com.yubico.webauthn.attestation.resolver

Class CompositeTrustResolver

java.lang.Object

com.yubico.webauthn.attestation.resolver.CompositeTrustResolver

All Implemented Interfaces:

TrustResolver

public final class CompositeTrustResolver
extends java.lang.Object
implements TrustResolver

A TrustResolver whose resolveTrustAnchor(X509Certificate, List) method calls TrustResolver.resolveTrustAnchor(X509Certificate, List) on each of the subordinate TrustResolvers in turn, and returns the first non-null result.

Constructor Summary

Constructors

Constructor and Description
CompositeTrustResolver(java.util.List<TrustResolver> resolvers)

Method Summary

Modifier and Type	Method and Description
java.util.Optional<java.security.cert.X509Certificate>	resolveTrustAnchor(java.security.cert.X509Certificate attestationCertificate, java.util.List<java.security.cert.X509Certificate> certificateChain) Resolve a trusted root anchor for the given attestation certificate and certificate chain

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.yubico.webauthn.attestation.TrustResolver

resolveTrustAnchor

Constructor Detail

CompositeTrustResolver

public CompositeTrustResolver(java.util.List<TrustResolver> resolvers)

Method Detail

resolveTrustAnchor

public java.util.Optional<java.security.cert.X509Certificate> resolveTrustAnchor(java.security.cert.X509Certificate attestationCertificate,
                                                                                 java.util.List<java.security.cert.X509Certificate> certificateChain)

Description copied from interface: TrustResolver

Resolve a trusted root anchor for the given attestation certificate and certificate chain

Specified by:

resolveTrustAnchor in interface TrustResolver

Parameters:

attestationCertificate - The attestation certificate

certificateChain - Zero or more certificates, of which the first has signed attestationCertificate and each of the remaining certificates has signed the certificate preceding it.

Returns:

A trusted root certificate from which there is a signature path to attestationCertificate, if one exists.