Package net.shibboleth.metadata.validate.x509

Class X509ROCAValidator

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

net.shibboleth.metadata.validate.BaseValidator

net.shibboleth.metadata.validate.x509.AbstractX509Validator

net.shibboleth.metadata.validate.x509.X509ROCAValidator

All Implemented Interfaces:

Validator<X509Certificate>, net.shibboleth.shared.component.Component, net.shibboleth.shared.component.DestructableComponent, net.shibboleth.shared.component.IdentifiableComponent, net.shibboleth.shared.component.IdentifiedComponent, net.shibboleth.shared.component.InitializableComponent

@ThreadSafe
public class X509ROCAValidator
extends AbstractX509Validator

Validator class to check that X.509 certificate public keys are not affected by the Return of Coppersmith Attack (ROCA, CVE-2017-15361).

Since:

0.10.0

See Also:

• ROCA paper

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
private static class	X509ROCAValidator.BrokenKey	Checks to see whether a given modulus represents a key affected by the attack.

Nested classes/interfaces inherited from interface net.shibboleth.metadata.validate.Validator

Validator.Action

Constructor Summary

Constructors

Constructor	Description
X509ROCAValidator()

Method Summary

Modifier and Type	Method	Description
void	doValidate(X509Certificate cert, Item<?> item, String callerId)	Apply the validator to the object in the given Item context.

Methods inherited from class net.shibboleth.metadata.validate.x509.AbstractX509Validator

validate

Methods inherited from class net.shibboleth.metadata.validate.BaseValidator

addError, addErrorMessage, addErrorMessage, addErrorMessage, addStatus, addWarning, getMessage, makeComponentId, setMessage

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

setId

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

doInitialize, ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.DestructableComponent

destroy, isDestroyed

Methods inherited from interface net.shibboleth.shared.component.IdentifiableComponent

setId

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Methods inherited from interface net.shibboleth.metadata.validate.Validator

validate

Constructor Details

X509ROCAValidator

public X509ROCAValidator()

Method Details

doValidate

public void doValidate(@Nonnull
 X509Certificate cert,
 @Nonnull
 Item<?> item,
 @Nonnull
 String callerId)

Description copied from class: AbstractX509Validator

Apply the validator to the object in the given Item context. The validator influences future processing by adding item metadata to the Item.

Specified by:

doValidate in class AbstractX509Validator

Parameters:

cert - the certificate to be validated

item - the Item context for the validation

callerId - a String identifying the caller