| Interface | Description |
|---|---|
| PKIXTrustEngine<TokenType> |
Trust engine that validates tokens using PKIX validation.
|
| PKIXTrustEvaluator |
An interface for classes which evaluate an
X509Credential against a set of trusted
PKIXValidationInformation, using PKIX validation rules. |
| PKIXValidationInformation |
Source of PKIX validation information such as trust anchors and CRLs.
|
| PKIXValidationInformationResolver |
A resolver which uses
Criteria to resolve PKIXValidationInformation, which will typically be used
PKIX-based trust engines. |
| X500DNHandler |
Interface for implementations which handle parsing and serialization of X.500 names
represented by
X500Principal. |
| X509Credential |
An entity credential based on key material and other information (e.g.
|
| X509CredentialNameEvaluator |
Interface for classes which evaluate an
X509Credential against a
supplied set of trusted names. |
| Class | Description |
|---|---|
| BasicPKIXValidationInformation |
Basic implementation of
PKIXValidationInformation. |
| BasicX509Credential |
A basic implementation of
X509Credential. |
| BasicX509CredentialNameEvaluator |
A basic implementaion of
X509CredentialNameEvaluator which evaluates various identifiers
extracted from an X509Credential's entity certificate against a set of trusted names. |
| CertPathPKIXTrustEvaluator |
An implementation of
PKIXTrustEvaluator that is based on the Java CertPath API. |
| CertPathPKIXValidationOptions |
Specialization of
PKIXValidationOptions which specifies options specific to a PKIXTrustEvaluator
based on the Java CertPath API. |
| InternalX500DNHandler |
Basic implementation of
X500DNHandler which uses the internal built-in mechanisms
provided by X500Principal directly. |
| KeyStoreX509CredentialAdapter |
A wrapper that changes a
KeyStore in to a X509Credential. |
| PKIXValidationOptions |
Options which may be supplied to influence the processing behavior of a
PKIXTrustEvaluator. |
| PKIXX509CredentialTrustEngine |
Trust engine implementation which evaluates an X509Credential token based on PKIX validation processing using
validation information from a trusted source.
|
| StaticPKIXValidationInformationResolver |
An implementation of
PKIXValidationInformationResolver which always returns a static, fixed set of
information. |
| X509IssuerSerialCriteria |
An implementation of
Criteria which specifies criteria based on
X.509 certificate issuer name and serial number. |
| X509KeyInfoGeneratorFactory |
A factory implementation which produces instances of
KeyInfoGenerator capable of
handling the information contained within an X509Credential. |
| X509KeyManagerX509CredentialAdapter |
A class that wraps a
X509KeyManager and exposes it as an X509Credential. |
| X509SubjectKeyIdentifierCriteria |
An implementation of
Criteria which specifies criteria based on
X.509 certificate subject key identifier. |
| X509SubjectNameCriteria |
An implementation of
Criteria which specifies criteria based on
X.509 certificate subject name. |
| X509Util |
Utility class for working with X509 objects.
|
| Enum | Description |
|---|---|
| X509Util.ENCODING_FORMAT |
Encoding used to store a key or certificate in a file.
|
Copyright © 2006-2013 Internet2. All Rights Reserved.