if (ais == null || ais.isEmpty()) {
return true;
}
for (AssertionInfo ai : ais) {
TransportBinding binding = (TransportBinding)ai.getAssertion();
ai.setAsserted(true);
// Check that TLS is in use if we are not the requestor
boolean initiator = MessageUtils.isRequestor(message);
TLSSessionInfo tlsInfo = message.get(TLSSessionInfo.class);
if (!initiator && tlsInfo == null) {
ai.setNotAsserted("TLS is not enabled");
return false;
}
// HttpsToken is validated by the HttpsTokenInterceptorProvider
if (binding.getTransportToken() != null) {
assertPolicy(aim, binding.getTransportToken());
assertPolicy(aim, binding.getTransportToken().getToken());
}
// Check the AlgorithmSuite
AlgorithmSuitePolicyValidator algorithmValidator = new AlgorithmSuitePolicyValidator(results);
if (!algorithmValidator.validatePolicy(ai, binding.getAlgorithmSuite())) {
return false;
}
// Check the IncludeTimestamp
if (!validateTimestamp(binding.isIncludeTimestamp(), true, results, signedResults, message)) {
String error = "Received Timestamp does not match the requirements";
notAssertPolicy(aim, SP12Constants.INCLUDE_TIMESTAMP, error);
ai.setNotAsserted(error);
return false;
}
assertPolicy(aim, SP12Constants.INCLUDE_TIMESTAMP);
// Check the Layout
Layout layout = binding.getLayout();
boolean timestampFirst = layout.getValue() == SPConstants.Layout.LaxTimestampFirst;
boolean timestampLast = layout.getValue() == SPConstants.Layout.LaxTimestampLast;
if (!validateLayout(timestampFirst, timestampLast, results)) {
String error = "Layout does not match the requirements";
notAssertPolicy(aim, SP12Constants.LAYOUT, error);