Examples of PKIXSignatureTrustEngine

org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine
An implementation of {@link SignatureTrustEngine} which evaluates the validity and trustworthiness of XML and rawsignatures.
Processing is performed as described in {@link BaseSignatureTrustEngine}. If based on this processing, it is determined that the Signature's KeyInfo is not present or does not contain a valid (and trusted) signing key, then trust engine validation fails. Since the PKIX engine is based on the assumption that trusted signing keys are not known in advance, the signing key must be present in, or derivable from, the information in the Signature's KeyInfo element.

Examples of org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine

     * @param samlContext context to populate
     */
    protected void populateTrustEngine(SAMLMessageContext samlContext) {
        SignatureTrustEngine engine;
        if ("pkix".equalsIgnoreCase(samlContext.getLocalExtendedMetadata().getSecurityProfile())) {
            engine = new PKIXSignatureTrustEngine(pkixResolver, Configuration.getGlobalSecurityConfiguration().getDefaultKeyInfoCredentialResolver(), pkixTrustEvaluator, new BasicX509CredentialNameEvaluator());
        } else {
            engine = new ExplicitKeySignatureTrustEngine(metadataResolver, Configuration.getGlobalSecurityConfiguration().getDefaultKeyInfoCredentialResolver());
        }
        samlContext.setLocalTrustEngine(engine);
    }

View Full Code Here

Examples of org.opensaml.xml.signature.impl.PKIXSignatureTrustEngine

            } else {
                log.debug("Revocation checking not forced");
                pkixOptions.setForceRevocationEnabled(false);
            }


            return new PKIXSignatureTrustEngine(
                    getPKIXResolver(provider, trustedKeys, null),
                    Configuration.getGlobalSecurityConfiguration().getDefaultKeyInfoCredentialResolver(),
                    new org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator(pkixOptions),
                    new BasicX509CredentialNameEvaluator());

View Full Code Here

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.