org.jasig.cas.adaptors.x509.authentication.principal

Class X509SerialNumberAndIssuerDNPrincipalResolver

java.lang.Object

org.jasig.cas.authentication.principal.PersonDirectoryPrincipalResolver

org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

org.jasig.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

All Implemented Interfaces:

PrincipalResolver

public final class X509SerialNumberAndIssuerDNPrincipalResolver
extends AbstractX509PrincipalResolver

This class is targeted at usage for mapping to an existing user record. It can construct a highly-likely unique DN based on a certificate's serialnumber and its issuerDN. example: SERIALNUMBER=20267647332258882251479793556682961758, SERIALNUMBER=200301, CN=Citizen CA, C=BE see RFC3280 The combination of a certificate serial number and the issuerDN *should* be unique: - The certificate serialNumber is by its nature unique for a certain issuer. - The issuerDN is RECOMMENDED to be unique. Both the serial number and the issuerDN are REQUIRED in a certificate. Note: comparison rules state the compare should be case-insensitive. LDAP value description: EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 [=distinguishedName]

Since:

3.1

Author:

Jan Van der Velpen

Field Summary

Fields inherited from class org.jasig.cas.authentication.principal.PersonDirectoryPrincipalResolver

logger

Constructor Summary

Constructors

Constructor and Description
X509SerialNumberAndIssuerDNPrincipalResolver()

Method Summary

Methods

Modifier and Type	Method and Description
protected String	resolvePrincipalInternal(X509Certificate certificate)
void	setSerialNumberPrefix(String serialNumberPrefix) Sets a prefix for the certificate serialnumber (default: "SERIALNUMBER=").
void	setValueDelimiter(String valueDelimiter) Sets a delimiter to separate the two certificate properties in the string.

Methods inherited from class org.jasig.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

extractPrincipalId, supports

Methods inherited from class org.jasig.cas.authentication.principal.PersonDirectoryPrincipalResolver

resolve, setAttributeRepository, setPrincipalAttributeName, setReturnNullIfNoAttributes

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

X509SerialNumberAndIssuerDNPrincipalResolver

public X509SerialNumberAndIssuerDNPrincipalResolver()

Method Detail

setSerialNumberPrefix

public void setSerialNumberPrefix(String serialNumberPrefix)

Sets a prefix for the certificate serialnumber (default: "SERIALNUMBER=").

Parameters:

serialNumberPrefix - The serialNumberPrefix to set.

setValueDelimiter

public void setValueDelimiter(String valueDelimiter)

Sets a delimiter to separate the two certificate properties in the string. (default: ", ")

Parameters:

valueDelimiter - The valueDelimiter to set.

resolvePrincipalInternal

protected String resolvePrincipalInternal(X509Certificate certificate)

Specified by:

resolvePrincipalInternal in class AbstractX509PrincipalResolver