com.vmware.vapi.dsig.json

Class DefaultStsTrustChain

java.lang.Object

com.vmware.vapi.dsig.json.DefaultStsTrustChain

All Implemented Interfaces:

StsTrustChain

public final class DefaultStsTrustChain
extends Object
implements StsTrustChain

This class is capable of retrieving the STS certificate trust chain from different sources. This chain is needed to verify that the SAML token from the signature is trusted.

Constructor Summary

Constructors

Constructor and Description
DefaultStsTrustChain()

Method Summary

Modifier and Type	Method and Description
static DefaultStsTrustChain	createInstance(X509Certificate[] trustedChain) Creates a DefaultStsTrustChain instance with predefined trusted certificate chain.
X509Certificate[]	getStsTrustChain()
static DefaultStsTrustChain	loadFromKeystore(String fileName, String password, String certAlias) Loads the STS trust chain from keystore

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultStsTrustChain

public DefaultStsTrustChain()

Method Detail

getStsTrustChain

public X509Certificate[] getStsTrustChain()

Specified by:

getStsTrustChain in interface StsTrustChain

Returns:

the STS trust chain

loadFromKeystore

public static DefaultStsTrustChain loadFromKeystore(String fileName,
                                                    String password,
                                                    String certAlias)

Loads the STS trust chain from keystore

Parameters:

fileName - cannot be null.

password - can be null.

certAlias - cannot be null.

Returns:

trust chain

createInstance

public static DefaultStsTrustChain createInstance(X509Certificate[] trustedChain)

Creates a DefaultStsTrustChain instance with predefined trusted certificate chain.

Parameters:

trustedChain - must not be null, empty or have null elements

Returns:

trust chain