Package org.wildfly.security.auth.realm.ldap

Class X509EvidenceVerifier.EncodedCertificateVerifier

java.lang.Object

org.wildfly.security.auth.realm.ldap.X509EvidenceVerifier.EncodedCertificateVerifier

All Implemented Interfaces:

X509EvidenceVerifier.CertificateVerifier

Enclosing class:

X509EvidenceVerifier

static class X509EvidenceVerifier.EncodedCertificateVerifier
extends Object
implements X509EvidenceVerifier.CertificateVerifier

Field Summary

Fields

Modifier and Type	Field	Description
(package private) String	ldapAttribute

Constructor Summary

Constructors

Constructor	Description
EncodedCertificateVerifier(String ldapAttribute)

Method Summary

Modifier and Type	Method	Description
void	addBinaryLdapAttributes(Collection<String> binaryAttributes)	Construct set of LDAP attributes, which should be loaded as binary data.
void	addRequiredLdapAttributes(Collection<String> requiredAttributes)	Construct set of LDAP attributes, which should be loaded to be able to X509EvidenceVerifier.CertificateVerifier.verifyCertificate(java.security.cert.X509Certificate, javax.naming.directory.Attributes).
boolean	verifyCertificate(X509Certificate certificate, Attributes attributes)	Verify X509 certificate of user using identity information from LDAP

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ldapAttribute

final String ldapAttribute

Constructor Detail

EncodedCertificateVerifier

EncodedCertificateVerifier(String ldapAttribute)

Method Detail

addRequiredLdapAttributes

public void addRequiredLdapAttributes(Collection<String> requiredAttributes)

Description copied from interface: X509EvidenceVerifier.CertificateVerifier

Construct set of LDAP attributes, which should be loaded to be able to X509EvidenceVerifier.CertificateVerifier.verifyCertificate(java.security.cert.X509Certificate, javax.naming.directory.Attributes).

Specified by:

addRequiredLdapAttributes in interface X509EvidenceVerifier.CertificateVerifier

Parameters:

requiredAttributes - output set of attribute names

addBinaryLdapAttributes

public void addBinaryLdapAttributes(Collection<String> binaryAttributes)

Description copied from interface: X509EvidenceVerifier.CertificateVerifier

Construct set of LDAP attributes, which should be loaded as binary data.

Specified by:

addBinaryLdapAttributes in interface X509EvidenceVerifier.CertificateVerifier

Parameters:

binaryAttributes - output set of attribute names

verifyCertificate

public boolean verifyCertificate(X509Certificate certificate,
                                 Attributes attributes)
                          throws NamingException,
                                 RealmUnavailableException

Description copied from interface: X509EvidenceVerifier.CertificateVerifier

Verify X509 certificate of user using identity information from LDAP

Specified by:

verifyCertificate in interface X509EvidenceVerifier.CertificateVerifier

Parameters:

certificate - X509 certificate to verify

attributes - LDAP attributes values of given identity

Returns:

if certificate was accepted by this verifier

Throws:

NamingException - when problem with LDAP

RealmUnavailableException