Package org.opensaml.security.x509

X.509-based credential and trust classes.

Interface Summary

Interface	Description
PKIXTrustEngine<TokenType>	Trust engine that validates tokens using PKIX validation.
PKIXTrustEvaluator	An interface for classes which evaluate an X509Credential against a set of trusted PKIXValidationInformation, using PKIX validation rules.
PKIXValidationInformation	Source of PKIX validation information such as trust anchors and CRLs.
PKIXValidationInformationResolver	A resolver which uses Criterion to resolve PKIXValidationInformation, which will typically be used by PKIX-based trust engines.
X500DNHandler	Interface for implementations which handle parsing and serialization of X.500 names represented by X500Principal.
X509Credential	An entity credential based on key material and other information (e.g.

Class Summary

Class	Description
BasicX509Credential	A basic implementation of X509Credential.
InternalX500DNHandler	Basic implementation of X500DNHandler which uses the internal built-in mechanisms provided by X500Principal directly.
PKIXValidationOptions	Options which may be supplied to influence the processing behavior of a PKIXTrustEvaluator.
TrustedNamesCriterion	A criterion implementation for conveying a dynamically-generated set of trusted names for PKIX validation purposes.
X509DigestCriterion	An implementation of Criterion which specifies criteria based on the digest of an X.509 certificate.
X509IssuerSerialCriterion	An implementation of Criterion which specifies criteria based on X.509 certificate issuer name and serial number.
X509SubjectKeyIdentifierCriterion	An implementation of Criterion which specifies criteria based on X.509 certificate subject key identifier.
X509SubjectNameCriterion	An implementation of Criterion which specifies criteria based on X.509 certificate subject name.
X509Support	Utility class for working with X509 objects.