Package org.wildfly.security.auth.realm.ldap

Class X509EvidenceVerifier.SubjectDnCertificateVerifier

java.lang.Object

org.wildfly.security.auth.realm.ldap.X509EvidenceVerifier.SubjectDnCertificateVerifier

All Implemented Interfaces:

X509EvidenceVerifier.CertificateVerifier

Enclosing class:

X509EvidenceVerifier

static class X509EvidenceVerifier.SubjectDnCertificateVerifier
extends Object
implements X509EvidenceVerifier.CertificateVerifier

Field Summary

Fields

Modifier and Type	Field	Description
(package private) String	ldapAttribute

Constructor Summary

Constructors

Constructor	Description
SubjectDnCertificateVerifier(String ldapAttribute)

Method Summary

Modifier and Type	Method	Description
void	addRequiredLdapAttributes(Collection<String> requiredAttributes)	Construct set of LDAP attributes, which should be loaded to be able to X509EvidenceVerifier.CertificateVerifier.verifyCertificate(java.security.cert.X509Certificate, javax.naming.directory.Attributes).
boolean	verifyCertificate(X509Certificate certificate, Attributes attributes)	Verify X509 certificate of user using identity information from LDAP

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.wildfly.security.auth.realm.ldap.X509EvidenceVerifier.CertificateVerifier

addBinaryLdapAttributes

Field Detail

ldapAttribute

final String ldapAttribute

Constructor Detail

SubjectDnCertificateVerifier

SubjectDnCertificateVerifier(String ldapAttribute)

Method Detail

addRequiredLdapAttributes

public void addRequiredLdapAttributes(Collection<String> requiredAttributes)

Description copied from interface: X509EvidenceVerifier.CertificateVerifier

Construct set of LDAP attributes, which should be loaded to be able to X509EvidenceVerifier.CertificateVerifier.verifyCertificate(java.security.cert.X509Certificate, javax.naming.directory.Attributes).

Specified by:

addRequiredLdapAttributes in interface X509EvidenceVerifier.CertificateVerifier

Parameters:

requiredAttributes - output set of attribute names

verifyCertificate

public boolean verifyCertificate(X509Certificate certificate,
                                 Attributes attributes)
                          throws NamingException

Description copied from interface: X509EvidenceVerifier.CertificateVerifier

Verify X509 certificate of user using identity information from LDAP

Specified by:

verifyCertificate in interface X509EvidenceVerifier.CertificateVerifier

Parameters:

certificate - X509 certificate to verify

attributes - LDAP attributes values of given identity

Returns:

if certificate was accepted by this verifier

Throws:

NamingException - when problem with LDAP