Examples of CertPathPKIXTrustEvaluator

org.opensaml.xml.security.x509.CertPathPKIXTrustEvaluator
An implementation of {@link PKIXTrustEvaluator} that is based on the Java CertPath API.
org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator
PKIX trust evaluator based on Java CertPath API. Class first constructs PKIXBuilderParameters using call to getPKIXBuilderParameters. Parameters consult the options property for defaults of isForceRevocationEnabled, forcedRevocation, policyMappingInhibited, anyPolicyInhibited and initialPolicies settings. System then constructs CertPathBuilder with PKIX algorithm and selected securityProvider and builds the certificate path. If path building succeeds system also optionally verifies the resulting certificate chain using CertPathValidator. In earlier Java versions the builder implementation doesn't support e.g. OCSP checking. Running a separate path validation makes it possible to use these features..

Examples of org.opensaml.xml.security.x509.CertPathPKIXTrustEvaluator

        if (resolver == null) {
            throw new IllegalArgumentException("PKIX trust information resolver may not be null");
        }
        pkixResolver = resolver;


        pkixTrustEvaluator = new CertPathPKIXTrustEvaluator();
        credNameEvaluator = new BasicX509CredentialNameEvaluator();
    }

View Full Code Here

Examples of org.opensaml.xml.security.x509.CertPathPKIXTrustEvaluator

        if (resolver == null) {
            throw new IllegalArgumentException("PKIX trust information resolver may not be null");
        }
        pkixResolver = resolver;


        pkixTrustEvaluator = new CertPathPKIXTrustEvaluator();
        credNameEvaluator = new BasicX509CredentialNameEvaluator();
    }

View Full Code Here

Examples of org.opensaml.xml.security.x509.CertPathPKIXTrustEvaluator

        if (resolver == null) {
            throw new IllegalArgumentException("PKIX trust information resolver may not be null");
        }
        pkixResolver = resolver;


        pkixTrustEvaluator = new CertPathPKIXTrustEvaluator();
        credNameEvaluator = new BasicX509CredentialNameEvaluator();
    }

View Full Code Here

Examples of org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator

     */
    protected SecureProtocolSocketFactory initializeDelegate() {


        CertPathPKIXValidationOptions pkixOptions = new CertPathPKIXValidationOptions();
        PKIXValidationInformationResolver pkixResolver = getPKIXResolver();
        CertPathPKIXTrustEvaluator pkixTrustEvaluator = new CertPathPKIXTrustEvaluator(pkixOptions);
        TrustEngine<X509Credential> trustEngine = new PKIXX509CredentialTrustEngine(pkixResolver, pkixTrustEvaluator, new BasicX509CredentialNameEvaluator());


        X509KeyManager keyManager = new X509KeyManager((X509Credential) this.keyManager.getDefaultCredential());
        X509TrustManager trustManager = new X509TrustManager(new CriteriaSet(), trustEngine);
        HostnameVerifier hostnameVerifier = SAMLUtil.getHostnameVerifier(sslHostnameVerification);

View Full Code Here

Examples of org.springframework.security.saml.trust.CertPathPKIXTrustEvaluator

        if (pkixResolver == null) {
            pkixResolver = new PKIXInformationResolver(metadataResolver, metadata, keyManager);
        }


        if (pkixTrustEvaluator == null) {
            pkixTrustEvaluator = new CertPathPKIXTrustEvaluator();
        }


    }

View Full Code Here

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.