Index

A B C D E F G H I K L M N P R S T U V W
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

AccessControl - Interface in net.shibboleth.shared.security

A policy that evaluates a ServletRequest and determines whether access to a named resource should be granted.

AccessControlService - Interface in net.shibboleth.shared.security

A component that supplies AccessControl instances identified by a policy name.

allowedRanges - Variable in class net.shibboleth.shared.security.impl.IPRangeAccessControl

List of CIDR blocks allowed to access this servlet.

args - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Container for options that can be parsed from a command line.

args - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Container for options that can be parsed from a command line.

B

BasicAccessControlService - Class in net.shibboleth.shared.security.impl

Simple implementation that uses an in-memory map of policies.

BasicAccessControlService() - Constructor for class net.shibboleth.shared.security.impl.BasicAccessControlService

Constructor.

BasicKeystoreKeyStrategy - Class in net.shibboleth.shared.security.impl

Implements a strategy for access to versioned symmetric keys using a keystore, and a standalone file for tracking the latest key version, to compensate for the lack of extensible attribute support in the pre-Java 8 KeyStore API.

BasicKeystoreKeyStrategy() - Constructor for class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Constructor.

BasicKeystoreKeyStrategyTool - Class in net.shibboleth.shared.security.impl

Implements a tool for managing secret keys in accordance with the BasicKeystoreKeyStrategy.

BasicKeystoreKeyStrategyTool() - Constructor for class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Constructor.

BasicKeystoreKeyStrategyTool.CommandLineArgs - Class in net.shibboleth.shared.security.impl

Manages command line parsing for application and the bean properties used by the tool.

BasicKeystoreKeyStrategyTool.FileConverter - Class in net.shibboleth.shared.security.impl

Command line option conversion from String to File.

buildSubjectAltNames() - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Builds the subject alt names for the certificate.

C

cacheSize - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Size of key cache to maintain.

CERT_ALG - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Certificate algorithm.

CERT_FILE - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Path to certificate file to create.

CERT_LIFETIME - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Certificate lifetime.

certAlg - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Certificate algorithm.

certificateFile - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Certificate file.

certificateLifetime - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Certificate lifetime.

changeKey() - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

The main routine.

checkAccess(ServletRequest, String, String) - Method in interface net.shibboleth.shared.security.AccessControl

Determine whether the request to the resource should be granted.

checkAccess(ServletRequest, String, String) - Method in class net.shibboleth.shared.security.impl.IPRangeAccessControl

Determine whether the request to the resource should be granted.

CHUNK_SIZE - Static variable in class net.shibboleth.shared.security.DataSealer

Size of UTF-8 data chunks to read/write.

CommandLineArgs() - Constructor for class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

CommandLineArgs() - Constructor for class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

convert(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.FileConverter

convert(String) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.FileConverter

CURRENT_VERSION_PROP - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Name of property representing current key version.

currentAlias - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Current key alias loaded.

currentAlias - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Current key alias loaded.

customObject - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Custom object for script.

D

DataExpiredException - Exception in net.shibboleth.shared.security

Indicates the sealed data has expired.

DataExpiredException() - Constructor for exception net.shibboleth.shared.security.DataExpiredException

Constructor.

DataExpiredException(Exception) - Constructor for exception net.shibboleth.shared.security.DataExpiredException

Constructor.

DataExpiredException(String) - Constructor for exception net.shibboleth.shared.security.DataExpiredException

Constructor.

DataExpiredException(String, Exception) - Constructor for exception net.shibboleth.shared.security.DataExpiredException

Constructor.

DataSealer - Class in net.shibboleth.shared.security

Applies a MAC to time-limited information and encrypts with a symmetric key.

DataSealer() - Constructor for class net.shibboleth.shared.security.DataSealer

Constructor.

DataSealerException - Exception in net.shibboleth.shared.security

Exceptions during use of the DataSealer.

DataSealerException() - Constructor for exception net.shibboleth.shared.security.DataSealerException

Constructor.

DataSealerException(Exception) - Constructor for exception net.shibboleth.shared.security.DataSealerException

Constructor.

DataSealerException(String) - Constructor for exception net.shibboleth.shared.security.DataSealerException

Constructor.

DataSealerException(String, Exception) - Constructor for exception net.shibboleth.shared.security.DataSealerException

Constructor.

DataSealerKeyStrategy - Interface in net.shibboleth.shared.security

Interface for acquiring secret keys on behalf of the DataSealer class, this principally abstracts methods of handling key versioning moreso than actual access to keys, by optimizing access to keys in accordance with the manner in which key rollover is handled.

DataSealerKeyStrategy.NamedKey - Record Class in net.shibboleth.shared.security

Encapsulates a named key managed by a strategy.

decoder - Variable in class net.shibboleth.shared.security.DataSealer

Decodes encrypted string to bytes.

defaultKey - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Current default key loaded.

defaultKey - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Current default key loaded.

DNS_ALTNAMES - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

DNS subjectAltNames.

dnsSubjectAltNames - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

DNS subjectAltNames.

doDestroy() - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

doDestroy() - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

doInitialize() - Method in class net.shibboleth.shared.security.DataSealer

doInitialize() - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

doInitialize() - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

E

encoder - Variable in class net.shibboleth.shared.security.DataSealer

Encodes encrypted bytes to string.

encoder - Variable in class net.shibboleth.shared.security.impl.RandomIdentifierGenerationStrategy

Encoder used to convert the random bytes in to a string.

equals(Object) - Method in record class net.shibboleth.shared.security.DataSealerKeyStrategy.NamedKey

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

Indicates whether some other object is "equal to" this one.

extractAndCheckDecryptedData(byte[]) - Method in class net.shibboleth.shared.security.DataSealer

Extract the GZIP'd data and test for expiration before returning it.

F

FileConverter(String) - Constructor for class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.FileConverter

Constructor.

FileConverter(String) - Constructor for class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.FileConverter

Constructor.

G

generate() - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

The main routine.

generateCertificate(KeyPair) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Generates the self-signed certificate.

generateIdentifier() - Method in interface net.shibboleth.shared.security.IdentifierGenerationStrategy

Generates an identifier guaranteed to be XML ID safe.

generateIdentifier() - Method in class net.shibboleth.shared.security.impl.RandomIdentifierGenerationStrategy

Generates an identifier guaranteed to be XML ID safe.

generateIdentifier() - Method in class net.shibboleth.shared.security.impl.Type4UUIDIdentifierGenerationStrategy

Generates an identifier guaranteed to be XML ID safe.

generateIdentifier(boolean) - Method in interface net.shibboleth.shared.security.IdentifierGenerationStrategy

Generates an identifier.

generateIdentifier(boolean) - Method in class net.shibboleth.shared.security.impl.RandomIdentifierGenerationStrategy

Generates an identifier.

generateIdentifier(boolean) - Method in class net.shibboleth.shared.security.impl.Type4UUIDIdentifierGenerationStrategy

Generates an identifier.

generateKeyPair() - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Generates the key pair for the certificate.

getDefaultKey() - Method in interface net.shibboleth.shared.security.DataSealerKeyStrategy

Deprecated, for removal: This API element is subject to removal in a future version.

getDefaultKey() - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Get the default/current key to use for new operations, returned along with an identifier for it.

getDefaultKey() - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Get the default/current key to use for new operations, returned along with an identifier for it.

getDefaultKeyRecord() - Method in interface net.shibboleth.shared.security.DataSealerKeyStrategy

Get an immutable record of the default named key.

getDefaultKeyRecord() - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Get an immutable record of the default named key.

getDefaultKeyRecord() - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Get an immutable record of the default named key.

getInstance(String) - Method in interface net.shibboleth.shared.security.AccessControlService

Get an AccessControl instance matching a given name.

getInstance(String) - Method in class net.shibboleth.shared.security.impl.BasicAccessControlService

Get an AccessControl instance matching a given name.

getInstance(IdentifierGenerationStrategy.ProviderType) - Static method in interface net.shibboleth.shared.security.IdentifierGenerationStrategy

Get an instance of a particular provider of identifiers with no parameters.

getInstance(IdentifierGenerationStrategy.ProviderType, IdentifierGenerationStrategy.ParameterSpec) - Static method in interface net.shibboleth.shared.security.IdentifierGenerationStrategy

Get an instance of a particular provider of identifiers with parameters.

getKey(String) - Method in interface net.shibboleth.shared.security.DataSealerKeyStrategy

Get a specifically named key.

getKey(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Get a specifically named key.

getKey(String) - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Get a specifically named key.

getLogPrefix() - Method in class net.shibboleth.shared.security.impl.IPRangeAccessControl

Get logging prefix.

H

hashCode() - Method in record class net.shibboleth.shared.security.DataSealerKeyStrategy.NamedKey

Returns a hash code value for this object.

hashCode() - Method in record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

Returns a hash code value for this object.

help - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Display command usage.

help - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Display command usage.

HELP - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Display command usage.

HELP - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Display command usage.

hostname - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Hostname.

HOSTNAME - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Hostname for cert subject.

I

identifierEncoder - Variable in record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

The field for the identifierEncoder record component.

identifierEncoder() - Method in record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

Returns the value of the identifierEncoder record component.

IdentifierGenerationStrategy - Interface in net.shibboleth.shared.security

Interface for identifier generators.

IdentifierGenerationStrategy.ParameterSpec - Interface in net.shibboleth.shared.security

Marker interface for parameters specific to particular provider types.

IdentifierGenerationStrategy.ProviderType - Enum Class in net.shibboleth.shared.security

Enum of supported provider types.

identifierSize - Variable in record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

The field for the identifierSize record component.

identifierSize() - Method in record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

Returns the value of the identifierSize record component.

internalTaskTimer - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Timer used to schedule update tasks if no external one set.

internalTaskTimer - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Timer used to schedule update tasks if no external one set.

IPRangeAccessControl - Class in net.shibboleth.shared.security.impl

Simple access control implementation based on IP address checking.

IPRangeAccessControl() - Constructor for class net.shibboleth.shared.security.impl.IPRangeAccessControl

Constructor.

K

key - Variable in record class net.shibboleth.shared.security.DataSealerKeyStrategy.NamedKey

The field for the key record component.

key() - Method in record class net.shibboleth.shared.security.DataSealerKeyStrategy.NamedKey

Returns the value of the key record component.

KEY_ALIAS - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Key alias base.

KEY_COUNT - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Number of keys to maintain.

KEY_FILE - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Path to private key file to create.

KEY_SIZE - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Key size.

KEY_SIZE - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Key size.

KEY_TYPE - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Key algorithm.

KEY_TYPE - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Key algorithm.

keyAlias - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Keystore base alias for encryption keys.

keyAlias - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Key alias base.

keyCache - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Cache of keys.

keyCount - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Key count.

KeyNotFoundException - Exception in net.shibboleth.shared.security

Indicates that a key was not found in a key storage facility.

KeyNotFoundException() - Constructor for exception net.shibboleth.shared.security.KeyNotFoundException

Constructor.

KeyNotFoundException(Exception) - Constructor for exception net.shibboleth.shared.security.KeyNotFoundException

Constructor.

KeyNotFoundException(String) - Constructor for exception net.shibboleth.shared.security.KeyNotFoundException

Constructor.

KeyNotFoundException(String, Exception) - Constructor for exception net.shibboleth.shared.security.KeyNotFoundException

Constructor.

keyPassword - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Password for encryption key(s).

keyScript - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Script to obtain keys.

keySize - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Key size.

keySize - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Key size.

keystoreFile - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Keystore file.

keystoreFile - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Keystore file.

keystorePassword - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Password for keystore.

keystorePassword - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Keystore password.

keystorePassword - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Keystore password.

keystoreResource - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Keystore resource.

keystoreType - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Type of keystore to use for access to keys.

keystoreType - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Keystore type.

keystoreType - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Keystore type.

keyStrategy - Variable in class net.shibboleth.shared.security.DataSealer

Source of keys.

keyType - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Key algorithm.

keyType - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Key algorithm.

keyVersionResource - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Version resource.

L

lockedAtStartup - Variable in class net.shibboleth.shared.security.DataSealer

Whether the key source is expected to be locked initially.

log - Variable in class net.shibboleth.shared.security.DataSealer

Class logger.

log - Variable in class net.shibboleth.shared.security.impl.BasicAccessControlService

Class logger.

log - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Class logger.

log - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Class logger.

log - Variable in class net.shibboleth.shared.security.impl.IPRangeAccessControl

Class logger.

log - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Class logger.

log - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Class logger.

M

MAGIC_STRING - Static variable in class net.shibboleth.shared.security.DataSealer

Magic string to signal use of per-node prefix feature.

main(String[]) - Static method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Command line entry point.

main(String[]) - Static method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Command line entry point.

N

name - Variable in record class net.shibboleth.shared.security.DataSealerKeyStrategy.NamedKey

The field for the name record component.

name() - Method in record class net.shibboleth.shared.security.DataSealerKeyStrategy.NamedKey

Returns the value of the name record component.

NamedKey(String, SecretKey) - Constructor for record class net.shibboleth.shared.security.DataSealerKeyStrategy.NamedKey

Constructor.

net.shibboleth.shared.security - package net.shibboleth.shared.security

Helpers for common security related tasks.

net.shibboleth.shared.security.impl - package net.shibboleth.shared.security.impl

Implementations of security interfaces.

nodePrefix - Variable in class net.shibboleth.shared.security.DataSealer

Optional per-server node prefix to affix to encoded values.

P

policyMap - Variable in class net.shibboleth.shared.security.impl.BasicAccessControlService

Map of named policies.

PREFIX_LEN - Static variable in class net.shibboleth.shared.security.DataSealer

Length of padded prefix.

privateKeyFile - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Private key file.

ProviderType() - Constructor for enum class net.shibboleth.shared.security.IdentifierGenerationStrategy.ProviderType

R

random - Variable in class net.shibboleth.shared.security.DataSealer

Source of secure random data.

random - Variable in class net.shibboleth.shared.security.impl.RandomIdentifierGenerationStrategy

Random number generator.

RANDOM - Enum constant in enum class net.shibboleth.shared.security.IdentifierGenerationStrategy.ProviderType

Produces random identifiers that may not be strongly secure.

RandomIdentifierGenerationStrategy - Class in net.shibboleth.shared.security.impl

Generates a random number of bytes via a Random source and encodes them into a string using a BinaryEncoder (Hex by default).

RandomIdentifierGenerationStrategy() - Constructor for class net.shibboleth.shared.security.impl.RandomIdentifierGenerationStrategy

Default constructor.

RandomIdentifierGenerationStrategy(IdentifierGenerationStrategy.ParameterSpec) - Constructor for class net.shibboleth.shared.security.impl.RandomIdentifierGenerationStrategy

Constructor.

RandomIdentifierParameterSpec - Record Class in net.shibboleth.shared.security

Captures the supported parameters for the IdentifierGenerationStrategy.ProviderType.RANDOM and IdentifierGenerationStrategy.ProviderType.SECURE strategy types.

RandomIdentifierParameterSpec(RandomGenerator, Integer, BinaryEncoder) - Constructor for record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

Creates an instance of a RandomIdentifierParameterSpec record class.

S

ScriptedKeyStrategy - Class in net.shibboleth.shared.security.impl

Implements a strategy for access to versioned symmetric keys using scripts.

ScriptedKeyStrategy() - Constructor for class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Constructor.

SECURE - Enum constant in enum class net.shibboleth.shared.security.IdentifierGenerationStrategy.ProviderType

Produces random identifiers that rely on a theoretically secure source of randomness.

SecureRandomIdentifierGenerationStrategy - Class in net.shibboleth.shared.security.impl

A specialized subclass of RandomIdentifierGenerationStrategy which constrains the supplied random number generator to be an instance of SecureRandom.

SecureRandomIdentifierGenerationStrategy() - Constructor for class net.shibboleth.shared.security.impl.SecureRandomIdentifierGenerationStrategy

Default constructor.

SecureRandomIdentifierGenerationStrategy(IdentifierGenerationStrategy.ParameterSpec) - Constructor for class net.shibboleth.shared.security.impl.SecureRandomIdentifierGenerationStrategy

Constructor.

SelfSignedCertificateGenerator - Class in net.shibboleth.shared.security.impl

A helper class to generate self-signed keypairs.

SelfSignedCertificateGenerator() - Constructor for class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Constructor.

SelfSignedCertificateGenerator.CommandLineArgs - Class in net.shibboleth.shared.security.impl

Manages command line parsing for application and the bean properties used by the generator.

SelfSignedCertificateGenerator.FileConverter - Class in net.shibboleth.shared.security.impl

Command line option conversion from String to File.

serialVersionUID - Static variable in exception net.shibboleth.shared.security.DataExpiredException

serialVersionUID.

serialVersionUID - Static variable in exception net.shibboleth.shared.security.DataSealerException

serialVersionUID.

serialVersionUID - Static variable in exception net.shibboleth.shared.security.KeyNotFoundException

Generated UUID.

setAllowedRanges(Collection<IPRange>) - Method in class net.shibboleth.shared.security.impl.IPRangeAccessControl

Set the CIDR address ranges to allow.

setCacheSize(long) - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Set the number of keys to cache.

setCertificateAlg(String) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the certificate algorithm that will be used.

setCertificateFile(File) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the file to which the certificate will be written.

setCertificateLifetime(int) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the number of years for which the certificate will be valid.

setCustomObject(Object) - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Set the custom (externally provided) object.

setDecoder(BinaryDecoder) - Method in class net.shibboleth.shared.security.DataSealer

Sets the decoder to use to convert a ciphertext string to bytes.

setDNSSubjectAltNames(Collection<String>) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the optional DNS subject alt names.

setEncoder(BinaryEncoder) - Method in class net.shibboleth.shared.security.DataSealer

Sets the encoder to use to produce a ciphertext string from bytes.

setHostName(String) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the hostname that will appear in the certificate's DN.

setKeyAlias(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Set the encryption key alias base name.

setKeyAlias(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Set the encryption key alias base name.

setKeyCount(int) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Set the number of keys to maintain.

setKeyPassword(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Set the encryption key password.

setKeyScript(EvaluableScript) - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Set the script to run to access keys.

setKeySize(int) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Set the size of the generated key.

setKeySize(int) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the size of the generated key.

setKeystoreFile(File) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Set the keystore file to create or modify.

setKeystoreFile(File) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the file to which the keystore will be written.

setKeystorePassword(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Set the keystore password.

setKeystorePassword(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Set the password for the keystore.

setKeystorePassword(String) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the password for the generated keystore.

setKeystoreResource(Resource) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Set the keystore resource.

setKeystoreType(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Set the keystore type.

setKeystoreType(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Set the type of keystore to create.

setKeystoreType(String) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the type of keystore to create.

setKeyStrategy(DataSealerKeyStrategy) - Method in class net.shibboleth.shared.security.DataSealer

Set the key strategy.

setKeyType(String) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Set the type of key that will be generated.

setKeyType(String) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the type of key that will be generated.

setKeyVersionResource(Resource) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Set the key version resource.

setLockedAtStartup(boolean) - Method in class net.shibboleth.shared.security.DataSealer

Set whether the key source is expected to be locked at startup, and unlocked later at runtime.

setNodePrefix(String) - Method in class net.shibboleth.shared.security.DataSealer

Set a prefix to affix to wrapped values to support signaling to load balancers, etc.

setPolicyMap(Map<String, AccessControl>) - Method in class net.shibboleth.shared.security.impl.BasicAccessControlService

Set the policies to store.

setPrivateKeyFile(File) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the file to which the private key will be written.

setRandom(SecureRandom) - Method in class net.shibboleth.shared.security.DataSealer

Set the pseudorandom generator.

setUpdateInterval(Duration) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Set the time between key update checks.

setUpdateInterval(Duration) - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Set the time between key update checks.

setUpdateTaskTimer(Timer) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Set the timer used to schedule update tasks.

setUpdateTaskTimer(Timer) - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Set the timer used to schedule update tasks.

setURISubjectAltNames(Collection<String>) - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Set the optional URI subject alt names.

setVersionFile(File) - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool

Set the key versioning file to create or modify.

sizeOfIdentifier - Variable in class net.shibboleth.shared.security.impl.RandomIdentifierGenerationStrategy

Number of random bytes in the identifier.

source - Variable in record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

The field for the source record component.

source() - Method in record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

Returns the value of the source record component.

STORE_FILE - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Path to keystore to create.

STORE_FILE - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Path to keystore to create.

STORE_PASS - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Keystore password.

STORE_PASS - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Keystore password.

STORE_TYPE - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Type of keystore to create.

STORE_TYPE - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

Type of keystore to create.

T

testEncryption(SecretKey) - Method in class net.shibboleth.shared.security.DataSealer

Run a test over the configured bean properties.

toString() - Method in record class net.shibboleth.shared.security.DataSealerKeyStrategy.NamedKey

Returns a string representation of this record class.

toString() - Method in record class net.shibboleth.shared.security.RandomIdentifierParameterSpec

Returns a string representation of this record class.

Type4UUIDIdentifierGenerationStrategy - Class in net.shibboleth.shared.security.impl

Generates a type 4 UUID as an identifier.

Type4UUIDIdentifierGenerationStrategy() - Constructor for class net.shibboleth.shared.security.impl.Type4UUIDIdentifierGenerationStrategy

Default constructor.

Type4UUIDIdentifierGenerationStrategy(IdentifierGenerationStrategy.ParameterSpec) - Constructor for class net.shibboleth.shared.security.impl.Type4UUIDIdentifierGenerationStrategy

Constructor.

U

unwrap(String) - Method in class net.shibboleth.shared.security.DataSealer

Decrypts and verifies an encrypted bundle created with DataSealer.wrap(String, Instant).

unwrap(String, StringBuffer) - Method in class net.shibboleth.shared.security.DataSealer

Decrypts and verifies an encrypted bundle created with DataSealer.wrap(String, Instant), optionally returning the label of the key used to encrypt the data.

updateDefaultKey() - Method in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Update the loaded copy of the default key based on the current key version if it's out of date (loading key version from scratch if need be).

updateDefaultKey() - Method in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Update the loaded copy of the default key based on the current key version if it's out of date (loading key version from scratch if need be).

updateInterval - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Time between key update checks.

updateInterval - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Time between key update checks.

updateTask - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Task that checks for updated key version.

updateTask - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Task that checks for updated key version.

updateTaskTimer - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategy

Timer used to schedule update tasks.

updateTaskTimer - Variable in class net.shibboleth.shared.security.impl.ScriptedKeyStrategy

Timer used to schedule update tasks.

URI_ALTNAMES - Static variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

URI subjectAltNames.

uriSubjectAltNames - Variable in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator.CommandLineArgs

URI subjectAltNames.

UUID - Enum constant in enum class net.shibboleth.shared.security.IdentifierGenerationStrategy.ProviderType

Produces random identifiers based on type 4 UUIDs.

V

validate() - Method in class net.shibboleth.shared.security.impl.SelfSignedCertificateGenerator

Validates the settings.

valueOf(String) - Static method in enum class net.shibboleth.shared.security.IdentifierGenerationStrategy.ProviderType

Returns the enum constant of this class with the specified name.

values() - Static method in enum class net.shibboleth.shared.security.IdentifierGenerationStrategy.ProviderType

Returns an array containing the constants of this enum class, in the order they are declared.

VERSION_FILE - Static variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Path to key versioning file.

versionFile - Variable in class net.shibboleth.shared.security.impl.BasicKeystoreKeyStrategyTool.CommandLineArgs

Key versioning file.

W

wrap(String) - Method in class net.shibboleth.shared.security.DataSealer

Equivalent to DataSealer.wrap(String, Instant) with expiration set to "never".

wrap(String, Instant) - Method in class net.shibboleth.shared.security.DataSealer

Encodes data into an AEAD-encrypted blob, gzip(exp|data) exp = expiration time of the data; 8 bytes; Big-endian data = the data; a UTF-8-encoded string

A B C D E F G H I K L M N P R S T U V W
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form