A C D E F G I L N O R S T V X

A

AbstractCRLRevocationChecker - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Base class for all CRL-based revocation checkers.

AbstractCRLRevocationChecker() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

AbstractX509PrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

Abstract class in support of multiple resolvers for X509 Certificates.

AbstractX509PrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

addCrl(X509CRL) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Adds the given CRL to the collection of CRLs held by this class.

afterPropertiesSet() - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Initializes the process that periodically fetches CRL data.

AllowRevocationPolicy - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Implements an unqualified allow policy.

AllowRevocationPolicy() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.AllowRevocationPolicy

apply(Void) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AllowRevocationPolicy

Policy application does nothing to implement unqualfied allow.

apply(Void) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.DenyRevocationPolicy

Policy application throws GeneralSecurityException to stop execution of whatever process invoked application of this policy.

apply(T) - Method in interface org.jasig.cas.adaptors.x509.authentication.handler.support.RevocationPolicy

Applies the policy.

apply(X509CRL) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

Applies the policy.

C

CertUtils - Class in org.jasig.cas.adaptors.x509.util

Utility class with methods to support various operations on X.509 certs.

check(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Checks the revocation status of the given certificate.

check(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.NoOpRevocationChecker

NO-OP check implementation.

check(X509Certificate) - Method in interface org.jasig.cas.adaptors.x509.authentication.handler.support.RevocationChecker

Checks the revocation status of the given certificate.

constructCredentialsFromRequest(RequestContext) - Method in class org.jasig.cas.adaptors.x509.web.flow.X509CertificateCredentialsNonInteractiveAction

CRL_REASON_OID - Static variable in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

OID for reasonCode CRL extension.

CRLDistributionPointRevocationChecker - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Performs CRL-based revocation checking by consulting resources defined in the CRLDistributionPoints extension field on the certificate.

CRLDistributionPointRevocationChecker(Cache) - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

Creates a new instance that uses the given cache instance for CRL caching.

D

DEFAULT_REFRESH_INTERVAL - Static variable in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Default refresh interval is 1 hour.

DenyRevocationPolicy - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Implements a deny policy by throwing an exception.

DenyRevocationPolicy() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.DenyRevocationPolicy

doAuthentication(Credential) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

E

ExpiredCRLException - Exception in org.jasig.cas.adaptors.x509.authentication.handler.support

Exception describing an expired CRL condition.

ExpiredCRLException(String, Date) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

Creates a new instance describing a CRL that expired on the given date.

ExpiredCRLException(String, Date, int) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

Creates a new instance describing a CRL that expired on a date that is more than leniency seconds beyond its expiration date.

extractPrincipalId(Credential) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

F

fetch(boolean) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker.CRLFetcher

Fetches CRL data for all resources held by this instance.

fetchCRL(Resource) - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Fetches an X.509 CRL from a resource such as a file or URL.

finalize() - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

fromCode(int) - Static method in enum org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException.Reason

G

getCertificate() - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredential

getCertificateFactory() - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Gets a certificate factory for creating X.509 artifacts.

getCertificates() - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredential

getCRL(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Gets the CRL for the given certificate.

getCRL(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

Gets the CRL for the given certificate.

getCRL(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Gets the CRL for the given certificate.

getExpirationDate() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getFetcher() - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

getId() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getId() - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredential

getLeniency() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getMessage() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getMessage() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

getReason() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

getRevocationDate() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

getSerial() - Method in exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

I

isExpired(X509CRL) - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Determines whether the given CRL is expired by examining the nextUpdate field.

isExpired(X509CRL, Date) - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Determines whether the given CRL is expired by comparing the nextUpdate field with a given date.

L

logger - Variable in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Logger instance.

N

NoOpRevocationChecker - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

NO-OP implementation certificate revocation checker.

NoOpRevocationChecker() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.NoOpRevocationChecker

O

org.jasig.cas.adaptors.x509.authentication.handler.support - package org.jasig.cas.adaptors.x509.authentication.handler.support

org.jasig.cas.adaptors.x509.authentication.principal - package org.jasig.cas.adaptors.x509.authentication.principal

org.jasig.cas.adaptors.x509.util - package org.jasig.cas.adaptors.x509.util

org.jasig.cas.adaptors.x509.web.flow - package org.jasig.cas.adaptors.x509.web.flow

R

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509SerialNumberPrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509SubjectDNPrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509SubjectPrincipalResolver

Replaces placeholders in the descriptor with values extracted from attribute values in relative distinguished name components of the DN.

ResourceCRLRevocationChecker - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

CRL-based revocation checker that uses one or more CRL resources to fetch local or remote CRL data periodically.

ResourceCRLRevocationChecker(Resource) - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Creates a new instance using the specified resource for CRL data.

ResourceCRLRevocationChecker(Resource[]) - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Creates a new instance using the specified resources for CRL data.

ResourceCRLRevocationChecker.CRLFetcher - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Handles details of fetching CRL data from resources.

ResourceCRLRevocationChecker.CRLFetcher(Resource[]) - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker.CRLFetcher

Creates a new instance using the specified resources for CRL data.

RevocationChecker - Interface in org.jasig.cas.adaptors.x509.authentication.handler.support

Strategy interface for checking revocation status of a certificate.

RevocationPolicy<T> - Interface in org.jasig.cas.adaptors.x509.authentication.handler.support

Strategy interface for enforcing various policy matters related to certificate revocation, such as what to do when revocation data is unavailable or stale.

RevokedCertificateException - Exception in org.jasig.cas.adaptors.x509.authentication.handler.support

Exception that describes a revoked X.509 certificate.

RevokedCertificateException(Date, BigInteger) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

RevokedCertificateException(Date, BigInteger, RevokedCertificateException.Reason) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

RevokedCertificateException(X509CRLEntry) - Constructor for exception org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

RevokedCertificateException.Reason - Enum in org.jasig.cas.adaptors.x509.authentication.handler.support

CRL revocation reason codes per RFC 3280.

S

setCertificate(X509Certificate) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredential

setCheckKeyUsage(boolean) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setDescriptor(String) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509SubjectPrincipalResolver

Sets the descriptor that describes for format of the principal ID to create from X.509 subject DN attributes.

setExpiredCRLPolicy(RevocationPolicy<X509CRL>) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Sets the policy to apply when CRL data is expired.

setMaxPathLength(int) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setMaxPathLengthAllowUnspecified(boolean) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setRefreshInterval(int) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Sets the interval at which CRL data should be reloaded from CRL resources.

setRequireKeyUsage(boolean) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setRevocationChecker(RevocationChecker) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

Sets the component responsible for evaluating certificate revocation status for client certificates presented to handler.

setSerialNumberPrefix(String) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

Sets a prefix for the certificate serialnumber (default: "SERIALNUMBER=").

setSubjectDnPattern(String) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setThreshold(int) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

Sets the threshold period of time after which expired CRL data is rejected.

setTrustedIssuerDnPattern(String) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setUnavailableCRLPolicy(RevocationPolicy<Void>) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Sets the policy to apply when CRL data is unavailable.

setValueDelimiter(String) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

Sets a delimiter to separate the two certificate properties in the string.

supports(Credential) - Method in class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

supports(Credential) - Method in class org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

T

ThresholdExpiredCRLRevocationPolicy - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Implements a policy to handle expired CRL data whereby expired data is permitted up to a threshold period of time but not afterward.

ThresholdExpiredCRLRevocationPolicy() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

toString(X509Certificate) - Static method in class org.jasig.cas.adaptors.x509.util.CertUtils

Creates a unique and human-readable representation of the given certificate.

V

valueOf(String) - Static method in enum org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException.Reason

Returns the enum constant of this type with the specified name.

values() - Static method in enum org.jasig.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException.Reason

Returns an array containing the constants of this enum type, in the order they are declared.

X

X509_CERTIFICATE_TYPE - Static variable in class org.jasig.cas.adaptors.x509.util.CertUtils

X509 certificate type.

X509CertificateCredential - Class in org.jasig.cas.adaptors.x509.authentication.principal

An X.509 certificate credential.

X509CertificateCredential(X509Certificate[]) - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredential

X509CertificateCredentialsNonInteractiveAction - Class in org.jasig.cas.adaptors.x509.web.flow

Concrete implementation of AbstractNonInteractiveCredentialsAction that obtains the X509 Certificates from the HttpServletRequest and places them in the X509CertificateCredential.

X509CertificateCredentialsNonInteractiveAction() - Constructor for class org.jasig.cas.adaptors.x509.web.flow.X509CertificateCredentialsNonInteractiveAction

X509CredentialsAuthenticationHandler - Class in org.jasig.cas.adaptors.x509.authentication.handler.support

Authentication Handler that accepts X509 Certificates, determines their validity and ensures that they were issued by a trusted issuer.

X509CredentialsAuthenticationHandler() - Constructor for class org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

X509SerialNumberAndIssuerDNPrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

This class is targeted at usage for mapping to an existing user record.

X509SerialNumberAndIssuerDNPrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

X509SerialNumberPrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

Returns a new principal based on the Sereial Number of the certificate.

X509SerialNumberPrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509SerialNumberPrincipalResolver

X509SubjectDNPrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

Returns a principal based on the Subject DNs name.

X509SubjectDNPrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509SubjectDNPrincipalResolver

X509SubjectPrincipalResolver - Class in org.jasig.cas.adaptors.x509.authentication.principal

Credential to principal resolver that extracts one or more attribute values from the certificate subject DN and combines them with intervening delimiters.

X509SubjectPrincipalResolver() - Constructor for class org.jasig.cas.adaptors.x509.authentication.principal.X509SubjectPrincipalResolver

A C D E F G I L N O R S T V X