se.swedenconnect.opensaml

Class OpenSAMLSecurityExtensionConfig

java.lang.Object

se.swedenconnect.opensaml.OpenSAMLSecurityExtensionConfig

All Implemented Interfaces:

OpenSAMLInitializerConfig

public class OpenSAMLSecurityExtensionConfig
extends Object
implements OpenSAMLInitializerConfig

Configuration that extends OpenSAML's encryption support with key agreement algorithms.

Author:

Martin Lindström (martin@idsec.se), Stefan Santesson (stefan@idsec.se)

Constructor Summary

Constructors

Constructor and Description
OpenSAMLSecurityExtensionConfig()

Method Summary

Modifier and Type	Method and Description
String	getName() The name of this configurer.
void	postInitialize() We don't know if a OpenSAMLSecurityDefaultsConfig object is sent to the initializer.
void	preInitialize() The ECDH support requires that the Bouncy Castle crypto provider is installed.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OpenSAMLSecurityExtensionConfig

public OpenSAMLSecurityExtensionConfig()

Method Detail

getName

public String getName()

The name of this configurer. Used for logging only.

Specified by:

getName in interface OpenSAMLInitializerConfig

Returns:

the name of the configurer

preInitialize

public void preInitialize()
                   throws Exception

The ECDH support requires that the Bouncy Castle crypto provider is installed. This method ensures this.

Specified by:

preInitialize in interface OpenSAMLInitializerConfig

Throws:

Exception - for init errors

postInitialize

public void postInitialize()
                    throws Exception

We don't know if a OpenSAMLSecurityDefaultsConfig object is sent to the initializer. Therefore, we always make sure that we extends OpenSAML's encryption configuration with support for key agreement. We also add the RSA-PSS signing algorithms.

Specified by:

postInitialize in interface OpenSAMLInitializerConfig

Throws:

Exception - for init errors