OpenSAML user discussion

[Brent Putman <>]

Håkon Sagehaug wrote:

Hi

See questions/comments inline

2008/1/15, Brent Putman <>:

Note also that a KeyInfoCredentialResolver can do all of this for you,
that's its reason for existence.  A basic usage using the default
KeyInfo resolver config from the global security configuration would be:

KeyInfoCredentialResolver keyInfoResolver =

Configuration.getGlobalSecurityConfiguration().getDefaultKeyInfoCredentialResolver();

CriteriaSet criteriaSet = new CriteriaSet( new
KeyInfoCriteria(signature.getKeyInfo ()) );

Iterable<Credential> credentials = keyInfoResolver.resolve(criteriaSet);

Here only the credentials  that matches the keyinfo from the signature are returned, or??

Yes, it "processes" the specified KeyInfo and returns the keys/certs represented by that KeyInfo, in the form of implementations of our Credential interface.  It doesn't do anything with respect to the signature though, it can be used on any KeyInfo (e.g. those used with XML Encryption and within SAML metadata).