org.opensaml.common.binding.security

クラス SAMLMDClientCertAuthRule

java.lang.Object

org.opensaml.ws.security.provider.BaseTrustEngineRule<X509Credential>

org.opensaml.ws.security.provider.ClientCertAuthRule

org.opensaml.common.binding.security.SAMLMDClientCertAuthRule

すべての実装されたインタフェース:

SecurityPolicyRule

直系の既知のサブクラス:

ShibbolethClientCertAuthRule

public class SAMLMDClientCertAuthRule
extends ClientCertAuthRule

SAML specialization of ClientCertAuthRule which provides support for X509Credential trust engine validation based on SAML metadta.

コンストラクタの概要

コンストラクタ

コンストラクタと説明
SAMLMDClientCertAuthRule(TrustEngine<X509Credential> engine, CertificateNameOptions nameOptions) Constructor.

メソッドの概要

メソッド

修飾子とタイプ	メソッドと説明
protected CriteriaSet	buildCriteriaSet(String entityID, MessageContext messageContext) Subclasses are required to implement this method to build a criteria set for the trust engine according to trust engine and application-specific needs.

クラスから継承されたメソッド org.opensaml.ws.security.provider.ClientCertAuthRule

doEvaluate, evaluate, evaluateCertificateNameDerivedIssuers, evaluateCertificateNameDerivedPresenters, evaluateDerivedIssuers, evaluateDerivedPresenters, evaluateSubjectAltNames, evaluateSubjectCommonName, evaluateSubjectDN, getAltNames, getCertificateNameOptions, getCertificatePresenterEntityID, getCommonName, getSubjectName, setAuthenticatedCertificatePresenterEntityID

クラスから継承されたメソッド org.opensaml.ws.security.provider.BaseTrustEngineRule

evaluate, evaluate, getTrustEngine

クラスから継承されたメソッド java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

コンストラクタの詳細

SAMLMDClientCertAuthRule

public SAMLMDClientCertAuthRule(TrustEngine<X509Credential> engine,
                        CertificateNameOptions nameOptions)

Constructor.

パラメータ:

engine - Trust engine used to verify the request X509Credential

nameOptions - options for deriving issuer names from an X.509 certificate

メソッドの詳細

buildCriteriaSet

protected CriteriaSet buildCriteriaSet(String entityID,
                           MessageContext messageContext)
                                throws SecurityPolicyException

Subclasses are required to implement this method to build a criteria set for the trust engine according to trust engine and application-specific needs.

オーバーライド:

buildCriteriaSet クラス内 ClientCertAuthRule

パラメータ:

entityID - the candidate issuer entity ID which is being evaluated

messageContext - the message context which is being evaluated

戻り値:

a newly constructly set of criteria suitable for the configured trust engine

例外:

SecurityPolicyException - thrown if criteria set can not be constructed