SecurityPolicyRule.h File Reference

Policy rules that secure and authenticate bindings. More...

#include <saml/binding/SecurityPolicy.h>


Classes

class  opensaml::SecurityPolicyRule
 A rule that a protocol request and message must meet in order to be valid and secure. More...

Namespaces

namespace  opensaml
 Common classes for OpenSAML library.

Defines

#define CLIENTCERTAUTH_POLICY_RULE   "ClientCertAuth"
 SecurityPolicyRule for TLS client certificate authentication.
#define MESSAGEFLOW_POLICY_RULE   "MessageFlow"
 SecurityPolicyRule for replay detection and freshness checking.
#define NULLSECURITY_POLICY_RULE   "NullSecurity"
 SecurityPolicyRule for disabling security.
#define SIMPLESIGNING_POLICY_RULE   "SimpleSigning"
 SecurityPolicyRule for protocol message "blob" signing.
#define XMLSIGNING_POLICY_RULE   "XMLSigning"
 SecurityPolicyRule for protocol message XML signing.

Functions

void opensaml::registerSecurityPolicyRules ()
 Registers SecurityPolicyRule plugins into the runtime.


Detailed Description

Policy rules that secure and authenticate bindings.


Define Documentation

#define CLIENTCERTAUTH_POLICY_RULE   "ClientCertAuth"

SecurityPolicyRule for TLS client certificate authentication.

Evaluates client certificates against the issuer's metadata.

#define MESSAGEFLOW_POLICY_RULE   "MessageFlow"

SecurityPolicyRule for replay detection and freshness checking.

A ReplayCache instance must be available from the runtime, unless a "checkReplay" XML attribute is set to "0" or "false" when instantiating the policy rule.

Messages must have been issued in the past, but no more than 60 seconds ago, or up to a number of seconds set by an "expires" XML attribute when instantiating the policy rule.

#define NULLSECURITY_POLICY_RULE   "NullSecurity"

SecurityPolicyRule for disabling security.

Allows the message issuer to be authenticated regardless of the message or transport. Used mainly for debugging or in situations that I wouldn't care to comment on.

#define SIMPLESIGNING_POLICY_RULE   "SimpleSigning"

SecurityPolicyRule for protocol message "blob" signing.

Allows the message issuer to be authenticated using a non-XML digital signature over the message body. The transport layer is not considered.

#define XMLSIGNING_POLICY_RULE   "XMLSigning"

SecurityPolicyRule for protocol message XML signing.

Allows the message issuer to be authenticated using an XML digital signature over the message. The transport layer is not considered.


Generated on Sun May 3 15:10:22 2009 for opensaml-2.1 by  doxygen 1.5.8