Getting credentials in OpenSAML

calendar Mar 18, 2011 · 1 min read · SAML OpenSAMLV2  ·
Share on: linkedin copy

For all cryptographic functions OpenSAML requires a Credential which is a basically a cryptographic key wrapped in an object. The Credential can contain either an symmetric key or an asymmetric key not both. The Credential can be created manually with BasicX509Credential and BasicCredential classes and then populated with the setters. But the preferred way is to use one of the many CredentialResolvers to create the credential for you. I will now show some examples of how creating credentials using the basic classes and two different resolvers.

The Basic classes has methods like SetPublicKey SetSecretKey SetEntityCertificate SetPrivateKey

By setting this you can manually create credentials

1BasicCredential credential = new BasicCredential();
2credential.setPublicKey(myJCEPublicKey);
3credential.setPrivateKey(myJCEPrivateKey);
4credential.setUsageType(UsageType.SIGNING);

And now you have a credential to use with signing.

The credential resolvers can do things easier for you by helping to extract the keys from for example a java key store(JKS) or metadata.

 1KeyStore keystore;
 2keystore = KeyStore.getInstance(KeyStore.getDefaultType());
 3FileInputStream inputStream = new FileInputStream("/path/to/my/JKS");
 4keystore.load(inputStream, "MyKeystorePassword".toCharArray());
 5inputStream.close();
 6 
 7Map<String, String> passwordMap = new HashMap<String, String>();
 8passwordMap.put("MyEntryID"), "MyEntryPassword");
 9KeyStoreCredentialResolver resolver = new KeyStoreCredentialResolver(keystore, passwordMap);
10 
11Criteria criteria = new EntityIDCriteria("MyEntryID");
12CriteriaSet criteriaSet = new CriteriaSet(criteria);
13 
14X509Credential credential = (X509Credential)resolver.resolveSingle(criteriaSet);