Package io.jans.fido2.service.verifier

Class CertificateVerifier

java.lang.Object

io.jans.fido2.service.verifier.CertificateVerifier

@ApplicationScoped
public class CertificateVerifier
extends Object

Constructor Summary

Constructors

Constructor	Description
CertificateVerifier()

Method Summary

Modifier and Type	Method	Description
void	checkForTrustedCertsInAttestation(List<X509Certificate> attestationCerts, List<X509Certificate> trustChainCertificates)
boolean	isSelfSigned(X509Certificate cert)
boolean	isSelfSigned(X509Certificate cert, PublicKey key)
X509Certificate	verifyAttestationCertificates(List<X509Certificate> certs, List<X509Certificate> trustChainCertificates)
void	verifyStatusAcceptable(String aaguid, com.fasterxml.jackson.databind.JsonNode metadataEntry)	Verify that the MDS entry contains a valid state

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertificateVerifier

public CertificateVerifier()

Method Detail

checkForTrustedCertsInAttestation

public void checkForTrustedCertsInAttestation(List<X509Certificate> attestationCerts,
                                              List<X509Certificate> trustChainCertificates)

verifyAttestationCertificates

public X509Certificate verifyAttestationCertificates(List<X509Certificate> certs,
                                                     List<X509Certificate> trustChainCertificates)

isSelfSigned

public boolean isSelfSigned(X509Certificate cert)

isSelfSigned

public boolean isSelfSigned(X509Certificate cert,
                            PublicKey key)

verifyStatusAcceptable

public void verifyStatusAcceptable(String aaguid,
                                   com.fasterxml.jackson.databind.JsonNode metadataEntry)
                            throws Fido2RuntimeException

Verify that the MDS entry contains a valid state

Parameters:

aaguid - AAGUID from MetadataBlobEntry

metadataEntry - MetadataBlobEntry

Throws:

Fido2RuntimeException - If it contains errors