Examples of org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator

Package org.springframework.security.saml.trust

Examples of org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator

org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator
PKIX trust evaluator based on Java CertPath API. Class first constructs PKIXBuilderParameters using call to getPKIXBuilderParameters. Parameters consult the options property for defaults of isForceRevocationEnabled, forcedRevocation, policyMappingInhibited, anyPolicyInhibited and initialPolicies settings. System then constructs CertPathBuilder with PKIX algorithm and selected securityProvider and builds the certificate path. If path building succeeds system also optionally verifies the resulting certificate chain using CertPathValidator. In earlier Java versions the builder implementation doesn't support e.g. OCSP checking. Running a separate path validation makes it possible to use these features..

     */
    protected SecureProtocolSocketFactory initializeDelegate() {


        CertPathPKIXValidationOptions pkixOptions = new CertPathPKIXValidationOptions();
        PKIXValidationInformationResolver pkixResolver = getPKIXResolver();
        CertPathPKIXTrustEvaluator pkixTrustEvaluator = new CertPathPKIXTrustEvaluator(pkixOptions);
        TrustEngine<X509Credential> trustEngine = new PKIXX509CredentialTrustEngine(pkixResolver, pkixTrustEvaluator, new BasicX509CredentialNameEvaluator());


        X509KeyManager keyManager = new X509KeyManager((X509Credential) this.keyManager.getDefaultCredential());
        X509TrustManager trustManager = new X509TrustManager(new CriteriaSet(), trustEngine);
        HostnameVerifier hostnameVerifier = SAMLUtil.getHostnameVerifier(sslHostnameVerification);

View Full Code Here

        if (pkixResolver == null) {
            pkixResolver = new PKIXInformationResolver(metadataResolver, metadata, keyManager);
        }


        if (pkixTrustEvaluator == null) {
            pkixTrustEvaluator = new CertPathPKIXTrustEvaluator();
        }


    }

View Full Code Here

TOP

Related Classes of org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator

org.springframework.security.saml.context.SAMLContextProviderImpl

org.springframework.security.saml.trust.httpclient.TLSProtocolSocketFactory

org.opensaml.xml.security.SecurityException

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.