Package org.opensaml.security.trust.impl

Class ExplicitX509CertificateTrustEvaluator

java.lang.Object

org.opensaml.security.trust.impl.ExplicitX509CertificateTrustEvaluator

public class ExplicitX509CertificateTrustEvaluator
extends Object

Auxillary trust evaluator for evaluating an untrusted X509 certificate or credential against a trusted certificate or credential. Trust is established if the untrusted certificate supplied (or the certificate obtained from the untrusted credential's X509Credential.getEntityCertificate()) matches one of the trusted certificates supplied.

Field Summary

Fields

Modifier and Type	Field	Description
private org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
ExplicitX509CertificateTrustEvaluator()

Method Summary

Modifier and Type	Method	Description
boolean	validate(X509Certificate untrustedCertificate, Iterable<X509Certificate> trustedCertificates)	Evaluate trust.
boolean	validate(X509Certificate untrustedCertificate, X509Certificate trustedCertificate)	Evaluate trust.
boolean	validate(X509Credential untrustedCredential, Iterable<Credential> trustedCredentials)	Evaluate trust.
boolean	validate(X509Credential untrustedCredential, X509Credential trustedCredential)	Evaluate trust.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

private final org.slf4j.Logger log

Class logger.

Constructor Detail

ExplicitX509CertificateTrustEvaluator

public ExplicitX509CertificateTrustEvaluator()

Method Detail

validate

public boolean validate(@Nonnull
                        X509Certificate untrustedCertificate,
                        @Nonnull
                        X509Certificate trustedCertificate)

Evaluate trust.

Parameters:

untrustedCertificate - the untrusted certificate to evaluate

trustedCertificate - basis for trust

Returns:

true if trust can be established, false otherwise

validate

public boolean validate(@Nonnull
                        X509Certificate untrustedCertificate,
                        @Nonnull
                        Iterable<X509Certificate> trustedCertificates)

Evaluate trust.

Parameters:

untrustedCertificate - the untrusted certificate to evaluate

trustedCertificates - basis for trust

Returns:

true if trust can be established, false otherwise

validate

public boolean validate(@Nonnull
                        X509Credential untrustedCredential,
                        @Nonnull
                        X509Credential trustedCredential)

Evaluate trust.

Parameters:

untrustedCredential - the untrusted X509Credential to evaluate

trustedCredential - basis for trust

Returns:

true if trust can be established, false otherwise

validate

public boolean validate(@Nonnull
                        X509Credential untrustedCredential,
                        @Nonnull
                        Iterable<Credential> trustedCredentials)

Evaluate trust.

Parameters:

untrustedCredential - the untrusted X509Credential to evaluate

trustedCredentials - basis for trust

Returns:

true if trust can be established, false otherwise