Package google.registry.tmch

Class TmchXmlSignature

java.lang.Object

google.registry.tmch.TmchXmlSignature

@ThreadSafe
public class TmchXmlSignature
extends Object

Helper class for verifying TMCH certificates and XML signatures.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	TmchXmlSignature.CertificateSignatureException	CertificateException wrapper.

Constructor Summary

Constructors

Constructor	Description
TmchXmlSignature(TmchCertificateAuthority tmchCertificateAuthority)

Method Summary

Modifier and Type	Method	Description
void	verify(byte[] smdXml)	Verifies that signed mark data contains a valid signature.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TmchXmlSignature

@Inject
public TmchXmlSignature(TmchCertificateAuthority tmchCertificateAuthority)

Method Details

verify

public void verify(byte[] smdXml)
            throws GeneralSecurityException,
IOException,
MarshalException,
ParserConfigurationException,
SAXException,
XMLSignatureException

Verifies that signed mark data contains a valid signature.

This method DOES NOT check if the SMD ID is revoked. It's only concerned with the cryptographic stuff.

Throws:

GeneralSecurityException - for unsupported protocols, certs not signed by the TMCH, incorrect keys, and for invalid, old, not-yet-valid or revoked certificates.

IOException

MarshalException

ParserConfigurationException

SAXException

XMLSignatureException