Apache CXF API

org.apache.cxf.sts.token.realm
Class CertConstraintsParser

java.lang.Object
  extended by org.apache.cxf.sts.token.realm.CertConstraintsParser

public class CertConstraintsParser
extends Object

This class provides the functionality to match a given X509Certificate against a list of regular expressions.


Constructor Summary
CertConstraintsParser()
           
 
Method Summary
 boolean matches(X509Certificate cert)
           
 void setSubjectConstraints(List<String> constraints)
          Set a list of Strings corresponding to regular expression constraints on the subject DN of a certificate
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

CertConstraintsParser

public CertConstraintsParser()
Method Detail

setSubjectConstraints

public void setSubjectConstraints(List<String> constraints)
Set a list of Strings corresponding to regular expression constraints on the subject DN of a certificate


matches

public boolean matches(X509Certificate cert)
Returns:
true if the certificate's SubjectDN matches the constraints defined in the subject DNConstraints; false, otherwise. The certificate subject DN only has to match ONE of the subject cert constraints (not all).

Apache CXF API

Apache CXF