Package org.opensaml.xml.security.x509

X509 based credential and trust class.

See:
Description

Interface Summary

PKIXTrustEngine<TokenType>	Trust engine that validates tokens using PKIX validation.
PKIXTrustEvaluator	An interface for classes which evaluate an X509Credential against a set of trusted PKIXValidationInformation, using PKIX validation rules.
PKIXValidationInformation	Source of PKIX validation information such as trust anchors and CRLs.
PKIXValidationInformationResolver	A resolver which uses Criteria to resolve PKIXValidationInformation, which will typically be used PKIX-based trust engines.
X500DNHandler	Interface for implementations which handle parsing and serialization of X.500 names represented by X500Principal.
X509Credential	An entity credential based on key material and other information (e.g.
X509CredentialNameEvaluator	Interface for classes which evaluate an X509Credential against a supplied set of trusted names.

Class Summary

BasicPKIXValidationInformation	Basic implementation of PKIXValidationInformation.
BasicX509Credential	A basic implementation of X509Credential.
BasicX509CredentialNameEvaluator	A basic implementaion of X509CredentialNameEvaluator which evaluates various identifiers extracted from an X509Credential's entity certificate against a set of trusted names.
CertPathPKIXTrustEvaluator	An implementation of PKIXTrustEvaluator that is based on the Java CertPath API.
CertPathPKIXValidationOptions	Specialization of PKIXValidationOptions which specifies options specific to a PKIXTrustEvaluator based on the Java CertPath API.
InternalX500DNHandler	Basic implementation of X500DNHandler which uses the internal built-in mechanisms provided by X500Principal directly.
KeyStoreX509CredentialAdapter	A wrapper that changes a KeyStore in to a X509Credential.
PKIXValidationOptions	Options which may be supplied to influence the processing behavior of a PKIXTrustEvaluator.
PKIXX509CredentialTrustEngine	Trust engine implementation which evaluates an X509Credential token based on PKIX validation processing using validation information from a trusted source.
StaticPKIXValidationInformationResolver	An implementation of PKIXValidationInformationResolver which always returns a static, fixed set of information.
X509IssuerSerialCriteria	An implementation of Criteria which specifies criteria based on X.509 certificate issuer name and serial number.
X509KeyInfoGeneratorFactory	A factory implementation which produces instances of X509KeyInfoGeneratorFactory.X509KeyInfoGenerator capable of handling the information contained within an X509Credential.
X509KeyManagerX509CredentialAdapter	A class that wraps a X509KeyManager and exposes it as an X509Credential.
X509SubjectKeyIdentifierCriteria	An implementation of Criteria which specifies criteria based on X.509 certificate subject key identifier.
X509SubjectNameCriteria	An implementation of Criteria which specifies criteria based on X.509 certificate subject name.
X509Util	Utility class for working with X509 objects.

Enum Summary

X509Util.ENCODING_FORMAT

Encoding used to store a key or certificate in a file.

Package org.opensaml.xml.security.x509 Description

X509 based credential and trust class.