eu.emi.security.authn.x509.helpers.ns

Class NamespaceChecker

java.lang.Object

eu.emi.security.authn.x509.helpers.ns.NamespaceChecker

public class NamespaceChecker
extends java.lang.Object

Implements namespace policy checking. The class is populated with a namespace policy store which provides the policies. The implementation gets

Author:

K. Benedyczak

Constructor Summary

Constructors

Constructor and Description
NamespaceChecker(NamespaceCheckingMode mode, NamespacesStore pmaStore, NamespacesStore globusStore)

Method Summary

Methods

Modifier and Type	Method and Description
java.util.List<ValidationError>	check(java.security.cert.X509Certificate[] chain) Checks all certificates in the chain whether they are correct w.r.t.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NamespaceChecker

public NamespaceChecker(NamespaceCheckingMode mode,
                NamespacesStore pmaStore,
                NamespacesStore globusStore)

Method Detail

check

public java.util.List<ValidationError> check(java.security.cert.X509Certificate[] chain)

Checks all certificates in the chain whether they are correct w.r.t. namespace policies which are configured. If the parameter contains any proxy certificates those are ignored. Self signed certificates in the chain are ignored, so the root CA certificate may be safely present in the chain.

Parameters:

chain - to be checked

Returns:

list of validation errors