Examples of org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine

org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine
An implementation of {@link SignatureTrustEngine} which evaluates the validity and trustworthiness of XML and rawsignatures.
Processing is performed as described in {@link BaseSignatureTrustEngine}. If based on this processing, it is determined that the Signature's KeyInfo is not present or does not contain a valid (and trusted) signing key, then trust engine validation fails. Since the PKIX engine is based on the assumption that trusted signing keys are not known in advance, the signing key must be present in, or derivable from, the information in the Signature's KeyInfo element.

     * @param samlContext context to populate
     */
    protected void populateTrustEngine(SAMLMessageContext samlContext) {
        SignatureTrustEngine engine;
        if ("pkix".equalsIgnoreCase(samlContext.getLocalExtendedMetadata().getSecurityProfile())) {
            engine = new PKIXSignatureTrustEngine(pkixResolver, Configuration.getGlobalSecurityConfiguration().getDefaultKeyInfoCredentialResolver(), pkixTrustEvaluator, new BasicX509CredentialNameEvaluator());
        } else {
            engine = new ExplicitKeySignatureTrustEngine(metadataResolver, Configuration.getGlobalSecurityConfiguration().getDefaultKeyInfoCredentialResolver());
        }
        samlContext.setLocalTrustEngine(engine);
    }

View Full Code Here

            } else {
                log.debug("Revocation checking not forced");
                pkixOptions.setForceRevocationEnabled(false);
            }


            return new PKIXSignatureTrustEngine(
                    getPKIXResolver(provider, trustedKeys, null),
                    Configuration.getGlobalSecurityConfiguration().getDefaultKeyInfoCredentialResolver(),
                    new org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator(pkixOptions),
                    new BasicX509CredentialNameEvaluator());

View Full Code Here

TOP

Related Classes of org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine

org.opensaml.xml.security.x509.BasicX509CredentialNameEvaluator

org.opensaml.xml.security.x509.CertPathPKIXTrustEvaluator

org.opensaml.xml.security.x509.X509Credential

org.springframework.security.saml.context.SAMLContextProviderImpl

org.springframework.security.saml.metadata.MetadataManager

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.