com.yubico.webauthn.attestation

Interface TrustResolver

All Known Implementing Classes:

CompositeTrustResolver, SimpleTrustResolver

public interface TrustResolver

Method Summary

Modifier and Type	Method and Description
default java.util.Optional<java.security.cert.X509Certificate>	resolveTrustAnchor(java.security.cert.X509Certificate attestationCertificate) Alias of resolveTrustAnchor(attestationCertificate, Collections.emptyList()).
java.util.Optional<java.security.cert.X509Certificate>	resolveTrustAnchor(java.security.cert.X509Certificate attestationCertificate, java.util.List<java.security.cert.X509Certificate> caCertificateChain) Resolve a trusted root anchor for the given attestation certificate and certificate chain

Method Detail

resolveTrustAnchor

default java.util.Optional<java.security.cert.X509Certificate> resolveTrustAnchor(java.security.cert.X509Certificate attestationCertificate)

Alias of resolveTrustAnchor(attestationCertificate, Collections.emptyList()).

See Also:

resolveTrustAnchor(X509Certificate, List)

resolveTrustAnchor

java.util.Optional<java.security.cert.X509Certificate> resolveTrustAnchor(java.security.cert.X509Certificate attestationCertificate,
                                                                          java.util.List<java.security.cert.X509Certificate> caCertificateChain)

Resolve a trusted root anchor for the given attestation certificate and certificate chain

Parameters:

attestationCertificate - The attestation certificate

caCertificateChain - Zero or more certificates, of which the first has signed attestationCertificate and each of the remaining certificates has signed the certificate preceding it.

Returns:

A trusted root certificate from which there is a signature path to attestationCertificate, if one exists.