org.opensaml.xml.security.x509
Interface PKIXValidationInformationResolver

All Superinterfaces:

Resolver<PKIXValidationInformation,CriteriaSet>

All Known Implementing Classes:

StaticPKIXValidationInformationResolver

public interface PKIXValidationInformationResolver
extends Resolver<PKIXValidationInformation,CriteriaSet>

A resolver which uses Criteria to resolve PKIXValidationInformation, which will typically be used PKIX-based trust engines. Implementations may also optionally implement resolveTrustedNames(CriteriaSet), which will return a set of trusted names associated with the entity implied by the criteria. These trusted names may be used to validate (in an application-specific manner) that an entity is trusted to wield a particular certificate.

Method Summary

java.util.Set<java.lang.String>	resolveTrustedNames(CriteriaSet criteriaSet) Resolve a set of trusted names associated with the entity indicated by the criteria.
boolean	supportsTrustedNameResolution() Check whether resolution of trusted names is supported.

Methods inherited from interface org.opensaml.xml.security.Resolver

resolve, resolveSingle

Method Detail

resolveTrustedNames

java.util.Set<java.lang.String> resolveTrustedNames(CriteriaSet criteriaSet)
                                                    throws SecurityException,
                                                           java.lang.UnsupportedOperationException

Resolve a set of trusted names associated with the entity indicated by the criteria. This method is optional to implement.

Parameters:

criteriaSet - set of criteria used to determine or resolve the trusted names

Returns:

the set of certificate names trusted for an entity

Throws:

SecurityException - thrown if there is an error resolving the trusted names

java.lang.UnsupportedOperationException - thrown if this optional method is not supported by the implementation

supportsTrustedNameResolution

boolean supportsTrustedNameResolution()

Check whether resolution of trusted names is supported.

Returns:

true if the implementation supports resolution of trusted names, otherwise false