# Package org.opensaml.security.x509

@NonnullElements package org.opensaml.security.x509
X.509-based credential and trust classes.

Related Packages
Package
Description
org.opensaml.security
Interfaces and classes used in representing cryptographic credentials, evaluating the trustworthiness of security of tokens, etc.
org.opensaml.security.x509.impl
`TrustEngine` implementation classes related to PKIX.
org.opensaml.security.x509.tls
TLS security functionality.
Class
Description
BasicX509Credential
A basic implementation of `X509Credential`.
InternalX500DNHandler
Basic implementation of `X500DNHandler` which uses the internal built-in mechanisms provided by `X500Principal` directly.
PKIXTrustEngine<TokenType>
Trust engine that validates tokens using PKIX validation.
PKIXTrustEvaluator
An interface for classes which evaluate an `X509Credential` against a set of trusted `PKIXValidationInformation`, using PKIX validation rules.
PKIXValidationInformation
Source of PKIX validation information such as trust anchors and CRLs.
PKIXValidationInformationResolver
A resolver which uses `Criterion` to resolve `PKIXValidationInformation`, which will typically be used by PKIX-based trust engines.
PKIXValidationOptions
Options which may be supplied to influence the processing behavior of a `PKIXTrustEvaluator`.
TrustedNamesCriterion
A criterion implementation for conveying a dynamically-generated set of trusted names for PKIX validation purposes.
X500DNHandler
Interface for implementations which handle parsing and serialization of X.500 names represented by `X500Principal`.
X509Credential
An entity credential based on key material and other information (e.g.
X509DigestCriterion
An implementation of `Criterion` which specifies criteria based on the digest of an X.509 certificate.
X509IssuerSerialCriterion
An implementation of `Criterion` which specifies criteria based on X.509 certificate issuer name and serial number.
X509SubjectKeyIdentifierCriterion
An implementation of `Criterion` which specifies criteria based on X.509 certificate subject key identifier.
X509SubjectNameCriterion
An implementation of `Criterion` which specifies criteria based on X.509 certificate subject name.
X509Support
Utility class for working with X509 objects.