org.springframework.security.saml.trust
Class CertPathPKIXTrustEvaluator

java.lang.Object
  org.opensaml.xml.security.x509.CertPathPKIXTrustEvaluator
      org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator

All Implemented Interfaces:

org.opensaml.xml.security.x509.PKIXTrustEvaluator

public class CertPathPKIXTrustEvaluator
extends org.opensaml.xml.security.x509.CertPathPKIXTrustEvaluator

Customized PKIX trust evaluator which runs a CertPath verification after obtaining it. This enables e.g. usage of OSCP revocation mechanism in Java 7.

Constructor Summary

CertPathPKIXTrustEvaluator()

CertPathPKIXTrustEvaluator(org.opensaml.xml.security.x509.PKIXValidationOptions newOptions)

Method Summary

boolean

validate(org.opensaml.xml.security.x509.PKIXValidationInformation validationInfo, org.opensaml.xml.security.x509.X509Credential untrustedCredential)

Methods inherited from class org.opensaml.xml.security.x509.CertPathPKIXTrustEvaluator

addCRLsToStoreMaterial, buildCertStore, buildTrustAnchor, getEffectiveVerificationDepth, getPKIXBuilderParameters, getPKIXValidationOptions, getTrustAnchors, getX500DNHandler, setPKIXValidationOptions, setX500DNHandler, storeContainsCRLs

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertPathPKIXTrustEvaluator

public CertPathPKIXTrustEvaluator()

CertPathPKIXTrustEvaluator

public CertPathPKIXTrustEvaluator(org.opensaml.xml.security.x509.PKIXValidationOptions newOptions)

Method Detail

validate

public boolean validate(org.opensaml.xml.security.x509.PKIXValidationInformation validationInfo,
                        org.opensaml.xml.security.x509.X509Credential untrustedCredential)
                 throws org.opensaml.xml.security.SecurityException

Specified by:

validate in interface org.opensaml.xml.security.x509.PKIXTrustEvaluator

Overrides:

validate in class org.opensaml.xml.security.x509.CertPathPKIXTrustEvaluator

Throws:

org.opensaml.xml.security.SecurityException