eu.emi.security.authn.x509.helpers.ns

Interface NamespacePolicy

All Known Implementing Classes:

OpensslNamespacePolicyImpl

public interface NamespacePolicy

Represents a namespace policy, i.e. defines which subject DNs are permitted or denied for an issuer.

Author:

K. Benedyczak

Method Summary

Modifier and Type	Method and Description
String	getDefinedFor()
String	getIdentification()
String	getIssuer()
boolean	isPermit()
boolean	isSubjectMatching(X500Principal subject) Checks whether the given subject name is matching this policy.

Method Detail

getIssuer

String getIssuer()

Returns:

the issuer

isPermit

boolean isPermit()

Returns:

whether the policy is permit or deny

getIdentification

String getIdentification()

Returns:

the identification

getDefinedFor

String getDefinedFor()

Returns:

hash of the CA where the policy is defined. It can be the getIssuer() hash or it may be its parent CA subject name hash, if the namespace was defined in its namespaces file.

isSubjectMatching

boolean isSubjectMatching(X500Principal subject)

Checks whether the given subject name is matching this policy.

Parameters:

subject - to be checked

Returns:

true if subject is matched, false otherwise