org.apereo.cas.adaptors.x509.authentication.principal

Class X509SerialNumberAndIssuerDNPrincipalResolver

java.lang.Object

org.apereo.cas.authentication.principal.PersonDirectoryPrincipalResolver

org.apereo.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

org.apereo.cas.adaptors.x509.authentication.principal.X509SerialNumberAndIssuerDNPrincipalResolver

All Implemented Interfaces:

org.apereo.cas.authentication.principal.PrincipalResolver

@RefreshScope
 @Component(value="x509SerialNumberAndIssuerDNPrincipalResolver")
public class X509SerialNumberAndIssuerDNPrincipalResolver
extends AbstractX509PrincipalResolver

This class is targeted at usage for mapping to an existing user record. It can construct a highly-likely unique DN based on a certificate's serialnumber and its issuerDN. example: SERIALNUMBER=20267647332258882251479793556682961758, SERIALNUMBER=200301, CN=Citizen CA, C=BE see RFC3280 The combination of a certificate serial number and the issuerDN *should* be unique: - The certificate serialNumber is by its nature unique for a certain issuer. - The issuerDN is RECOMMENDED to be unique. Both the serial number and the issuerDN are REQUIRED in a certificate. Note: comparison rules state the compare should be case-insensitive. LDAP value description: EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 [=distinguishedName]

Since:

3.1

Field Summary

Fields inherited from class org.apereo.cas.authentication.principal.PersonDirectoryPrincipalResolver

attributeRepository, logger, principalAttributeName, principalFactory, returnNullIfNoAttributes

Constructor Summary

Constructors

Constructor and Description
X509SerialNumberAndIssuerDNPrincipalResolver()

Method Summary

Modifier and Type	Method and Description
protected java.lang.String	resolvePrincipalInternal(java.security.cert.X509Certificate certificate) Resolve principal internally, and return the id.
void	setSerialNumberPrefix(java.lang.String serialNumberPrefix) Sets a prefix for the certificate serialnumber (default: "SERIALNUMBER=").
void	setValueDelimiter(java.lang.String valueDelimiter) Sets a delimiter to separate the two certificate properties in the string.

Methods inherited from class org.apereo.cas.adaptors.x509.authentication.principal.AbstractX509PrincipalResolver

extractPrincipalId, supports

Methods inherited from class org.apereo.cas.authentication.principal.PersonDirectoryPrincipalResolver

convertPersonAttributesToPrincipal, resolve, retrievePersonAttributes, setAttributeRepository, setPrincipalAttributeName, setPrincipalFactory, setReturnNullIfNoAttributes

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

X509SerialNumberAndIssuerDNPrincipalResolver

public X509SerialNumberAndIssuerDNPrincipalResolver()

Method Detail

setSerialNumberPrefix

@Autowired
public void setSerialNumberPrefix(@Value(value="${cas.x509.authn.principal.serial.no.prefix:SERIALNUMBER=}")
                                              java.lang.String serialNumberPrefix)

Sets a prefix for the certificate serialnumber (default: "SERIALNUMBER=").

Parameters:

serialNumberPrefix - The serialNumberPrefix to set.

setValueDelimiter

@Autowired
public void setValueDelimiter(@Value(value="${cas.x509.authn.principal.value.delim:, }")
                                          java.lang.String valueDelimiter)

Sets a delimiter to separate the two certificate properties in the string. (default: ", ")

Parameters:

valueDelimiter - The valueDelimiter to set.

resolvePrincipalInternal

protected java.lang.String resolvePrincipalInternal(java.security.cert.X509Certificate certificate)

Description copied from class: AbstractX509PrincipalResolver

Resolve principal internally, and return the id.

Specified by:

resolvePrincipalInternal in class AbstractX509PrincipalResolver

Parameters:

certificate - the certificate

Returns:

the string