Skip to content

Instantly share code, notes, and snippets.

@serac
serac / PolicyTrustEngine.java
Last active August 29, 2015 14:20
Custom OpenSAML trust engine for enforcing certificate policies are satisfied
package edu.vt.middleware.idp.authn;
import net.shibboleth.utilities.java.support.annotation.constraint.NotEmpty;
import net.shibboleth.utilities.java.support.logic.Constraint;
import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
import org.bouncycastle.asn1.x509.PolicyInformation;
import org.cryptacular.x509.ExtensionReader;
import org.opensaml.security.trust.TrustEngine;
import org.opensaml.security.x509.X509Credential;
import org.slf4j.Logger;