Package org.apache.rampart.policy.model
Class RampartConfig
java.lang.Object
org.apache.rampart.policy.model.RampartConfig
- All Implemented Interfaces:
org.apache.neethi.Assertion,org.apache.neethi.PolicyComponent
Rampart policy model bean to capture Rampart configuration assertion info.
Example:
<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy"> <ramp:user>alice</ramp:user> <ramp:encryptionUser>bob</ramp:encryptionUser> <ramp:passwordCallbackClass>org.apache.axis2.security.PWCallback</ramp:passwordCallbackClass> <ramp:policyValidatorCbClass>org.apache.axis2.security.ramp:PolicyValidatorCallbackHandler</ramp:policyValidatorCbClass> <ramp:timestampPrecisionInMs>true</timestampPrecisionInMs> <ramp:timestampTTL>300</ramp:timestampTTL> <ramp:timestampMaxSkew>0</ramp:timestampMaxSkew> <ramp:tokenStoreClass>org.apache.rahas.StorageImpl</ramp:tokenStoreClass> <ramp:nonceLifeTime>org.apache.rahas.StorageImpl</ramp:nonceLifeTime> <ramp:disableBSPEnforcement>false</ramp:disableBSPEnforcement> <ramp:signatureCrypto> <ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin"> <ramp:property name="keystoreType">pkcs12</ramp:property> <ramp:property name="keystoreFile">/path/to/file.pkcs12</ramp:property> <ramp:property name="keystorePassword">password</ramp:property> </ramp:crypto> </ramp:signatureCrypto> <ramp:tokenIssuerPolicy> <wsp:Policy> .... .... </wsp:Policy> </ramp:tokenIssuerPolicy> </ramp:RampartConfig>
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final intstatic final intstatic final booleanstatic final intstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final String -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionbooleanequal(org.apache.neethi.PolicyComponent policyComponent) getName()intshortgetType()getUser()intintgetUtTTL()booleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanorg.apache.neethi.PolicyComponentvoidserialize(XMLStreamWriter writer) voidsetAllowNamespaceQualifiedPasswordTypes(boolean allowNamespaceQualifiedPasswordTypes) voidsetAllowNamespaceQualifiedPasswordTypes(String allowNamespaceQualifiedPasswordTypes) voidsetAllowRSA15KeyTransportAlgorithm(boolean allowRSA15KeyTransportAlgorithm) voidsetAllowRSA15KeyTransportAlgorithm(String allowRSA15KeyTransportAlgorithm) voidsetAllowUsernameTokenNoPassword(boolean allowUsernameTokenNoPassword) voidsetAllowUsernameTokenNoPassword(String allowUsernameTokenNoPassword) voidsetDecCryptoConfig(CryptoConfig decCrypto) voidsetDefaultTimestampPrecisionInMs(boolean isTimestampPrecisionInMs) voidsetDisableBSPEnforcement(boolean disableBSPEnforcement) voidsetDisableBSPEnforcement(String disableBSPEnforcement) voidsetEncodePasswords(boolean encodePasswords) voidsetEncodePasswords(String encodePasswords) voidsetEncrCryptoConfig(CryptoConfig encrCrypto) voidsetEncryptionUser(String encryptionUser) voidsetHandleCustomPasswordTypes(boolean handleCustomPasswordTypes) voidsetHandleCustomPasswordTypes(String handleCustomPasswordTypes) voidsetKerberosConfig(KerberosConfig kerberosConfig) voidsetMustUnderstandSecurityHeader(boolean mustUnderstandSecurityHeader) voidsetMustUnderstandSecurityHeader(String mustUnderstandSecurityHeader) voidsetNonceLifeTime(String nonceLife) voidsetOptimizeParts(OptimizePartsConfig optimizeParts) voidsetPolicyValidatorCbClass(String policyValidatorCbClass) voidsetPwCbClass(String pwCbClass) voidsetRampartConfigCbClass(String rampartConfigCbClass) voidsetSigCryptoConfig(CryptoConfig sigCryptoConfig) voidsetSSLConfig(SSLConfig sslConfig) voidsetStsAlias(String stsAlias) voidsetStsCryptoConfig(CryptoConfig stsCryptoConfig) voidsetTimeStampFutureTTL(int timestampFutureTTL) voidsetTimeStampFutureTTL(String timestampFutureTTL) voidsetTimestampMaxSkew(String timestampMaxSkew) voidsetTimestampPrecisionInMs(String timestampPrecisionInMs) voidsetTimeStampStrict(boolean timestampStrict) voidsetTimeStampStrict(String timestampStrict) voidsetTimestampTTL(String timestampTTL) voidsetTokenStoreClass(String tokenStoreClass) voidvoidsetUserCertAlias(String userCertAlias) voidsetUtFutureTTL(int utFutureTTL) voidsetUtFutureTTL(String utFutureTTL) voidsetUtTTL(int utTTL) voidvoidsetValidateSamlSubjectConfirmation(boolean validateSamlSubjectConfirmation) voidsetValidateSamlSubjectConfirmation(String validateSamlSubjectConfirmation)
-
Field Details
-
DEFAULT_TIMESTAMP_PRECISION_IN_MS
public static final boolean DEFAULT_TIMESTAMP_PRECISION_IN_MS- See Also:
-
DEFAULT_TIMESTAMP_TTL
public static final int DEFAULT_TIMESTAMP_TTL- See Also:
-
DEFAULT_TIMESTAMP_MAX_SKEW
public static final int DEFAULT_TIMESTAMP_MAX_SKEW- See Also:
-
DEFAULT_NONCE_LIFE_TIME
public static final int DEFAULT_NONCE_LIFE_TIME- See Also:
-
NS
- See Also:
-
PREFIX
- See Also:
-
RAMPART_CONFIG_LN
- See Also:
-
USER_LN
- See Also:
-
USER_CERT_ALIAS_LN
- See Also:
-
ENCRYPTION_USER_LN
- See Also:
-
STS_ALIAS_LN
- See Also:
-
PW_CB_CLASS_LN
- See Also:
-
POLICY_VALIDATOR_CB_CLASS_LN
- See Also:
-
RAMPART_CONFIG_CB_CLASS_LN
- See Also:
-
SIG_CRYPTO_LN
- See Also:
-
ENCR_CRYPTO_LN
- See Also:
-
DEC_CRYPTO_LN
- See Also:
-
STS_CRYPTO_LN
- See Also:
-
TS_TTL_LN
- See Also:
-
TS_MAX_SKEW_LN
- See Also:
-
TOKEN_STORE_CLASS_LN
- See Also:
-
TIMESTAMP_STRICT_LN
- See Also:
-
TIMESTAMP_PRECISION_IN_MS_LN
- See Also:
-
NONCE_LIFE_TIME
- See Also:
-
OPTIMISE_PARTS
- See Also:
-
SSL_CONFIG
- See Also:
-
KERBEROS_CONFIG
- See Also:
-
DISABLE_BSP_ENFORCEMENT_LN
- See Also:
-
ALLOW_USERNAME_TOKEN_NO_PASSWORD_LN
- See Also:
-
TIMESTAMP_FUTURE_TTL_LN
- See Also:
-
UT_TTL_LN
- See Also:
-
UT_FUTURE_TTL_LN
- See Also:
-
HANDLE_CUSTOM_PASSWORD_TYPES_LN
- See Also:
-
ALLOW_NAMESPACE_QUALIFIED_PASSWORDTYPES_LN
- See Also:
-
ENCODE_PASSWORDS_LN
- See Also:
-
VALIDATE_SAML_SUBJECT_CONFIRMATION_LN
- See Also:
-
ALLOW_RSA15_KEY_TRANSPORT_ALGORITHM_LN
- See Also:
-
MUST_UNDERSTAND_SECURITY_HEADER_LN
- See Also:
-
-
Constructor Details
-
RampartConfig
public RampartConfig()
-
-
Method Details
-
getKerberosConfig
-
setKerberosConfig
-
getSSLConfig
-
setSSLConfig
-
getTokenStoreClass
- Returns:
- Returns the tokenStoreClass.
-
setTokenStoreClass
- Parameters:
tokenStoreClass- The tokenStoreClass to set.
-
getNonceLifeTime
- Returns:
- Returns the life time of a nonce in seconds.
-
setNonceLifeTime
- Parameters:
nonceLife- The life time of a nonce to set (in seconds).
-
getDecCryptoConfig
-
setDecCryptoConfig
-
getEncrCryptoConfig
-
setEncrCryptoConfig
-
getEncryptionUser
-
setEncryptionUser
-
getPwCbClass
-
setPwCbClass
-
getPolicyValidatorCbClass
-
setPolicyValidatorCbClass
-
getRampartConfigCbClass
-
setRampartConfigCbClass
-
getSigCryptoConfig
-
setSigCryptoConfig
-
getUser
-
setUser
-
getUserCertAlias
-
setUserCertAlias
-
getName
- Specified by:
getNamein interfaceorg.apache.neethi.Assertion
-
isOptional
public boolean isOptional()- Specified by:
isOptionalin interfaceorg.apache.neethi.Assertion
-
isIgnorable
public boolean isIgnorable()- Specified by:
isIgnorablein interfaceorg.apache.neethi.Assertion
-
normalize
public org.apache.neethi.PolicyComponent normalize()- Specified by:
normalizein interfaceorg.apache.neethi.Assertion
-
serialize
- Specified by:
serializein interfaceorg.apache.neethi.Assertion- Specified by:
serializein interfaceorg.apache.neethi.PolicyComponent- Throws:
XMLStreamException
-
equal
public boolean equal(org.apache.neethi.PolicyComponent policyComponent) - Specified by:
equalin interfaceorg.apache.neethi.PolicyComponent
-
getType
public short getType()- Specified by:
getTypein interfaceorg.apache.neethi.PolicyComponent
-
isTimestampPrecisionInMs
public boolean isTimestampPrecisionInMs() -
isDefaultTimestampPrecisionInMs
public boolean isDefaultTimestampPrecisionInMs() -
setTimestampPrecisionInMs
-
setDefaultTimestampPrecisionInMs
public void setDefaultTimestampPrecisionInMs(boolean isTimestampPrecisionInMs) -
getTimestampTTL
- Returns:
- Returns the timestampTTL.
-
setTimestampTTL
- Parameters:
timestampTTL- The timestampTTL to set.
-
getTimestampMaxSkew
- Returns:
- Returns the timestampMaxSkew.
-
setTimestampMaxSkew
- Parameters:
timestampMaxSkew- The timestampMaxSkew to set.
-
getOptimizeParts
-
setOptimizeParts
-
getStsAlias
-
setStsAlias
-
getStsCryptoConfig
-
setStsCryptoConfig
-
isTimeStampStrict
public boolean isTimeStampStrict() -
setTimeStampStrict
-
setTimeStampStrict
public void setTimeStampStrict(boolean timestampStrict) -
isDisableBSPEnforcement
public boolean isDisableBSPEnforcement() -
setDisableBSPEnforcement
-
setDisableBSPEnforcement
public void setDisableBSPEnforcement(boolean disableBSPEnforcement) -
isAllowUsernameTokenNoPassword
public boolean isAllowUsernameTokenNoPassword() -
setAllowUsernameTokenNoPassword
-
setAllowUsernameTokenNoPassword
public void setAllowUsernameTokenNoPassword(boolean allowUsernameTokenNoPassword) -
getTimeStampFutureTTL
public int getTimeStampFutureTTL() -
setTimeStampFutureTTL
-
setTimeStampFutureTTL
public void setTimeStampFutureTTL(int timestampFutureTTL) -
getUtTTL
public int getUtTTL() -
setUtTTL
-
setUtTTL
public void setUtTTL(int utTTL) -
getUtFutureTTL
public int getUtFutureTTL() -
setUtFutureTTL
-
setUtFutureTTL
public void setUtFutureTTL(int utFutureTTL) -
isHandleCustomPasswordTypes
public boolean isHandleCustomPasswordTypes() -
setHandleCustomPasswordTypes
-
setHandleCustomPasswordTypes
public void setHandleCustomPasswordTypes(boolean handleCustomPasswordTypes) -
isAllowNamespaceQualifiedPasswordTypes
public boolean isAllowNamespaceQualifiedPasswordTypes() -
setAllowNamespaceQualifiedPasswordTypes
-
setAllowNamespaceQualifiedPasswordTypes
public void setAllowNamespaceQualifiedPasswordTypes(boolean allowNamespaceQualifiedPasswordTypes) -
isEncodePasswords
public boolean isEncodePasswords() -
setEncodePasswords
-
setEncodePasswords
public void setEncodePasswords(boolean encodePasswords) -
isValidateSamlSubjectConfirmation
public boolean isValidateSamlSubjectConfirmation() -
setValidateSamlSubjectConfirmation
-
setValidateSamlSubjectConfirmation
public void setValidateSamlSubjectConfirmation(boolean validateSamlSubjectConfirmation) -
isAllowRSA15KeyTransportAlgorithm
public boolean isAllowRSA15KeyTransportAlgorithm() -
setAllowRSA15KeyTransportAlgorithm
-
setAllowRSA15KeyTransportAlgorithm
public void setAllowRSA15KeyTransportAlgorithm(boolean allowRSA15KeyTransportAlgorithm) -
isMustUnderstandSecurityHeader
public boolean isMustUnderstandSecurityHeader() -
setMustUnderstandSecurityHeader
-
setMustUnderstandSecurityHeader
public void setMustUnderstandSecurityHeader(boolean mustUnderstandSecurityHeader)
-