com.sun.enterprise.security.auth

Interface TrustHandler

public interface TrustHandler

Enables developers to provide custom implementation to enable sip containers to determine if a network entity can be trusted.

Method Summary

Modifier and Type	Method and Description
void	initialize(Properties props)
boolean	isTrusted(String asserterAddress, String messageDirection, X509Certificate securityid, Principal[] pAssertedValues) determines if the container can trust the network entity from which we received the message with P-Asserted-Identity header.

Method Detail

initialize

void initialize(Properties props)

isTrusted

boolean isTrusted(String asserterAddress,
                  String messageDirection,
                  X509Certificate securityid,
                  Principal[] pAssertedValues)

determines if the container can trust the network entity from which we received the message with P-Asserted-Identity header. This method also validates if the identity that was used to secure(eg: SSL) the message is trusted.

Parameters:

pAssertedValues - P-Asserted-Identity header values

messageDirection - "Incoming" if this method is invoked for a incoming request, "Outgoing" if the message is being sent out.

asserterAddress - ipaddress/hostname of the network entity from which we received the SIP message with P-Asserted-Identity header. Inorder to accept/use the values in P-Asserted-Identity header the network entity should be a trusted.

securityid - is the asserting security identity, if a secure connection is used then this would be the java.security.cert.X509Certificate, else null.

Returns:

true if we trust the networtid and the securityid.