX. |
| org.opensaml.xmlsec.signature.support.impl |
Implementations of signature evaluation functions.
|
| Modifier and Type | Method and Description |
|---|---|
boolean |
PKIXTrustEvaluator.validate(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Validate the specified credential against the specified set of trusted validation information.
|
| Modifier and Type | Class and Description |
|---|---|
class |
BasicPKIXValidationInformation
Basic implementation of
PKIXValidationInformation. |
| Modifier and Type | Field and Description |
|---|---|
private java.util.List<PKIXValidationInformation> |
StaticPKIXValidationInformationResolver.pkixInfo
The PKIX validation information to return.
|
| Modifier and Type | Method and Description |
|---|---|
PKIXValidationInformation |
StaticPKIXValidationInformationResolver.resolveSingle(net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria) |
| Modifier and Type | Method and Description |
|---|---|
java.lang.Iterable<PKIXValidationInformation> |
StaticPKIXValidationInformationResolver.resolve(net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria) |
| Modifier and Type | Method and Description |
|---|---|
protected java.security.cert.CertStore |
CertPathPKIXTrustEvaluator.buildCertStore(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Creates the certificate store that will be used during validation.
|
protected java.lang.Integer |
CertPathPKIXTrustEvaluator.getEffectiveVerificationDepth(PKIXValidationInformation validationInfo)
Get the effective maximum path depth to use when constructing PKIX cert path builder parameters.
|
protected java.security.cert.PKIXBuilderParameters |
CertPathPKIXTrustEvaluator.getPKIXBuilderParameters(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Creates the set of PKIX builder parameters to use when building the cert path builder.
|
protected java.util.Set<java.security.cert.TrustAnchor> |
CertPathPKIXTrustEvaluator.getTrustAnchors(PKIXValidationInformation validationInfo)
Creates the collection of trust anchors to use during validation.
|
boolean |
CertPathPKIXTrustEvaluator.validate(PKIXValidationInformation validationInfo,
X509Credential untrustedCredential)
Validate the specified credential against the specified set of trusted validation information.
|
| Modifier and Type | Method and Description |
|---|---|
protected boolean |
PKIXX509CredentialTrustEngine.validate(X509Credential untrustedX509Credential,
java.util.Set<java.lang.String> trustedNames,
java.lang.Iterable<PKIXValidationInformation> validationInfoSet)
Perform PKIX validation on the untrusted credential, using PKIX validation information based on the supplied set
of trusted credentials.
|
| Constructor and Description |
|---|
StaticPKIXValidationInformationResolver(java.util.List<PKIXValidationInformation> info,
java.util.Set<java.lang.String> names)
Constructor.
|
StaticPKIXValidationInformationResolver(java.util.List<PKIXValidationInformation> info,
java.util.Set<java.lang.String> names,
boolean supportDynamicNames)
Constructor.
|
| Modifier and Type | Method and Description |
|---|---|
protected net.shibboleth.utilities.java.support.collection.Pair<java.util.Set<java.lang.String>,java.lang.Iterable<PKIXValidationInformation>> |
PKIXSignatureTrustEngine.resolveValidationInfo(net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
Resolve and return a set of trusted validation information.
|
| Modifier and Type | Method and Description |
|---|---|
protected boolean |
PKIXSignatureTrustEngine.evaluateTrust(Credential untrustedCredential,
net.shibboleth.utilities.java.support.collection.Pair<java.util.Set<java.lang.String>,java.lang.Iterable<PKIXValidationInformation>> validationPair)
Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
|