Package net.shibboleth.metadata.validate.x509

package net.shibboleth.metadata.validate.x509

Validation classes for X.509 certificate objects.

Since:

0.9.0

Related Packages

Package	Description
net.shibboleth.metadata.validate	Classes for validation of specific object types.
net.shibboleth.metadata.validate.net	Classes for validation of network-related object types.
net.shibboleth.metadata.validate.string	Validation classes for String values.
net.shibboleth.metadata.validate.url	Validation classes for URL values.

Classes

Class	Description
AbstractX509Validator	Abstract class implementing validation on X509Certificate objects.
X509DSADetector	Validator class to check that X.509 certificates do not contain DSA public keys.
X509ROCAValidator	Validator class to check that X.509 certificate public keys are not affected by the Return of Coppersmith Attack (ROCA, CVE-2017-15361).
X509ROCAValidator.BrokenKey	Checks to see whether a given modulus represents a key affected by the attack.
X509RSAExponentValidator	Validator class to check RSA public exponent values in X.509 certificates.
X509RSAKeyLengthValidator	Validator class to check RSA key lengths in X.509 certificates.
X509RSAOpenSSLKeylistValidator	Validator class to check RSA moduli in X.509 certificates against a list of OpenSSL-format keys.