net.shibboleth.tool.xmlsectool

Class Blacklist

java.lang.Object

net.shibboleth.tool.xmlsectool.Blacklist

public class Blacklist
extends Object

A blacklist of digest and signature algorithms we should not accept during signature verification.

Field Summary

Fields

Modifier and Type	Field and Description
private Set<String>	digestBlacklist Ordered set of blacklisted digest algorithm URIs.
private Set<String>	signatureBlacklist Ordered set of blacklisted signature algorithm URIs.

Constructor Summary

Constructors

Constructor and Description
Blacklist() Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
void	addDigest(DigestChoice digestChoice) Blacklist the digest and signature algorithms associated with a DigestChoice.
private void	addDigestAlgorithm(String uri) Blacklist an individual digest algorithm.
private void	addSignatureAlgorithm(String uri) Blacklist an individual signature algorithm.
void	clear() Empties the digest and signature blacklists.
Collection<String>	getDigestBlacklist() Returns an unmodifiable view on the set of blacklisted digest algorithms.
Collection<String>	getSignatureBlacklist() Returns an unmodifiable view on the set of blacklisted signature algorithms.
boolean	isBlacklistedDigest(String alg) Returns true if the indicated algorithm URI is blacklisted for use as a digest algorithm.
boolean	isBlacklistedSignature(String alg) Returns true if the indicated algorithm URI is blacklisted for use as a signature algorithm.
void	list(PrintStream out) List out the contents of the blacklist.
void	removeDigest(DigestChoice digestChoice) Whitelist the digest and signature algorithms associated with a DigestChoice.
private void	removeDigestAlgorithm(String uri) Whitelist an individual digest algorithm.
private void	removeSignatureAlgorithm(String uri) Whitelist an individual signature algorithm.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

digestBlacklist

private final Set<String> digestBlacklist

Ordered set of blacklisted digest algorithm URIs.

signatureBlacklist

private final Set<String> signatureBlacklist

Ordered set of blacklisted signature algorithm URIs.

Constructor Detail

Blacklist

public Blacklist()

Constructor. Initializes the blacklist with those algorithms that should be blacklisted by default.

Method Detail

addDigestAlgorithm

private void addDigestAlgorithm(String uri)

Blacklist an individual digest algorithm.

Parameters:

uri - algorithm URI to blacklist

removeDigestAlgorithm

private void removeDigestAlgorithm(String uri)

Whitelist an individual digest algorithm.

Parameters:

uri - algorithm URI to whitelist

addSignatureAlgorithm

private void addSignatureAlgorithm(String uri)

Blacklist an individual signature algorithm.

Parameters:

uri - algorithm URI to blacklist

removeSignatureAlgorithm

private void removeSignatureAlgorithm(String uri)

Whitelist an individual signature algorithm.

Parameters:

uri - algorithm URI to whitelist

addDigest

public void addDigest(DigestChoice digestChoice)

Blacklist the digest and signature algorithms associated with a DigestChoice.

Parameters:

digestChoice - DigestChoice to add to blacklist

removeDigest

public void removeDigest(DigestChoice digestChoice)

Whitelist the digest and signature algorithms associated with a DigestChoice.

Parameters:

digestChoice - DigestChoice to remove from blacklist

isBlacklistedDigest

public boolean isBlacklistedDigest(String alg)

Returns true if the indicated algorithm URI is blacklisted for use as a digest algorithm.

Parameters:

alg - digest algorithm URI to check

Returns:

true if the algorithm is blacklisted

isBlacklistedSignature

public boolean isBlacklistedSignature(String alg)

Returns true if the indicated algorithm URI is blacklisted for use as a signature algorithm.

Parameters:

alg - signature algorithm URI to check

Returns:

true if the algorithm is blacklisted

getDigestBlacklist

public Collection<String> getDigestBlacklist()

Returns an unmodifiable view on the set of blacklisted digest algorithms.

Returns:

set of blacklisted algorithms

getSignatureBlacklist

public Collection<String> getSignatureBlacklist()

Returns an unmodifiable view on the set of blacklisted signature algorithms.

Returns:

set of blacklisted algorithms

clear

public void clear()

Empties the digest and signature blacklists.

list

public void list(PrintStream out)

List out the contents of the blacklist.

Parameters:

out - stream to send the listing to