org.opensaml.xml.security.trust

クラス ExplicitX509CertificateTrustEngine

java.lang.Object

org.opensaml.xml.security.trust.ExplicitX509CertificateTrustEngine

すべての実装されたインタフェース:

TrustedCredentialTrustEngine<X509Credential>, TrustEngine<X509Credential>

public class ExplicitX509CertificateTrustEngine
extends Object
implements TrustedCredentialTrustEngine<X509Credential>

Trust engine that evaluates a credential's X.509 certificate against certificates expressed within a set of trusted credentials obtained from a credential resolver. The credential being tested is valid if its entity certificate matches the entity certificate contained within any of the trusted credentials produced by the given credential resolver.

コンストラクタの概要

コンストラクタ

コンストラクタと説明
ExplicitX509CertificateTrustEngine(CredentialResolver resolver) Constructor.

メソッドの概要

メソッド

修飾子とタイプ	メソッドと説明
protected void	checkParams(X509Credential untrustedCredential, CriteriaSet trustBasisCriteria) Check the parameters for required values.
CredentialResolver	getCredentialResolver() Gets the credential resolver used to recover trusted credentials that may be used to validate tokens.
boolean	validate(X509Credential untrustedCredential, CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.

クラスから継承されたメソッド java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

コンストラクタの詳細

ExplicitX509CertificateTrustEngine

public ExplicitX509CertificateTrustEngine(CredentialResolver resolver)

Constructor.

パラメータ:

resolver - credential resolver which is used to resolve trusted credentials

メソッドの詳細

getCredentialResolver

public CredentialResolver getCredentialResolver()

Gets the credential resolver used to recover trusted credentials that may be used to validate tokens.

定義:

getCredentialResolver インタフェース内 TrustedCredentialTrustEngine<X509Credential>

戻り値:

credential resolver used to recover trusted credentials that may be used to validate tokens

validate

public boolean validate(X509Credential untrustedCredential,
               CriteriaSet trustBasisCriteria)
                 throws SecurityException

Validates the token against trusted information obtained in an implementation-specific manner.

定義:

validate インタフェース内 TrustEngine<X509Credential>

パラメータ:

untrustedCredential - security token to validate

trustBasisCriteria - criteria used to describe and/or resolve the information which serves as the basis for trust evaluation

戻り値:

true if the token is trusted and valid, false if not

例外:

SecurityException - thrown if there is a problem validating the security token

checkParams

protected void checkParams(X509Credential untrustedCredential,
               CriteriaSet trustBasisCriteria)
                    throws SecurityException

Check the parameters for required values.

パラメータ:

untrustedCredential - the signature to be evaluated

trustBasisCriteria - the set of trusted credential criteria

例外:

SecurityException - thrown if required values are absent or otherwise invalid