A C D E F G I L N O P R S T U V X

A

AbstractCRLRevocationChecker - Class in org.apereo.cas.adaptors.x509.authentication.handler.support

Base class for all CRL-based revocation checkers.

AbstractCRLRevocationChecker() - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

AbstractX509PrincipalResolver - Class in org.apereo.cas.adaptors.x509.authentication.principal

Abstract class in support of multiple resolvers for X509 Certificates.

AbstractX509PrincipalResolver() - Constructor for class org.apereo.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

addCRL(Object, X509CRL) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Records the addition of a new CRL entry.

addCRL(Object, X509CRL) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

addCRL(Object, X509CRL) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

AllowRevocationPolicy - Class in org.apereo.cas.adaptors.x509.authentication.handler.support

Implements an unqualified allow policy.

AllowRevocationPolicy() - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.AllowRevocationPolicy

apply(Void) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AllowRevocationPolicy

Policy application does nothing to implement unqualfied allow.

apply(Void) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.DenyRevocationPolicy

Policy application throws GeneralSecurityException to stop execution of whatever process invoked application of this policy.

apply(T) - Method in interface org.apereo.cas.adaptors.x509.authentication.handler.support.RevocationPolicy

Applies the policy.

apply(X509CRL) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

Applies the policy.

C

CertUtils - Class in org.apereo.cas.adaptors.x509.util

Utility class with methods to support various operations on X.509 certs.

check(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

check(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.NoOpRevocationChecker

NO-OP check implementation.

check(X509Certificate) - Method in interface org.apereo.cas.adaptors.x509.authentication.handler.support.RevocationChecker

Checks the revocation status of the given certificate.

checkAll - Variable in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Flag to indicate whether all crls should be checked for the cert resource.

connectionConfig - Variable in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

The connection config to prep for connections.

connectionPool - Variable in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.PoolingLdaptiveResourceCRLFetcher

Connection pool template.

constructCredentialsFromRequest(RequestContext) - Method in class org.apereo.cas.adaptors.x509.web.flow.X509CertificateCredentialsNonInteractiveAction

CRL_REASON_OID - Static variable in exception org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

OID for reasonCode CRL extension.

CRLDistributionPointRevocationChecker - Class in org.apereo.cas.adaptors.x509.authentication.handler.support

Performs CRL-based revocation checking by consulting resources defined in the CRLDistributionPoints extension field on the certificate.

CRLDistributionPointRevocationChecker(Cache) - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

Creates a new instance that uses the given cache instance for CRL caching.

CRLDistributionPointRevocationChecker(Cache, boolean) - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

Creates a new instance that uses the given cache instance for CRL caching.

CRLDistributionPointRevocationChecker(Cache, CRLFetcher) - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

Instantiates a new CRL distribution point revocation checker.

CRLFetcher - Interface in org.apereo.cas.adaptors.x509.authentication.handler.support

Defines operations needed to a fetch a CRL.

D

DEFAULT_REFRESH_INTERVAL - Static variable in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Default refresh interval is 1 hour.

DenyRevocationPolicy - Class in org.apereo.cas.adaptors.x509.authentication.handler.support

Implements a deny policy by throwing an exception.

DenyRevocationPolicy() - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.DenyRevocationPolicy

destroy() - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.PoolingLdaptiveResourceCRLFetcher

Close connection pull and shut down the executor.

doAuthentication(Credential) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

E

ExpiredCRLException - Exception in org.apereo.cas.adaptors.x509.authentication.handler.support

Exception describing an expired CRL condition.

ExpiredCRLException(String, ZonedDateTime) - Constructor for exception org.apereo.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

Creates a new instance describing a CRL that expired on the given date.

ExpiredCRLException(String, ChronoZonedDateTime, int) - Constructor for exception org.apereo.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

Creates a new instance describing a CRL that expired on a date that is more than leniency seconds beyond its expiration date.

ExpiredCRLException(String, ZonedDateTime, int) - Constructor for exception org.apereo.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

Creates a new instance describing a CRL that expired on a date that is more than leniency seconds beyond its expiration date.

ExpiredCRLException(String, Instant, int) - Constructor for exception org.apereo.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

Creates a new instance describing a CRL that expired on a date that is more than leniency seconds beyond its expiration date.

extractPrincipalId(Credential) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

F

fetch(Set<Resource>) - Method in interface org.apereo.cas.adaptors.x509.authentication.handler.support.CRLFetcher

Fetches a collection of crls from the specified resources and returns a map of CRLs each tracked by its url.

fetch(String) - Method in interface org.apereo.cas.adaptors.x509.authentication.handler.support.CRLFetcher

Fetches a single of crl from the specified resource and returns it.

fetch(URI) - Method in interface org.apereo.cas.adaptors.x509.authentication.handler.support.CRLFetcher

Fetches a single of crl from the specified resource and returns it.

fetch(URL) - Method in interface org.apereo.cas.adaptors.x509.authentication.handler.support.CRLFetcher

Fetches a single of crl from the specified resource and returns it.

fetch(Resource) - Method in interface org.apereo.cas.adaptors.x509.authentication.handler.support.CRLFetcher

Fetches a single of crl from the specified resource and returns it.

fetch(Resource) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

fetch(URI) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

fetch(URL) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

fetch(String) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

fetch(Set<Resource>) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLFetcher

fetch(String) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLFetcher

Fetch the resource.

fetch(Resource) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLFetcher

Fetch the resource.

fetch(URI) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLFetcher

Fetch the resource.

fetch(URL) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLFetcher

Fetch the resource.

fetchCRLFromLdap(Object) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

Downloads a CRL from given LDAP url.

fetchX509CRLFromAttribute(LdapAttribute) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

Gets x509 cRL from attribute.

fromCode(int) - Static method in enum org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException.Reason

Convert code to reason.

G

getCertificate() - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509CertificateCredential

getCertificateFactory() - Static method in class org.apereo.cas.adaptors.x509.util.CertUtils

Gets a certificate factory for creating X.509 artifacts.

getCertificates() - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509CertificateCredential

getCRL(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Gets the first fetched CRL for the given certificate.

getCRLs(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Gets the collection of CRLs for the given certificate.

getCRLs(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

Gets the collection of CRLs for the given certificate.

getCRLs(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

getExpirationDate() - Method in exception org.apereo.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getExpiredCRLPolicy() - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

getFetcher() - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

getId() - Method in exception org.apereo.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getId() - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509CertificateCredential

getLeniency() - Method in exception org.apereo.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getMessage() - Method in exception org.apereo.cas.adaptors.x509.authentication.handler.support.ExpiredCRLException

getMessage() - Method in exception org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

getReason() - Method in exception org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

Gets the reason.

getResources() - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

getRevocationDate() - Method in exception org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

Gets the revocation date.

getSerial() - Method in exception org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

Gets the serial.

getUnavailableCRLPolicy() - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

I

init() - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Init.

init() - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Initializes the process that periodically fetches CRL data.

init() - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

Init and ensure configuration is correct.

isExpired(X509CRL) - Static method in class org.apereo.cas.adaptors.x509.util.CertUtils

Determines whether the given CRL is expired by examining the nextUpdate field.

isExpired(X509CRL, ZonedDateTime) - Static method in class org.apereo.cas.adaptors.x509.util.CertUtils

Determines whether the given CRL is expired by comparing the nextUpdate field with a given date.

L

LdaptiveResourceCRLFetcher - Class in org.apereo.cas.adaptors.x509.authentication.handler.support.ldap

Fetches a CRL from an LDAP instance.

LdaptiveResourceCRLFetcher() - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

Serialization support.

LdaptiveResourceCRLFetcher(ConnectionConfig, SearchExecutor) - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

Instantiates a new Ldap resource cRL fetcher.

logger - Variable in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Logger instance.

logger - Variable in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLFetcher

Logger instance.

N

NoOpRevocationChecker - Class in org.apereo.cas.adaptors.x509.authentication.handler.support

NO-OP implementation certificate revocation checker.

NoOpRevocationChecker() - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.NoOpRevocationChecker

O

org.apereo.cas.adaptors.x509.authentication.handler.support - package org.apereo.cas.adaptors.x509.authentication.handler.support

org.apereo.cas.adaptors.x509.authentication.handler.support.ldap - package org.apereo.cas.adaptors.x509.authentication.handler.support.ldap

org.apereo.cas.adaptors.x509.authentication.principal - package org.apereo.cas.adaptors.x509.authentication.principal

org.apereo.cas.adaptors.x509.util - package org.apereo.cas.adaptors.x509.util

org.apereo.cas.adaptors.x509.web.flow - package org.apereo.cas.adaptors.x509.web.flow

P

performLdapSearch(String) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

Executes an LDAP search against the supplied URL.

PoolingLdaptiveResourceCRLFetcher - Class in org.apereo.cas.adaptors.x509.authentication.handler.support.ldap

Fetches a CRL from an LDAP instance.

PoolingLdaptiveResourceCRLFetcher() - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.PoolingLdaptiveResourceCRLFetcher

Serialization support.

PoolingLdaptiveResourceCRLFetcher(ConnectionConfig, SearchExecutor, BlockingConnectionPool) - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.PoolingLdaptiveResourceCRLFetcher

Instantiates a new Ldap resource cRL fetcher.

prepareConnectionFactory(String) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

Prepare a new LDAP connection.

prepareConnectionFactory(String) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.PoolingLdaptiveResourceCRLFetcher

R

readCertificate(InputStreamSource) - Static method in class org.apereo.cas.adaptors.x509.util.CertUtils

Read certificate.

resolvePrincipalInternal(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

Resolve principal internally, and return the id.

resolvePrincipalInternal(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509SerialNumberPrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509SubjectAlternativeNameUPNPrincipalResolver

Retrieves Subject Alternative Name UPN extension as a principal id String.

resolvePrincipalInternal(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509SubjectDNPrincipalResolver

resolvePrincipalInternal(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509SubjectPrincipalResolver

Replaces placeholders in the descriptor with values extracted from attribute values in relative distinguished name components of the DN.

ResourceCRLFetcher - Class in org.apereo.cas.adaptors.x509.authentication.handler.support

Handles the fetching of CRL objects based on resources.

ResourceCRLFetcher() - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLFetcher

Creates a new instance using the specified resources for CRL data.

ResourceCRLRevocationChecker - Class in org.apereo.cas.adaptors.x509.authentication.handler.support

CRL-based revocation checker that uses one or more CRL resources to fetch local or remote CRL data periodically.

ResourceCRLRevocationChecker(Resource) - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Creates a new instance using the specified resource for CRL data.

ResourceCRLRevocationChecker(Resource[]) - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Creates a new instance using the specified resources for CRL data.

ResourceCRLRevocationChecker(CRLFetcher, Resource[]) - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Instantiates a new Resource cRL revocation checker.

RevocationChecker - Interface in org.apereo.cas.adaptors.x509.authentication.handler.support

Strategy interface for checking revocation status of a certificate.

RevocationPolicy<T> - Interface in org.apereo.cas.adaptors.x509.authentication.handler.support

Strategy interface for enforcing various policy matters related to certificate revocation, such as what to do when revocation data is unavailable or stale.

RevokedCertificateException - Exception in org.apereo.cas.adaptors.x509.authentication.handler.support

Exception that describes a revoked X.509 certificate.

RevokedCertificateException(ZonedDateTime, BigInteger) - Constructor for exception org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

Instantiates a new revoked certificate exception.

RevokedCertificateException(ZonedDateTime, BigInteger, RevokedCertificateException.Reason) - Constructor for exception org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

Instantiates a new revoked certificate exception.

RevokedCertificateException(X509CRLEntry) - Constructor for exception org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException

Instantiates a new revoked certificate exception.

RevokedCertificateException.Reason - Enum in org.apereo.cas.adaptors.x509.authentication.handler.support

CRL revocation reason codes per RFC 3280.

S

searchExecutor - Variable in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

Search exec that looks for the attribute.

setCertificate(X509Certificate) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509CertificateCredential

setCheckAll(boolean) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Indicates whether all resources should be checked, or revocation should stop at the first resource that produces the cert.

setCheckKeyUsage(boolean) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setConnectionConfig(ConnectionConfig) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

setConnectionConfig(ConnectionConfig) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.PoolingLdaptiveResourceCRLFetcher

setConnectionPool(BlockingConnectionPool) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.PoolingLdaptiveResourceCRLFetcher

setDescriptor(String) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509SubjectPrincipalResolver

Sets the descriptor that describes for format of the principal ID to create from X.509 subject DN attributes.

setExpiredCRLPolicy(RevocationPolicy<X509CRL>) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Sets the policy to apply when CRL data is expired.

setExpiredCRLPolicy(RevocationPolicy) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

setExpiredCRLPolicy(RevocationPolicy) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

setMaxPathLength(int) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setMaxPathLengthAllowUnspecified(boolean) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setRefreshInterval(int) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Sets the interval at which CRL data should be reloaded from CRL resources.

setRequireKeyUsage(boolean) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setRevocationChecker(RevocationChecker) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

Sets the component responsible for evaluating certificate revocation status for client certificates presented to handler.

setSearchExecutor(SearchExecutor) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.LdaptiveResourceCRLFetcher

setSearchExecutor(SearchExecutor) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ldap.PoolingLdaptiveResourceCRLFetcher

setSerialNumberPrefix(String) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

Sets a prefix for the certificate serialnumber (default: "SERIALNUMBER=").

setSubjectDnPattern(String) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setThreshold(int) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

Sets the threshold period of time after which expired CRL data is rejected.

setThrowOnFetchFailure(boolean) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

Throws exceptions if fetching crl fails.

setTrustedIssuerDnPattern(String) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

setUnavailableCRLPolicy(RevocationPolicy<Void>) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.AbstractCRLRevocationChecker

Sets the policy to apply when CRL data is unavailable.

setUnavailableCRLPolicy(RevocationPolicy) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.CRLDistributionPointRevocationChecker

setUnavailableCRLPolicy(RevocationPolicy) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

setValueDelimiter(String) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

Sets a delimiter to separate the two certificate properties in the string.

shutdown() - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.ResourceCRLRevocationChecker

Shutdown scheduler.

supports(Credential) - Method in class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

supports(Credential) - Method in class org.apereo.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

T

ThresholdExpiredCRLRevocationPolicy - Class in org.apereo.cas.adaptors.x509.authentication.handler.support

Implements a policy to handle expired CRL data whereby expired data is permitted up to a threshold period of time but not afterward.

ThresholdExpiredCRLRevocationPolicy() - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.ThresholdExpiredCRLRevocationPolicy

toString(X509Certificate) - Static method in class org.apereo.cas.adaptors.x509.util.CertUtils

Creates a unique and human-readable representation of the given certificate.

U

UPN_OBJECTID - Static variable in class org.apereo.cas.adaptors.x509.authentication.principal.X509SubjectAlternativeNameUPNPrincipalResolver

ObjectID for upn altName for windows smart card logon.

V

valueOf(String) - Static method in enum org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException.Reason

Returns the enum constant of this type with the specified name.

values() - Static method in enum org.apereo.cas.adaptors.x509.authentication.handler.support.RevokedCertificateException.Reason

Returns an array containing the constants of this enum type, in the order they are declared.

X

X509_CERTIFICATE_TYPE - Static variable in class org.apereo.cas.adaptors.x509.util.CertUtils

X509 certificate type.

X509CertificateCredential - Class in org.apereo.cas.adaptors.x509.authentication.principal

An X.509 certificate credential.

X509CertificateCredential(X509Certificate[]) - Constructor for class org.apereo.cas.adaptors.x509.authentication.principal.X509CertificateCredential

Instantiates a new x509 certificate credential.

X509CertificateCredentialsNonInteractiveAction - Class in org.apereo.cas.adaptors.x509.web.flow

Concrete implementation of AbstractNonInteractiveCredentialsAction that obtains the X509 Certificates from the HttpServletRequest and places them in the X509CertificateCredential.

X509CertificateCredentialsNonInteractiveAction() - Constructor for class org.apereo.cas.adaptors.x509.web.flow.X509CertificateCredentialsNonInteractiveAction

X509CredentialsAuthenticationHandler - Class in org.apereo.cas.adaptors.x509.authentication.handler.support

Authentication Handler that accepts X509 Certificates, determines their validity and ensures that they were issued by a trusted issuer.

X509CredentialsAuthenticationHandler() - Constructor for class org.apereo.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler

X509SerialNumberAndIssuerDNPrincipalResolver - Class in org.apereo.cas.adaptors.x509.authentication.principal

This class is targeted at usage for mapping to an existing user record.

X509SerialNumberAndIssuerDNPrincipalResolver() - Constructor for class org.apereo.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

X509SerialNumberPrincipalResolver - Class in org.apereo.cas.adaptors.x509.authentication.principal

Returns a new principal based on the Sereial Number of the certificate.

X509SerialNumberPrincipalResolver() - Constructor for class org.apereo.cas.adaptors.x509.authentication.principal.X509SerialNumberPrincipalResolver

X509SubjectAlternativeNameUPNPrincipalResolver - Class in org.apereo.cas.adaptors.x509.authentication.principal

Credential to principal resolver that extracts Subject Alternative Name UPN extension from the provided certificate if available as a resolved principal id.

X509SubjectAlternativeNameUPNPrincipalResolver() - Constructor for class org.apereo.cas.adaptors.x509.authentication.principal.X509SubjectAlternativeNameUPNPrincipalResolver

X509SubjectDNPrincipalResolver - Class in org.apereo.cas.adaptors.x509.authentication.principal

Returns a principal based on the Subject DNs name.

X509SubjectDNPrincipalResolver() - Constructor for class org.apereo.cas.adaptors.x509.authentication.principal.X509SubjectDNPrincipalResolver

X509SubjectPrincipalResolver - Class in org.apereo.cas.adaptors.x509.authentication.principal

Credential to principal resolver that extracts one or more attribute values from the certificate subject DN and combines them with intervening delimiters.

X509SubjectPrincipalResolver() - Constructor for class org.apereo.cas.adaptors.x509.authentication.principal.X509SubjectPrincipalResolver

A C D E F G I L N O P R S T U V X