Package io.jans.fido2.service.mds

Class AttestationCertificateService

java.lang.Object

io.jans.fido2.service.mds.AttestationCertificateService

@ApplicationScoped
public class AttestationCertificateService
extends Object

Version:

May 08, 2020

Author:

Yuriy Movchan

Constructor Summary

Constructors

Constructor	Description
AttestationCertificateService()

Method Summary

Modifier and Type	Method	Description
List<X509Certificate>	getAppleRootCertificates()
String	getAttestationAuthenticatorName(AuthData authData, String origin)
List<X509Certificate>	getAttestationRootCertificates(com.fasterxml.jackson.databind.JsonNode metadataNode, List<X509Certificate> attestationCertificates)
List<X509Certificate>	getAttestationRootCertificates(AuthData authData, List<X509Certificate> attestationCertificates, String origin)
com.fasterxml.jackson.databind.JsonNode	getMetadataForU2fAuthenticator(String attestationCertificateKeyIdentifiers, String origin)
List<X509Certificate>	getRootCertificatesBySubjectDN(String subjectDN)	Get root certificates by subjectDN
void	init(Object init)
boolean	isAppleRootCaPresent()	Whether the Apple WebAuthn root CA was loaded at startup.
X509TrustManager	populateTrustManager(AuthData authData, List<X509Certificate> attestationCertificates, String origin)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AttestationCertificateService

public AttestationCertificateService()

Method Details

init

public void init(@Observes @ApplicationInitialized(jakarta.enterprise.context.ApplicationScoped.class)
 Object init)

getAppleRootCertificates

public List<X509Certificate> getAppleRootCertificates()

isAppleRootCaPresent

public boolean isAppleRootCaPresent()

Whether the Apple WebAuthn root CA was loaded at startup. When false, Apple anonymous attestation cannot be validated — a condition that is otherwise only visible as a startup log warning. #14602

getAttestationRootCertificates

public List<X509Certificate> getAttestationRootCertificates(com.fasterxml.jackson.databind.JsonNode metadataNode,
 List<X509Certificate> attestationCertificates)

getAttestationAuthenticatorName

public String getAttestationAuthenticatorName(AuthData authData,
 String origin)

getMetadataForU2fAuthenticator

public com.fasterxml.jackson.databind.JsonNode getMetadataForU2fAuthenticator(String attestationCertificateKeyIdentifiers,
 String origin)

getAttestationRootCertificates

public List<X509Certificate> getAttestationRootCertificates(AuthData authData,
 List<X509Certificate> attestationCertificates,
 String origin)

populateTrustManager

public X509TrustManager populateTrustManager(AuthData authData,
 List<X509Certificate> attestationCertificates,
 String origin)

getRootCertificatesBySubjectDN

public List<X509Certificate> getRootCertificatesBySubjectDN(String subjectDN)

Get root certificates by subjectDN

Parameters:

subjectDN - subjectDN

Returns:

List with certificates or empty