se.litsec.swedisheid.opensaml.saml2.signservice

Class SignMessageDecrypter

java.lang.Object

se.litsec.swedisheid.opensaml.saml2.signservice.SignMessageDecrypter

public class SignMessageDecrypter
extends Object

A bean for decrypting encrypted messages within SignMessage objects.

Author:

Martin Lindström (martin.lindstrom@litsec.se)

Constructor Summary

Constructors

Constructor and Description
SignMessageDecrypter(Credential decryptionCredential) Constructor given the credential to use to decrypt the messages (certificate or key pair)
SignMessageDecrypter(KeyInfoCredentialResolver keyEncryptionKeyResolver) Constructor accepting a key encryption key resolver.
SignMessageDecrypter(List<Credential> decryptionCredentials) Constructor accepting several credentials (certificates or key pairs) to be used when decrypting.

Method Summary

Modifier and Type	Method and Description
Message	decrypt(SignMessage signMessage) Decrypts the encrypted message of a SignMessage and returns the cleartext Message.
void	setBlacklistedAlgorithms(Collection<String> blacklistedAlgorithms) Assigns a list of black listed algorithms
void	setWhitelistedAlgorithms(Collection<String> whitelistedAlgorithms) Assigns a list of white listed algorithms

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SignMessageDecrypter

public SignMessageDecrypter(Credential decryptionCredential)

Constructor given the credential to use to decrypt the messages (certificate or key pair)

Parameters:

decryptionCredential - decryption credential

SignMessageDecrypter

public SignMessageDecrypter(List<Credential> decryptionCredentials)

Constructor accepting several credentials (certificates or key pairs) to be used when decrypting. This may be useful after a key rollover.

Parameters:

decryptionCredentials - decryption credentials

SignMessageDecrypter

public SignMessageDecrypter(KeyInfoCredentialResolver keyEncryptionKeyResolver)

Constructor accepting a key encryption key resolver.

Parameters:

keyEncryptionKeyResolver - the resolver

Method Detail

decrypt

public Message decrypt(SignMessage signMessage)
                throws DecryptionException

Decrypts the encrypted message of a SignMessage and returns the cleartext Message.

Parameters:

signMessage - the element holding the encrypted message

Returns:

a cleartext Message element

Throws:

DecryptionException - for decryption errors

setBlacklistedAlgorithms

public void setBlacklistedAlgorithms(Collection<String> blacklistedAlgorithms)

Assigns a list of black listed algorithms

Parameters:

blacklistedAlgorithms - non allowed algorithms

setWhitelistedAlgorithms

public void setWhitelistedAlgorithms(Collection<String> whitelistedAlgorithms)

Assigns a list of white listed algorithms

Parameters:

whitelistedAlgorithms - white listed algorithms