org.opensaml.xmlsec.signature.support.impl

Class ChainingSignatureTrustEngine

java.lang.Object

org.opensaml.xmlsec.signature.support.impl.ChainingSignatureTrustEngine

All Implemented Interfaces:

org.opensaml.security.trust.TrustEngine<Signature>, SignatureTrustEngine

public class ChainingSignatureTrustEngine
extends Object
implements SignatureTrustEngine

Evaluate a signature in sequence using a chain of subordinate trust engines. If the signature may be established as trusted by any of the subordinate engines, the token is considered trusted. Otherwise it is considered untrusted.

Field Summary

Fields

Modifier and Type	Field and Description
private List<SignatureTrustEngine>	engines The chain of subordinate trust engines.
private Logger	log Class logger.

Constructor Summary

Constructors

Constructor and Description
ChainingSignatureTrustEngine(List<SignatureTrustEngine> chain) Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
List<SignatureTrustEngine>	getChain() Get the list of configured trust engines which constitute the trust evaluation chain.
KeyInfoCredentialResolver	getKeyInfoResolver()
boolean	validate(byte[] signature, byte[] content, String algorithmURI, net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria, org.opensaml.security.credential.Credential candidateCredential)
boolean	validate(Signature token, net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

@Nonnull
private final Logger log

Class logger.

engines

@Nonnull
@NonnullElements
private List<SignatureTrustEngine> engines

The chain of subordinate trust engines.

Constructor Detail

ChainingSignatureTrustEngine

public ChainingSignatureTrustEngine(@Nonnull@NonnullElements
                            List<SignatureTrustEngine> chain)

Constructor.

Parameters:

chain - the list of trust engines in the chain

Method Detail

getChain

@Nonnull
@NonnullElements
@Unmodifiable
@NotLive
public List<SignatureTrustEngine> getChain()

Get the list of configured trust engines which constitute the trust evaluation chain.

Returns:

the modifiable list of trust engines in the chain

getKeyInfoResolver

@Nullable
public KeyInfoCredentialResolver getKeyInfoResolver()

Specified by:

getKeyInfoResolver in interface SignatureTrustEngine

validate

public boolean validate(@Nonnull
               Signature token,
               @Nullable
               net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
                 throws org.opensaml.security.SecurityException

Specified by:

validate in interface org.opensaml.security.trust.TrustEngine<Signature>

Throws:

org.opensaml.security.SecurityException

validate

public boolean validate(@Nonnull
               byte[] signature,
               @Nonnull
               byte[] content,
               @Nonnull
               String algorithmURI,
               @Nullable
               net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria,
               @Nonnull
               org.opensaml.security.credential.Credential candidateCredential)
                 throws org.opensaml.security.SecurityException

Specified by:

validate in interface SignatureTrustEngine

Throws:

org.opensaml.security.SecurityException