Package eu.emi.security.authn.x509

Examples of eu.emi.security.authn.x509.X509CertChainValidatorExt

80
81
82
83
84
85
86
87
88
89
90
        VOMSTrustStore ts = VOMSTrustStores.newTrustStore(
            Arrays.asList(DefaultVOMSTrustStore.DEFAULT_VOMS_DIR),
            TimeUnit.MINUTES.toMillis(30),
            l);
   
        X509CertChainValidatorExt certChainValidator = PAPConfiguration.instance().getCertchainValidator();
        validator = VOMSValidators.newValidator(ts,
            certChainValidator,
            l);
      }
     
View Full Code Here
227
228
229
230
231
232
233
234
235
236
237
    SSLOptions options = getSSLOptions();
   
    CANLListener l = new CANLListener();
   
    X509CertChainValidatorExt validator = CertificateValidatorBuilder
        .buildCertificateValidator(options.getTrustStoreDirectory(),
            l,
            l,
            options.getTrustStoreRefreshIntervalInMsec());
   
View Full Code Here
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
        X500Name issuerX500Name = CertificateHelpers.toX500Name(caCred.getCertificate().getSubjectX500Principal());

        X500Name subjectX500Name = CertificateHelpers.toX500Name(subjectDN);

        X509v3CertificateBuilder certBuilder = new X509v3CertificateBuilder(issuerX500Name, new BigInteger(20, rand),
                new Date(startTime), new Date(endTime), subjectX500Name, publicKeyInfo);

        AlgorithmIdentifier sigAlgId = X509v3CertificateBuilder.extractAlgorithmId(caCred.getCertificate());

        X509Certificate certificate = certBuilder.build(caCred.getKey(), sigAlgId, signatureAlgorithm, null, null);

        certificate.checkValidity(new Date());
        certificate.verify(caCred.getCertificate().getPublicKey());
        KeyAndCertCredential result = new KeyAndCertCredential(pair.getPrivate(), new X509Certificate[] { certificate,
                caCred.getCertificate() });
View Full Code Here
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
        X500Name issuerX500Name = CertificateHelpers.toX500Name(caCred.getCertificate().getSubjectX500Principal());

        X500Name subjectX500Name = CertificateHelpers.toX500Name(subjectDN);

        X509v3CertificateBuilder certBuilder = new X509v3CertificateBuilder(issuerX500Name, new BigInteger(20, rand),
                new Date(startTime), new Date(endTime), subjectX500Name, publicKeyInfo);

        AlgorithmIdentifier sigAlgId = X509v3CertificateBuilder.extractAlgorithmId(caCred.getCertificate());

        X509Certificate certificate = certBuilder.build(caCred.getKey(), sigAlgId, signatureAlgorithm, null, null);

        certificate.checkValidity(new Date());
        certificate.verify(caCred.getCertificate().getPublicKey());
        KeyAndCertCredential result = new KeyAndCertCredential(pair.getPrivate(), new X509Certificate[] { certificate,
                caCred.getCertificate() });
View Full Code Here
204
205
206
207
208
209
210
211
212
213
214
      trustedCert.add(gssContext.getTrustedCertLoc()+"/*.0");
      trustedCert.add(gssContext.getTrustedCertLoc()+"/*.pem");
     
      char[] c = null;
     
      DirectoryCertChainValidator dcValidator = new DirectoryCertChainValidator(trustedCert, Encoding.PEM, -1, 60000, null);
      bis = new ByteArrayInputStream(bos.toByteArray());
      bufis = new BufferedInputStream(bis);
      PEMCredential pem = new PEMCredential(bufis, c);
     
      secProperties = new DefaultClientConfiguration(dcValidator, pem);
View Full Code Here
241
242
243
244
245
246
247
248
249
250
251
      trustedCert.add(gssContext.getMyProxyManager().getTrustedCertsLoc() + "/*.0");
      trustedCert.add(gssContext.getMyProxyManager().getTrustedCertsLoc() + "/*.pem");
     
      char[] c = null;
     
      DirectoryCertChainValidator dcValidator = new DirectoryCertChainValidator(trustedCert, Encoding.PEM, -1, 60000, null);
      bis = new ByteArrayInputStream(bos.toByteArray());
      bufis = new BufferedInputStream(bis);
      PEMCredential pem = new PEMCredential(bufis, c);
     
      secProperties = new DefaultClientConfiguration(dcValidator, pem);
View Full Code Here
247
248
249
250
251
252
253
254
255
256
257
      trustedCert.add(GSISecurityContext.getTrustedCertificatePath() + "/*.0");
      trustedCert.add(GSISecurityContext.getTrustedCertificatePath() + "/*.pem");
     
      char[] c = null;
     
      DirectoryCertChainValidator dcValidator = new DirectoryCertChainValidator(trustedCert, Encoding.PEM, -1, 60000, null);
      bis = new ByteArrayInputStream(bos.toByteArray());
      bufis = new BufferedInputStream(bis);
      PEMCredential pem = new PEMCredential(bufis, c);
     
      secProperties = new DefaultClientConfiguration(dcValidator, pem);
View Full Code Here
395
396
397
398
399
400
401
402
403
404
405
            String certLocation = gssContext.getTrustedCertificatePath();
            List<String> trustedCert = new ArrayList<String>();
            trustedCert.add(certLocation + "/*.0");
            trustedCert.add(certLocation + "/*.pem");

            DirectoryCertChainValidator dcValidator = new DirectoryCertChainValidator(trustedCert, Encoding.PEM, -1,
                    60000, null);

            String userID = getUserName(jobExecutionContext);

            if ( userID == null || "".equals(userID) || userID.equalsIgnoreCase("admin") ) {
View Full Code Here
385
386
387
388
389
390
391
392
393
394
395
            String certLocation = gssContext.getTrustedCertificatePath();
            List<String> trustedCert = new ArrayList<String>();
            trustedCert.add(certLocation + "/*.0");
            trustedCert.add(certLocation + "/*.pem");

            DirectoryCertChainValidator dcValidator = new DirectoryCertChainValidator(trustedCert, Encoding.PEM, -1,
                    60000, null);

            String userID = getUserName(jobExecutionContext);

            if ( userID == null || "".equals(userID) || userID.equalsIgnoreCase("admin") ) {
View Full Code Here
407
408
409
410
411
412
413
414
415
416
417
            }

            String userDN = userID.replaceAll("^\"|\"$", "");

            // TODO: should be changed to default airavata server locations
            KeyAndCertCredential cred = generateShortLivedCertificate(userDN, certLocation
                    + "/cacert.pem", certLocation
                    + "/cakey.pem", "ultrascan3");
            secProperties = new DefaultClientConfiguration(dcValidator, cred);

            // secProperties.doSSLAuthn();
View Full Code Here
TOP

Related Classes of eu.emi.security.authn.x509.X509CertChainValidatorExt

  • org.apache.airavata.gfac.bes.provider.impl.BESProvider
  • org.apache.airavata.gfac.provider.impl.BESProvider
  • org.glite.authz.pap.authz.CurrentAdmin
  • org.glite.authz.pap.client.impl.axis.CANLAxis1SocketFactory
  • org.glite.authz.pap.server.standalone.PAPServer
  • org.glite.authz.pap.ui.cli.ServiceCLI
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.