Package net.shibboleth.idp.profile.spring.relyingparty.security.trustengine.impl

Class AbstractStaticPKIXParser

java.lang.Object
org.springframework.beans.factory.xml.AbstractBeanDefinitionParser
org.springframework.beans.factory.xml.AbstractSingleBeanDefinitionParser
net.shibboleth.ext.spring.util.AbstractCustomBeanDefinitionParser
net.shibboleth.idp.profile.spring.relyingparty.security.trustengine.impl.AbstractTrustEngineParser
net.shibboleth.idp.profile.spring.relyingparty.security.trustengine.impl.AbstractStaticPKIXParser
All Implemented Interfaces:
BeanDefinitionParser
Direct Known Subclasses:
StaticPKIXSignatureParser, StaticPKIXX509CredentialParser
public abstract class AbstractStaticPKIXParser extends AbstractTrustEngineParser
Base Parser for trust engines of type StaticPKIXKeySignature and StaticPKIXX509Credential.

  • Field Details

    • VALIDATION_INFO

      public static final QName VALIDATION_INFO
      Validation Information.

    • TRUSTED_NAMES

      public static final QName TRUSTED_NAMES
      Trusted Names Information.

  • Constructor Details

    • AbstractStaticPKIXParser

      public AbstractStaticPKIXParser()

  • Method Details

    • getPKIXValidationInformationResolver

      protected BeanDefinition getPKIXValidationInformationResolver(@Nonnull Element element, @Nonnull ParserContext parserContext)
      Get the definition for the PKIXValidationInformationResolver. This is constructed from the Trusted names and the Validation Info.
      Parameters:
      element - what to parse
      parserContext - the context to parse inside
      Returns:
      the definition

    • getPKIXTrustEvaluator

      protected BeanDefinition getPKIXTrustEvaluator(@Nonnull Element element, @Nonnull ParserContext parserContext)
      Get the definition for the PKIXTrustEvaluator. This is purely a CertPathPKIXTrustEvaluator constructed with whatever ValidationOptions we provide.
      Parameters:
      element - what to parse
      parserContext - the context to parse inside
      Returns:
      the definition

    • getX509CredentialNameEvaluator

      protected Object getX509CredentialNameEvaluator(@Nonnull Element element, @Nonnull ParserContext parserContext)
      Get the effective X509CredentialNameEvaluator to use. Currently we return a literal value, but in the future a BeanDefinition could be returned if necessary if we support toggling the name evaluator settings, hence the Object return type.
      Parameters:
      element - what to parse
      parserContext - the context to parse inside
      Returns:
      an X509CredentialNameEvaluator instance or a BeanDefinition. May be null.