A C D E F G I L N O R S T V X

A

AbstractCRLRevocationChecker - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Base class for all CRL-based revocation checkers.

AbstractCRLRevocationChecker() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

AbstractX509CertificateCredentialsToPrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

Abstract class in support of multiple resolvers for X509 Certificates.

AbstractX509CertificateCredentialsToPrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509CertificateCredentialsToPrincipalResolver

addCrl(X509CRL) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Adds the given CRL to the collection of CRLs held by this class.

afterPropertiesSet() - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Initializes the process that periodically fetches CRL data.

AllowRevocationPolicy - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Implements an unqualified allow policy.

AllowRevocationPolicy() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.AllowRevocationPolicy

apply(Void) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AllowRevocationPolicy

Policy application does nothing to implement unqualfied allow.

apply(Void) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.DenyRevocationPolicy

Policy application throws GeneralSecurityException to stop execution of whatever process invoked application of this policy.

apply(T) - Method in interface org.jasig.cas.adaptors.x509.authentication.handler.support.RevocationPolicy

Applies the policy.

apply(X509CRL) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

The CRL next update time is compared against the current time with the threshold applied and rejected if and only if the next update time is in the past.

C

CertUtils - Class in org.jasig.cas.adaptors.x509.util

Utility class with methods to support various operations on X.509 certs.

check(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Checks the revocation status of the given certificate.

check(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.NoOpRevocationChecker

NO-OP check implementation.

check(X509Certificate) - Method in interface org.jasig.cas.adaptors.x509.authentication.handler.support.RevocationChecker

Checks the revocation status of the given certificate.

constructCredentialsFromRequest(RequestContext) - Method in class org.jasig.cas.adaptors.x509.web.flow.X509CertificateCredentialsNonInteractiveAction

CRL_REASON_OID - Static variable in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

OID for reasonCode CRL extension

CRLDistributionPointRevocationChecker - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Performs CRL-based revocation checking by consulting resources defined in the CRLDistributionPoints extension field on the certificate.

CRLDistributionPointRevocationChecker(Cache) - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

Creates a new instance that uses the given cache instance for CRL caching.

D

DEFAULT_REFRESH_INTERVAL - Static variable in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Default refresh interval is 1 hour.

DenyRevocationPolicy - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Implements a deny policy by throwing an exception.

DenyRevocationPolicy() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.DenyRevocationPolicy

doAuthentication(Credentials) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

E

ExpiredCRLException - Exception in org.jasig.cas.adaptors.x509.authentication.handler.support

Exception describing an expired CRL condition.

ExpiredCRLException(String, Date) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

Creates a new instance describing a CRL that expired on the given date.

ExpiredCRLException(String, Date, int) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

Creates a new instance describing a CRL that expired on a date that is more than leniency seconds beyond its expiration date.

extractPrincipalId(Credentials) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509CertificateCredentialsToPrincipalResolver

F

fetch(boolean) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker.CRLFetcher

Fetches CRL data for all resources held by this instance.

fetchCRL(Resource) - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Fetches an X.509 CRL from a resource such as a file or URL.

finalize() - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

fromCode(int) - Static method in enum org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException.Reason

G

getCertificate() - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentials

getCertificateFactory() - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Gets a certificate factory for creating X.509 artifacts.

getCertificates() - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentials

getCRL(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Gets the CRL for the given certificate.

getCRL(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

getCRL(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

getExpirationDate() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getFetcher() - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

getId() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getLeniency() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getMessage() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getMessage() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

getReason() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

getRevocationDate() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

getSerial() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

I

isExpired(X509CRL) - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Determines whether the given CRL is expired by examining the nextUpdate field.

isExpired(X509CRL, Date) - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Determines whether the given CRL is expired by comparing the nextUpdate field with a given date.

L

log - Variable in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Logger instance

N

NoOpRevocationChecker - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

NO-OP implementation certificate revocation checker.

NoOpRevocationChecker() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.NoOpRevocationChecker

O

org.jasig.cas.adaptors.x509.authentication.handler.support - package org.jasig.cas.adaptors.x509.authentication.handler.support

org.jasig.cas.adaptors.x509.authentication.principal - package org.jasig.cas.adaptors.x509.authentication.principal

org.jasig.cas.adaptors.x509.util - package org.jasig.cas.adaptors.x509.util

org.jasig.cas.adaptors.x509.web.flow - package org.jasig.cas.adaptors.x509.web.flow

R

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509CertificateCredentialsToPrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToDistinguishedNamePrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToIdentifierPrincipalResolver

Deprecated.

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToSerialNumberAndIssuerDNPrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToSerialNumberPrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToSubjectPrinciplalResolver

Replaces placeholders in the descriptor with values extracted from attribute values in relative distinguished name components of the DN.

ResourceCRLRevocationChecker - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

CRL-based revocation checker that uses one or more CRL resources to fetch local or remote CRL data periodically.

ResourceCRLRevocationChecker(Resource) - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Creates a new instance using the specified resource for CRL data.

ResourceCRLRevocationChecker(Resource[]) - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Creates a new instance using the specified resources for CRL data.

ResourceCRLRevocationChecker.CRLFetcher - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Handles details of fetching CRL data from resources.

ResourceCRLRevocationChecker.CRLFetcher(Resource[]) - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker.CRLFetcher

Creates a new instance using the specified resources for CRL data.

RevocationChecker - Interface in org.jasig.cas.adaptors.x509.authentication.handler.support

Strategy interface for checking revocation status of a certificate.

RevocationPolicy<T> - Interface in org.jasig.cas.adaptors.x509.authentication.handler.support

Strategy interface for enforcing various policy matters related to certificate revocation, such as what to do when revocation data is unavailable or stale.

RevokedCertificateException - Exception in org.jasig.cas.adaptors.x509.authentication.handler.support

Exception that describes a revoked X.509 certificate.

RevokedCertificateException(Date, BigInteger) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

RevokedCertificateException(Date, BigInteger, RevokedCertificateException.Reason) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

RevokedCertificateException(X509CRLEntry) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

RevokedCertificateException.Reason - Enum in org.jasig.cas.adaptors.x509.authentication.handler.support

CRL revocation reason codes per RFC 3280

S

setCertificate(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentials

setCheckKeyUsage(boolean) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setDescriptor(String) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToSubjectPrinciplalResolver

Sets the descriptor that describes for format of the principal ID to create from X.509 subject DN attributes.

setExpiredCRLPolicy(RevocationPolicy<X509CRL>) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Sets the policy to apply when CRL data is expired.

setIdentifier(String) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToIdentifierPrincipalResolver

Deprecated.

setMaxPathLength(int) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setMaxPathLengthAllowUnspecified(boolean) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setRefreshInterval(int) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Sets the interval at which CRL data should be reloaded from CRL resources.

setRequireKeyUsage(boolean) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setRevocationChecker(RevocationChecker) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

Sets the component responsible for evaluating certificate revocation status for client certificates presented to handler.

setSerialNumberPrefix(String) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToSerialNumberAndIssuerDNPrincipalResolver

Sets a prefix for the certificate serialnumber (default: "SERIALNUMBER=")

setSubjectDnPattern(String) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setThreshold(int) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

Sets the threshold period of time after which expired CRL data is rejected.

setTrustedIssuerDnPattern(String) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setUnavailableCRLPolicy(RevocationPolicy<Void>) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Sets the policy to apply when CRL data is unavailable.

setValueDelimiter(String) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToSerialNumberAndIssuerDNPrincipalResolver

Sets a delimiter to separate the two certificate properties in the string (default: ", ")

supports(Credentials) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

supports(Credentials) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509CertificateCredentialsToPrincipalResolver

T

ThresholdExpiredCRLRevocationPolicy - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Implements a policy to handle expired CRL data whereby expired data is permitted up to a threshold period of time but not afterward.

ThresholdExpiredCRLRevocationPolicy() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

toString() - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentials

toString(X509Certificate) - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Creates a unique and human-readable representation of the given certificate.

V

valueOf(String) - Static method in enum org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException.Reason

Returns the enum constant of this type with the specified name.

values() - Static method in enum org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException.Reason

Returns an array containing the constants of this enum type, in the order they are declared.

X

X509_CERTIFICATE_TYPE - Static variable in class org.jasig.cas.adaptors.x509.util.CertUtils

X509 certificate type.

X509CertificateCredentials - Class in org.jasig.cas.adaptors.x509.authentication.principal

X509CertificateCredentials(X509Certificate[]) - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentials

X509CertificateCredentialsNonInteractiveAction - Class in org.jasig.cas.adaptors.x509.web.flow

Concrete implementation of AbstractNonInteractiveCredentialsAction that obtains the X509 Certificates from the HttpServletRequest and places them in the X509CertificateCredentials.

X509CertificateCredentialsNonInteractiveAction() - Constructor for class org.jasig.cas.adaptors.x509.web.flow.X509CertificateCredentialsNonInteractiveAction

X509CertificateCredentialsToDistinguishedNamePrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

Returns a principal based on the Subject DNs name.

X509CertificateCredentialsToDistinguishedNamePrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToDistinguishedNamePrincipalResolver

X509CertificateCredentialsToIdentifierPrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

Deprecated.

X509CertificateCredentialsToIdentifierPrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToIdentifierPrincipalResolver

Deprecated.

X509CertificateCredentialsToSerialNumberAndIssuerDNPrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

This class is targeted at usage for mapping to an existing user record.

X509CertificateCredentialsToSerialNumberAndIssuerDNPrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToSerialNumberAndIssuerDNPrincipalResolver

X509CertificateCredentialsToSerialNumberPrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

Returns a new principal based on the Sereial Number of the certificate.

X509CertificateCredentialsToSerialNumberPrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToSerialNumberPrincipalResolver

X509CertificateCredentialsToSubjectPrinciplalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

Credential to principal resolver that extracts one or more attribute values from the certificate subject DN and combines them with intervening delimiters.

X509CertificateCredentialsToSubjectPrinciplalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToSubjectPrinciplalResolver

X509CredentialsAuthenticationHandler - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Authentication Handler that accepts X509 Certificiates, determines their validity and ensures that they were issued by a trusted issuer.

X509CredentialsAuthenticationHandler() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

A C D E F G I L N O R S T V X