org.opensaml.xml.security.trust
Class ExplicitX509CertificateTrustEvaluator

java.lang.Object
  extended by org.opensaml.xml.security.trust.ExplicitX509CertificateTrustEvaluator

public class ExplicitX509CertificateTrustEvaluator
extends Object

Auxillary trust evaluator for evaluating an untrusted X509 certificate or credential against a trusted certificate or credential. Trust is established if the untrusted certificate supplied (or the certificate obtained from the untrusted credential's X509Credential.getEntityCertificate()) matches one of the trusted certificates supplied.


Constructor Summary
ExplicitX509CertificateTrustEvaluator()
           
 
Method Summary
 boolean validate(X509Certificate untrustedCertificate, Iterable<X509Certificate> trustedCertificates)
          Evaluate trust.
 boolean validate(X509Certificate untrustedCertificate, X509Certificate trustedCertificate)
          Evaluate trust.
 boolean validate(X509Credential untrustedCredential, Iterable<Credential> trustedCredentials)
          Evaluate trust.
 boolean validate(X509Credential untrustedCredential, X509Credential trustedCredential)
          Evaluate trust.
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

ExplicitX509CertificateTrustEvaluator

public ExplicitX509CertificateTrustEvaluator()
Method Detail

validate

public boolean validate(X509Certificate untrustedCertificate,
                        X509Certificate trustedCertificate)
Evaluate trust.

Parameters:
untrustedCertificate - the untrusted certificate to evaluate
trustedCertificate - basis for trust
Returns:
true if trust can be established, false otherwise

validate

public boolean validate(X509Certificate untrustedCertificate,
                        Iterable<X509Certificate> trustedCertificates)
Evaluate trust.

Parameters:
untrustedCertificate - the untrusted certificate to evaluate
trustedCertificates - basis for trust
Returns:
true if trust can be established, false otherwise

validate

public boolean validate(X509Credential untrustedCredential,
                        X509Credential trustedCredential)
Evaluate trust.

Parameters:
untrustedCredential - the untrusted X509Credential to evaluate
trustedCredential - basis for trust
Returns:
true if trust can be established, false otherwise

validate

public boolean validate(X509Credential untrustedCredential,
                        Iterable<Credential> trustedCredentials)
Evaluate trust.

Parameters:
untrustedCredential - the untrusted X509Credential to evaluate
trustedCredentials - basis for trust
Returns:
true if trust can be established, false otherwise


Copyright © 2006-2011 Internet2. All Rights Reserved.