All Classes and Interfaces
Class
Description
An abstract implementation of
CredentialResolver which chains together one or more underlying credential
resolver implementations.Abstract base class for
CredentialResolver implementations.An abstract implementation of
CredentialResolver that
filters the returned Credentials based on the instances of Predicate
which are present in the set of criteria as instances of EvaluableCredentialCriterion,
or which are obtained via lookup in the EvaluableCredentialCriteriaRegistry.Policy rule that checks if the client cert used to authenticate the request is valid and trusted.
Base rule which uses a trust engine to evaluate a token extracted from the request or message.
Basic implementation of
ClientTLSValidationConfiguration.Basic implementation of
ClientTLSValidationParametersResolver.Basic implementation of
HttpClientSecurityConfiguration.Basic implementation of
HttpClientSecurityParametersResolver.Basic implementation of
PKIXValidationInformation.A basic implementaion of
X509CredentialNameEvaluator which evaluates various identifiers
extracted from an X509Credential's entity certificate against a set of trusted names.An implementation of
PKIXTrustEvaluator that is based on the Java CertPath API.Specialization of
PKIXValidationOptions which specifies options specific to a
PKIXTrustEvaluator based on the Java CertPath API.A concrete implementation of
AbstractChainingCredentialResolver which is scoped to
the simple CredentialResolver type.Evaluate a token in sequence using a chain of subordinate trust engines.
An initializer which initializes the global configuration instance of
ClientTLSValidationConfiguration.An implementation of
CredentialResolver that
uses a Collection as the underlying credential source.A dummy implementation of
X509CredentialNameEvaluator which always returns true.A registry which manages mappings from types of
Criterion to the class type which can evaluate that
criteria's data against a Credential target.Marker interface for evaluable credential resolver criteria.
Instance of evaluable credential criteria for evaluating a credential's entityID.
Instance of evaluable credential criteria for evaluating the credential key algorithm.
Instance of evaluable credential criteria for evaluating the credential key length.
Instance of evaluable credential criteria for evaluating credential key names.
Instance of evaluable credential criteria for evaluating whether a credential contains a particular
public key.
Instance of evaluable credential criteria for evaluating whether a credential contains a particular usage specifier.
Instance of evaluable credential criteria for evaluating whether a credential's certificate meets the criteria
specified by an instance of
X509CertSelector.An implementation of
Criterion which specifies
criteria based on the digest of an X.509 certificate.Instance of evaluable credential criteria for evaluating whether a credential's certificate contains a particular
issuer name and serial number.
Instance of evaluable credential criteria for evaluating whether a credential's certificate contains a particular
subject key identifier.
Instance of evaluable credential criteria for evaluating whether a credential's certificate contains a particular
subject name.
Trust engine that evaluates a credential's key against key(s) expressed within a set of trusted credentials obtained
from a trusted credential resolver.
Auxillary trust evaluator for evaluating an untrusted key or credential against a trusted key or credential.
Trust engine that evaluates a credential's X.509 certificate against certificates expressed within a set of trusted
credentials obtained from a credential resolver.
Auxillary trust evaluator for evaluating an untrusted X509 certificate or credential against a trusted certificate or
credential.
NOTE: this class is not yet implemented
A
CredentialResolver that pulls credential information from the file system.An initializer which initializes the global
HttpClientSecurityConfiguration.A
CredentialResolver that extracts Credential's from a key store.A wrapper that changes a
KeyStore in to a X509Credential.Trust engine implementation which evaluates an
X509Credential token based on PKIX validation processing using
validation information from a trusted source.Handler that resolves and populates
HttpClientSecurityParameters on a HttpClientSecurityContext
created/accessed via a lookup function, by default as an immediate child context of the target
MessageContext.Support class for working with security-enhanced components related to use of
HttpClient.An security-enhanced implementation of HttpClient's TLS-capable
LayeredConnectionSocketFactory.Simple implementation of
CredentialResolver which just stores
and returns a static set of credentials.An implementation of
PKIXValidationInformationResolver which always returns a static, fixed set of
information.An implementation of
X509KeyManager based on a single statically configured
private key and certificate chain, supplied either directly or via an instance of
X509Credential.An implementation of
HttpClientContextHandler which clears the thread local client TLS credential
held by ThreadLocalX509CredentialContext.An implementation of
HttpClientContextHandler which handles cleanup and transfer of
data used for server TLS held by ThreadLocalX509TrustEngineContext.Class which holds and makes available an instance of
X509Credential via ThreadLocal storage,
typically used for client TLS authentication via ThreadLocalX509CredentialKeyManager.An implementation of
X509KeyManager which returns data based on the thread-local credential
instance obtained via ThreadLocalX509CredentialContext.Class which holds and makes available instances of
TrustEngine<? super X509Credential>
and CriteriaSet via ThreadLocal storage, typically used for server TLS authentication
via ThreadLocalX509TrustManager.Unified class representing the data that will be managed by the thread local storage.
Support class for centralizing evaluation of a certificate chain using trust engine and criteria
from
ThreadLocalX509TrustEngineContext.An implementation of
X509TrustManager which performs its evaluation using trust engine and criteria
instances available from ThreadLocalX509TrustEngineContext.X509TrustManager implementation that relies on a TrustEngine.Interface for classes which evaluate an
X509Credential against a
supplied set of trusted names.A class that wraps a
X509KeyManager and exposes it as an X509Credential.