org.opensaml.security.x509.impl

Class StaticPKIXValidationInformationResolver

java.lang.Object

org.opensaml.security.x509.impl.StaticPKIXValidationInformationResolver

All Implemented Interfaces:

net.shibboleth.utilities.java.support.resolver.Resolver<PKIXValidationInformation,net.shibboleth.utilities.java.support.resolver.CriteriaSet>, PKIXValidationInformationResolver

public class StaticPKIXValidationInformationResolver
extends java.lang.Object
implements PKIXValidationInformationResolver

An implementation of PKIXValidationInformationResolver which always returns a static, fixed set of information.

Field Summary

Fields

Modifier and Type	Field and Description
private java.util.List<PKIXValidationInformation>	pkixInfo The PKIX validation information to return.
private boolean	supportDynamicTrustedNames Flag indicating whether dynamic trusted names should be extracted from criteria set.
private java.util.Set<java.lang.String>	trustedNames The set of trusted names to return.

Constructor Summary

Constructors

Constructor and Description
StaticPKIXValidationInformationResolver(java.util.List<PKIXValidationInformation> info, java.util.Set<java.lang.String> names) Constructor.
StaticPKIXValidationInformationResolver(java.util.List<PKIXValidationInformation> info, java.util.Set<java.lang.String> names, boolean supportDynamicNames) Constructor.

Method Summary

Modifier and Type	Method and Description
java.lang.Iterable<PKIXValidationInformation>	resolve(net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria)
PKIXValidationInformation	resolveSingle(net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria)
java.util.Set<java.lang.String>	resolveTrustedNames(net.shibboleth.utilities.java.support.resolver.CriteriaSet criteriaSet) Resolve a set of trusted names associated with the entity indicated by the criteria.
boolean	supportsTrustedNameResolution() Check whether resolution of trusted names is supported.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

pkixInfo

private final java.util.List<PKIXValidationInformation> pkixInfo

The PKIX validation information to return.

trustedNames

private final java.util.Set<java.lang.String> trustedNames

The set of trusted names to return.

supportDynamicTrustedNames

private boolean supportDynamicTrustedNames

Flag indicating whether dynamic trusted names should be extracted from criteria set.

Constructor Detail

StaticPKIXValidationInformationResolver

public StaticPKIXValidationInformationResolver(@Nullable
                                               java.util.List<PKIXValidationInformation> info,
                                               @Nullable
                                               java.util.Set<java.lang.String> names)

Constructor.

Dynamic trusted names will not be supported.

Parameters:

info - list of PKIX validation information to return

names - set of trusted names to return

StaticPKIXValidationInformationResolver

public StaticPKIXValidationInformationResolver(@Nullable
                                               java.util.List<PKIXValidationInformation> info,
                                               @Nullable
                                               java.util.Set<java.lang.String> names,
                                               boolean supportDynamicNames)

Constructor.

Parameters:

info - list of PKIX validation information to return

names - set of trusted names to return

supportDynamicNames - whether resolver should support dynamic extraction of trusted names from an instance of TrustedNamesCriterion in the criteria set

Method Detail

resolveTrustedNames

@Nonnull
public java.util.Set<java.lang.String> resolveTrustedNames(@Nullable
                                                                    net.shibboleth.utilities.java.support.resolver.CriteriaSet criteriaSet)
                                                             throws net.shibboleth.utilities.java.support.resolver.ResolverException

Resolve a set of trusted names associated with the entity indicated by the criteria. This method is optional to implement.

Specified by:

resolveTrustedNames in interface PKIXValidationInformationResolver

Parameters:

criteriaSet - set of criteria used to determine or resolve the trusted names

Returns:

the set of certificate names trusted for an entity

Throws:

net.shibboleth.utilities.java.support.resolver.ResolverException - thrown if there is an error resolving the trusted names

supportsTrustedNameResolution

public boolean supportsTrustedNameResolution()

Check whether resolution of trusted names is supported.

Specified by:

supportsTrustedNameResolution in interface PKIXValidationInformationResolver

Returns:

true if the implementation supports resolution of trusted names, otherwise false

resolve

@Nonnull
public java.lang.Iterable<PKIXValidationInformation> resolve(@Nullable
                                                                      net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria)
                                                               throws net.shibboleth.utilities.java.support.resolver.ResolverException

Specified by:

resolve in interface net.shibboleth.utilities.java.support.resolver.Resolver<PKIXValidationInformation,net.shibboleth.utilities.java.support.resolver.CriteriaSet>

Throws:

net.shibboleth.utilities.java.support.resolver.ResolverException

resolveSingle

@Nullable
public PKIXValidationInformation resolveSingle(@Nullable
                                                         net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria)
                                                  throws net.shibboleth.utilities.java.support.resolver.ResolverException

Specified by:

resolveSingle in interface net.shibboleth.utilities.java.support.resolver.Resolver<PKIXValidationInformation,net.shibboleth.utilities.java.support.resolver.CriteriaSet>

Throws:

net.shibboleth.utilities.java.support.resolver.ResolverException