org.opensaml.xml.security.trust
Class ExplicitX509CertificateTrustEvaluator

java.lang.Object
  org.opensaml.xml.security.trust.ExplicitX509CertificateTrustEvaluator

public class ExplicitX509CertificateTrustEvaluator
extends java.lang.Object

Auxillary trust evaluator for evaluating an untrusted X509 certificate or credential against a trusted certificate or credential. Trust is established if the untrusted certificate supplied (or the certificate obtained from the untrusted credential's X509Credential.getEntityCertificate()) matches one of the trusted certificates supplied.

Constructor Summary

ExplicitX509CertificateTrustEvaluator()

Method Summary

boolean	validate(java.security.cert.X509Certificate untrustedCertificate, java.lang.Iterable<java.security.cert.X509Certificate> trustedCertificates) Evaluate trust.
boolean	validate(java.security.cert.X509Certificate untrustedCertificate, java.security.cert.X509Certificate trustedCertificate) Evaluate trust.
boolean	validate(X509Credential untrustedCredential, java.lang.Iterable<Credential> trustedCredentials) Evaluate trust.
boolean	validate(X509Credential untrustedCredential, X509Credential trustedCredential) Evaluate trust.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ExplicitX509CertificateTrustEvaluator

public ExplicitX509CertificateTrustEvaluator()

Method Detail

validate

public boolean validate(java.security.cert.X509Certificate untrustedCertificate,
                        java.security.cert.X509Certificate trustedCertificate)

Evaluate trust.

Parameters:

untrustedCertificate - the untrusted certificate to evaluate

trustedCertificate - basis for trust

Returns:

true if trust can be established, false otherwise

validate

public boolean validate(java.security.cert.X509Certificate untrustedCertificate,
                        java.lang.Iterable<java.security.cert.X509Certificate> trustedCertificates)

Evaluate trust.

Parameters:

untrustedCertificate - the untrusted certificate to evaluate

trustedCertificates - basis for trust

Returns:

true if trust can be established, false otherwise

validate

public boolean validate(X509Credential untrustedCredential,
                        X509Credential trustedCredential)

Evaluate trust.

Parameters:

untrustedCredential - the untrusted X509Credential to evaluate

trustedCredential - basis for trust

Returns:

true if trust can be established, false otherwise

validate

public boolean validate(X509Credential untrustedCredential,
                        java.lang.Iterable<Credential> trustedCredentials)

Evaluate trust.

Parameters:

untrustedCredential - the untrusted X509Credential to evaluate

trustedCredentials - basis for trust

Returns:

true if trust can be established, false otherwise