org.nhindirect.stagent.trust
Class TrustModel

java.lang.Object
  org.nhindirect.stagent.trust.TrustModel

public class TrustModel
extends Object

Default implementation of the trust model.

For outgoing messages each recipient is checked that it has a valid public certificate and that the certificate has a trusted anchor in the trust settings.

For incoming messages the sender's signature is validated and each recipient is checked to have a valid certificate. The sender is also validated to be trusted by the recipients.

Author:

Greg Meyer, Umesh Madan

Field Summary

static TrustModel

Default

Constructor Summary

TrustModel()
Constructs a model with a default validator.

TrustModel(TrustChainValidator validator)
Constructs a model with a provided chain validator.

Method Summary

void	enforce(IncomingMessage message) Enforces the trust policy an incoming message.
void	enforce(OutgoingMessage message) }
TrustChainValidator	getCertChainValidator() Gets the chain validator associated with this model.
org.nhindirect.policy.PolicyFilter	getPolicyFilter() Gets the policy filter for trust validation.
PolicyResolver	getTrustPolicyResolver() Gets the policy resolver for trust validation
void	setPolicyFilter(org.nhindirect.policy.PolicyFilter policyFilter) Sets the policy filter for trust validation.
void	setTrustPolicyResolver(PolicyResolver trustPolicyResolver) Sets the policy resolver for trust validation

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

Default

public static final TrustModel Default

Constructor Detail

TrustModel

public TrustModel()

Constructs a model with a default validator.

TrustModel

@Inject
public TrustModel(TrustChainValidator validator)

Constructs a model with a provided chain validator.

Parameters:

validator - The trust validator used to valid trust of a certificate with trust anchors.

Method Detail

getCertChainValidator

public TrustChainValidator getCertChainValidator()

Gets the chain validator associated with this model.

Returns:

The chain validator associated with this model.

setPolicyFilter

@Inject(optional=true)
public void setPolicyFilter(org.nhindirect.policy.PolicyFilter policyFilter)

Sets the policy filter for trust validation.

Parameters:

policyFilter - The filter used to check certificate for policy compliance.

getPolicyFilter

public org.nhindirect.policy.PolicyFilter getPolicyFilter()

Gets the policy filter for trust validation.

Returns:

policyFilter The filter used to check certificate for policy compliance.

setTrustPolicyResolver

@Inject(optional=true)
public void setTrustPolicyResolver(PolicyResolver trustPolicyResolver)

Sets the policy resolver for trust validation

Parameters:

trustPolicyResolver - The policy resolver used to finding certificate policies for trust validation.

getTrustPolicyResolver

public PolicyResolver getTrustPolicyResolver()

Gets the policy resolver for trust validation

Returns:

The policy resolver used to finding certificate policies for trust validation.

enforce

public void enforce(IncomingMessage message)

Enforces the trust policy an incoming message. Each domain recipient's trust status is set according the models trust policy.

enforce

public void enforce(OutgoingMessage message)

}