net.shibboleth.idp.profile.spring.factory

Class StaticPKIXFactoryBean

java.lang.Object

org.springframework.beans.factory.config.AbstractFactoryBean<T>

net.shibboleth.ext.spring.factory.AbstractComponentAwareFactoryBean<PKIXX509CredentialTrustEngine>

net.shibboleth.idp.profile.spring.factory.StaticPKIXFactoryBean

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanClassLoaderAware, org.springframework.beans.factory.BeanFactoryAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.FactoryBean<PKIXX509CredentialTrustEngine>, org.springframework.beans.factory.InitializingBean

public class StaticPKIXFactoryBean
extends AbstractComponentAwareFactoryBean<PKIXX509CredentialTrustEngine>

File system specific bean for PKIXX509CredentialTrustEngine.

Since:

3.3.0

Field Summary

Fields

Modifier and Type	Field and Description
private List<org.springframework.core.io.Resource>	certificateResources Certificate resources.
private boolean	checkNames Whether to enable name checking.
private List<org.springframework.core.io.Resource>	crlResources CRL resources.
private org.slf4j.Logger	log log.
private Set<String>	trustedNames Explicit subject name(s) to match.
private Integer	verifyDepth Verification depth.

Fields inherited from class org.springframework.beans.factory.config.AbstractFactoryBean

logger

Constructor Summary

Constructors

Constructor and Description
StaticPKIXFactoryBean() Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
protected PKIXX509CredentialTrustEngine	doCreateInstance()
protected List<X509Certificate>	getCertificates() Get the configured certificates.
protected List<X509CRL>	getCRLs() Get the configured CRL list.
Class<?>	getObjectType()
void	setCertificates(List<org.springframework.core.io.Resource> certs) Set the resources which we will convert into certificates.
void	setCheckNames(boolean flag) Set whether the perform name checking in the PKIX layer.
void	setCRLs(List<org.springframework.core.io.Resource> crls) Set the resources which we will convert into CRLs.
void	setTrustedNames(Collection<String> names) Set explicitly trusted names to match against credential.
void	setVerifyDepth(int depth) Set the verify depth.

Methods inherited from class net.shibboleth.ext.spring.factory.AbstractComponentAwareFactoryBean

createInstance, destroyInstance

Methods inherited from class org.springframework.beans.factory.config.AbstractFactoryBean

afterPropertiesSet, destroy, getBeanFactory, getBeanTypeConverter, getEarlySingletonInterfaces, getObject, isSingleton, setBeanClassLoader, setBeanFactory, setSingleton

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

@Nonnull
private org.slf4j.Logger log

log.

certificateResources

@Nullable
private List<org.springframework.core.io.Resource> certificateResources

Certificate resources.

crlResources

@Nullable
private List<org.springframework.core.io.Resource> crlResources

CRL resources.

verifyDepth

@Nullable
private Integer verifyDepth

Verification depth.

trustedNames

@Nullable
private Set<String> trustedNames

Explicit subject name(s) to match.

checkNames

private boolean checkNames

Whether to enable name checking.

Constructor Detail

StaticPKIXFactoryBean

public StaticPKIXFactoryBean()

Constructor.

Method Detail

getObjectType

public Class<?> getObjectType()

Specified by:

getObjectType in interface org.springframework.beans.factory.FactoryBean<PKIXX509CredentialTrustEngine>

Specified by:

getObjectType in class org.springframework.beans.factory.config.AbstractFactoryBean<PKIXX509CredentialTrustEngine>

setCertificates

public void setCertificates(@Nullable
                   List<org.springframework.core.io.Resource> certs)

Set the resources which we will convert into certificates.

Parameters:

certs - the resources

setCRLs

public void setCRLs(@Nullable
           List<org.springframework.core.io.Resource> crls)

Set the resources which we will convert into CRLs.

Parameters:

crls - the resources

setVerifyDepth

public void setVerifyDepth(int depth)

Set the verify depth.

Parameters:

depth - value to set

setCheckNames

public void setCheckNames(boolean flag)

Set whether the perform name checking in the PKIX layer. Defaults to "true", should generally be disabled when used with an HTTP client that is already checking names.

Parameters:

flag - flag to set

Since:

3.4.0

setTrustedNames

public void setTrustedNames(@Nullable@NonnullElements
                   Collection<String> names)

Set explicitly trusted names to match against credential.

Parameters:

names - explicitly trusted names

Since:

3.4.0

getCertificates

@Nullable
@NonnullElements
protected List<X509Certificate> getCertificates()

Get the configured certificates.

Returns:

the certificates

getCRLs

@Nonnull
@NonnullElements
protected List<X509CRL> getCRLs()

Get the configured CRL list.

Returns:

the crls

doCreateInstance

protected PKIXX509CredentialTrustEngine doCreateInstance()
                                                  throws Exception

Specified by:

doCreateInstance in class AbstractComponentAwareFactoryBean<PKIXX509CredentialTrustEngine>

Throws:

Exception