Package org.apache.cxf.sts.service
Class EncryptionProperties
java.lang.Object
org.apache.cxf.sts.service.EncryptionProperties
This class contains various configuration properties that can be used to encrypt an issued token.
The encryptionName property must be specified (corresponding to the alias to be used to select a
certificate from a KeyStore) - everything else is optional.
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionGet the list of accepted encryption algorithms.Get the list of accepted key-wrap algorithms.Get the encryption algorithm to useGet the alias used to select a certificate for encryptionintGet the (WSS4J) key identifier type used to reference a certificate for encryptionGet the encryption key-wrap algorithm to usevoidsetAcceptedEncryptionAlgorithms(List<String> acceptedEncryptionAlgorithms) Set the list of accepted encryption algorithms.voidsetAcceptedKeyWrapAlgorithms(List<String> acceptedKeyWrapAlgorithms) Set the list of accepted key-wrap algorithms.voidsetEncryptionAlgorithm(String encryptionAlgorithm) Set the encryption algorithm to usevoidsetEncryptionName(String encryptionName) Set the alias used to select a certificate for encryptionvoidsetKeyIdentifierType(int keyIdentifierType) Set the (WSS4J) key identifier type used to reference a certificate for encryptionvoidsetKeyWrapAlgorithm(String keyWrapAlgorithm) Set the encryption key-wrap algorithm to use
-
Constructor Details
-
EncryptionProperties
public EncryptionProperties()
-
-
Method Details
-
getEncryptionAlgorithm
Get the encryption algorithm to use -
setEncryptionAlgorithm
Set the encryption algorithm to use -
getKeyWrapAlgorithm
Get the encryption key-wrap algorithm to use -
setKeyWrapAlgorithm
Set the encryption key-wrap algorithm to use -
getKeyIdentifierType
public int getKeyIdentifierType()Get the (WSS4J) key identifier type used to reference a certificate for encryption -
setKeyIdentifierType
public void setKeyIdentifierType(int keyIdentifierType) Set the (WSS4J) key identifier type used to reference a certificate for encryption -
getEncryptionName
Get the alias used to select a certificate for encryption -
setEncryptionName
Set the alias used to select a certificate for encryption -
setAcceptedEncryptionAlgorithms
Set the list of accepted encryption algorithms. A request can contain a wst:EncryptionAlgorithm uri to use to encrypt an issued token. The algorithm specified must be contained in this list. The default algorithms are 3-DES, AES-128, AES-128 GCM, AES-192, AES-192 GCM, AES-256 and AES-256 GCM. -
getAcceptedEncryptionAlgorithms
Get the list of accepted encryption algorithms. A request can contain a wst:EncryptionAlgorithm uri to use to encrypt an issued token. The algorithm specified must be contained in this list. The default algorithms are 3-DES, AES-128, AES-128 GCM, AES-192, AES-192 GCM, AES-256 and AES-256 GCM. -
setAcceptedKeyWrapAlgorithms
Set the list of accepted key-wrap algorithms. A request can contain a wst:KeyWrapAlgorithm uri for use in encrypting an issued token. The algorithm specified must be contained in this list. The default algorithms are RSA 1.5 and RSA OEP. -
getAcceptedKeyWrapAlgorithms
Get the list of accepted key-wrap algorithms. A request can contain a wst:KeyWrapAlgorithm uri for use in encrypting an issued token. The algorithm specified must be contained in this list. The default algorithms are RSA 1.5 and RSA OEP.
-