|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Objectorg.opensaml.ws.security.provider.BaseTrustEngineRuleFactory<X509Credential,javax.servlet.ServletRequest>
org.opensaml.ws.security.provider.ClientCertAuthRuleFactory
public class ClientCertAuthRuleFactory
Factory for policy rules which check if the client cert used to authenticate the request is valid and trusted.
Nested Class Summary | |
---|---|
class |
ClientCertAuthRuleFactory.CertificateNameOptions
Options for deriving issuer names from an X.509 certificate. |
Constructor Summary | |
---|---|
ClientCertAuthRuleFactory()
Constructor. |
Method Summary | |
---|---|
SecurityPolicyRule<javax.servlet.ServletRequest> |
createRuleInstance()
Creates an instance of a policy rule. |
boolean |
evaluateSubjectCommonName()
Get the option to evaluate the entity certificate subject common name (CN) as a derived issuer entity ID. |
boolean |
evaluateSubjectDN()
Get the option to evaluate the entity certificate subject DN as a derived issuer entity ID. |
protected ClientCertAuthRuleFactory.CertificateNameOptions |
getCertificateNameOptions()
Get the current certificate name options. |
java.util.LinkedHashSet<java.lang.Integer> |
getSubjectAltNames()
The set of types of subject alternative names to evaluate as derived issuer entity ID's. |
X500DNHandler |
getX500DNHandler()
Get the handler which process X.500 distinguished names. |
java.lang.String |
getX500SubjectDNFormat()
Get the output format specifier for X.500 subject names. |
protected ClientCertAuthRuleFactory.CertificateNameOptions |
newCertificateNameOptions()
Get a new instance to hold options. |
void |
setEvaluateSubjectCommonName(boolean newValue)
Set the option to evaluate the entity certificate subject common name (CN) as a derived issuer entity ID. |
void |
setEvaluateSubjectDN(boolean newValue)
Set the option to evaluate the entity certificate subject DN as a derived issuer entity ID. |
void |
setX500DNHandler(X500DNHandler handler)
Set the handler which process X.500 distinguished names. |
void |
setX500SubjectDNFormat(java.lang.String format)
Set the output format specifier for X.500 subject names. |
Methods inherited from class org.opensaml.ws.security.provider.BaseTrustEngineRuleFactory |
---|
getTrustEngine, setTrustEngine |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Constructor Detail |
---|
public ClientCertAuthRuleFactory()
Method Detail |
---|
protected ClientCertAuthRuleFactory.CertificateNameOptions newCertificateNameOptions()
ClientCertAuthRuleFactory.CertificateNameOptions
if they extend this options class
to hold subclass-specific options.
protected ClientCertAuthRuleFactory.CertificateNameOptions getCertificateNameOptions()
public SecurityPolicyRule<javax.servlet.ServletRequest> createRuleInstance()
createRuleInstance
in interface SecurityPolicyRuleFactory<javax.servlet.ServletRequest>
createRuleInstance
in class BaseTrustEngineRuleFactory<X509Credential,javax.servlet.ServletRequest>
public boolean evaluateSubjectCommonName()
public void setEvaluateSubjectCommonName(boolean newValue)
newValue
- the new option valuepublic boolean evaluateSubjectDN()
public void setEvaluateSubjectDN(boolean newValue)
newValue
- the new option valuepublic java.util.LinkedHashSet<java.lang.Integer> getSubjectAltNames()
X509Util
. Note: A LinkedHashSet is used to provide predictable ordering
on iteration; consequently, the order of evaluation of the name types as derived
issuer names will be the same as insertion order into set.
public X500DNHandler getX500DNHandler()
InternalX500DNHandler
.
public void setX500DNHandler(X500DNHandler handler)
InternalX500DNHandler
.
handler
- the new X500DNHandler instancepublic java.lang.String getX500SubjectDNFormat()
X500DNHandler
which is used.
public void setX500SubjectDNFormat(java.lang.String format)
X500DNHandler
which is used.
format
- the new X500DNHandler instance
|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |