#include <xmltooling/security/X509TrustEngine.h>
Inheritance diagram for xmltooling::X509TrustEngine:
Public Member Functions | |
virtual bool | validate (XSECCryptoX509 *certEE, const std::vector< XSECCryptoX509 * > &certChain, const CredentialResolver &credResolver, CredentialCriteria *criteria=NULL) const =0 |
Determines whether an X.509 credential is valid with respect to the source of credentials supplied. | |
Protected Member Functions | |
X509TrustEngine (const xercesc::DOMElement *e=NULL) | |
Constructor. |
|
Constructor. If a DOM is supplied, the following XML content is supported:
XML namespaces are ignored in the processing of this content.
|
|
Determines whether an X.509 credential is valid with respect to the source of credentials supplied. It is the responsibility of the application to ensure that the credentials supplied are in fact associated with the peer who presented the credential. If criteria with a peer name are supplied, the "name" of the EE certificate may also be checked to ensure that it identifies the intended peer. The peer name itself or implementation-specific rules based on the content of the peer credentials may be applied. Implementations may omit this check if they deem it unnecessary.
Implemented in xmltooling::AbstractPKIXTrustEngine, and xmltooling::ChainingTrustEngine. |