edu.internet2.middleware.shibboleth.common.binding.security

クラス ShibbolethClientCertAuthRule

java.lang.Object

org.opensaml.ws.security.provider.BaseTrustEngineRule<X509Credential>

org.opensaml.ws.security.provider.ClientCertAuthRule

org.opensaml.common.binding.security.SAMLMDClientCertAuthRule

edu.internet2.middleware.shibboleth.common.binding.security.ShibbolethClientCertAuthRule

すべての実装されたインタフェース:

SecurityPolicyRule

public class ShibbolethClientCertAuthRule
extends SAMLMDClientCertAuthRule

Specialization of SAMLMDClientCertAuthRule which may include Shibboleth-specific method overrides for client certificate authentication processing.

コンストラクタの概要

コンストラクタ

コンストラクタと説明
ShibbolethClientCertAuthRule(TrustEngine<X509Credential> engine) Constructor.
ShibbolethClientCertAuthRule(TrustEngine<X509Credential> engine, CertificateNameOptions nameOptions) Constructor.

メソッドの概要

クラスから継承されたメソッド org.opensaml.common.binding.security.SAMLMDClientCertAuthRule

buildCriteriaSet

クラスから継承されたメソッド org.opensaml.ws.security.provider.ClientCertAuthRule

doEvaluate, evaluate, evaluateCertificateNameDerivedIssuers, evaluateCertificateNameDerivedPresenters, evaluateDerivedIssuers, evaluateDerivedPresenters, evaluateSubjectAltNames, evaluateSubjectCommonName, evaluateSubjectDN, getAltNames, getCertificateNameOptions, getCertificatePresenterEntityID, getCommonName, getSubjectName, setAuthenticatedCertificatePresenterEntityID

クラスから継承されたメソッド org.opensaml.ws.security.provider.BaseTrustEngineRule

evaluate, evaluate, getTrustEngine

クラスから継承されたメソッド java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

コンストラクタの詳細

ShibbolethClientCertAuthRule

public ShibbolethClientCertAuthRule(TrustEngine<X509Credential> engine,
                            CertificateNameOptions nameOptions)

Constructor.

パラメータ:

engine - Trust engine used to verify the request X509Credential

nameOptions - options for deriving issuer names from an X.509 certificate

ShibbolethClientCertAuthRule

public ShibbolethClientCertAuthRule(TrustEngine<X509Credential> engine)

Constructor. The certificate name issuer derivation options are defaulted to be consistent with the Shibboleth 1.3 identity provider.

パラメータ:

engine - Trust engine used to verify the request X509Credential