Examples of org.springframework.security.saml.trust.X509TrustManager

Package org.springframework.security.saml.trust

Examples of org.springframework.security.saml.trust.X509TrustManager

org.springframework.security.saml.trust.X509TrustManager
Trust engine for verification of X509 certificates. Uses the supplied trust engine for verification. Trusted credentials are obtained by evaluating the given CredentialSet against the trustEngine. Based on the configuration of the engine either simple certificate equality check is performed or whole PKIX chain can be evaluated.

                CriteriaSet criteriaSet = new CriteriaSet();
                criteriaSet.add(new EntityIDCriteria(context.getPeerEntityId()));
                criteriaSet.add(new MetadataCriteria(IDPSSODescriptor.DEFAULT_ELEMENT_NAME, SAMLConstants.SAML20P_NS));
                criteriaSet.add(new UsageCriteria(UsageType.UNSPECIFIED));


                X509TrustManager trustManager = new X509TrustManager(criteriaSet, context.getLocalSSLTrustEngine());
                X509KeyManager manager = new X509KeyManager(context.getLocalSSLCredential());
                HostnameVerifier hostnameVerifier = context.getLocalSSLHostnameVerifier();


                ProtocolSocketFactory socketFactory = getSSLSocketFactory(context, manager, trustManager, hostnameVerifier);
                Protocol protocol = new Protocol("https", socketFactory, 443);

View Full Code Here

        PKIXValidationInformationResolver pkixResolver = getPKIXResolver();
        CertPathPKIXTrustEvaluator pkixTrustEvaluator = new CertPathPKIXTrustEvaluator(pkixOptions);
        TrustEngine<X509Credential> trustEngine = new PKIXX509CredentialTrustEngine(pkixResolver, pkixTrustEvaluator, new BasicX509CredentialNameEvaluator());


        X509KeyManager keyManager = new X509KeyManager((X509Credential) this.keyManager.getDefaultCredential());
        X509TrustManager trustManager = new X509TrustManager(new CriteriaSet(), trustEngine);
        HostnameVerifier hostnameVerifier = SAMLUtil.getHostnameVerifier(sslHostnameVerification);


        if (isHostnameVerificationSupported()) {
            return new org.opensaml.ws.soap.client.http.TLSProtocolSocketFactory(keyManager, trustManager, hostnameVerifier);
        } else {

View Full Code Here

TOP

Related Classes of org.springframework.security.saml.trust.X509TrustManager

org.opensaml.xml.security.criteria.EntityIDCriteria

org.opensaml.xml.security.x509.BasicX509Credential

org.springframework.security.saml.trust.httpclient.TLSProtocolSocketFactory

org.springframework.security.saml.websso.ArtifactResolutionProfileImpl

java.security.cert.CertificateException

java.security.Principal

java.security.cert.X509Certificate

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.