Package net.sf.michaelo.tomcat.pac

Interface PacSignatureVerifier

All Known Implementing Classes:

NopPacSignatureVerifier, PacSignatureVerifierBase, PrivateSunPacSignatureVerifier

public interface PacSignatureVerifier

An interface for pluggable PAC signature verifier implementations for PacSignatureData.

The specification of Kerberos checksum (calculation) is available at

• RFC 4120, section 4
• RFC 4757, section 4
• RFC 3961
• RFC 9362

Field Summary

Fields

Modifier and Type	Field	Description
static final int	KU_KERB_NON_KERB_CKSUM_SALT

Method Summary

Modifier and Type	Method	Description
void	verify(PacSignatureData signatureData, byte[] data, Key[] keys)	Verifies the signature on the supplied data with an array of suitable Kerberos keys.

Field Details

KU_KERB_NON_KERB_CKSUM_SALT

static final int KU_KERB_NON_KERB_CKSUM_SALT

See Also:

• Constant Field Values

Method Details

verify

void verify(PacSignatureData signatureData,
 byte[] data,
 Key[] keys)
     throws SignatureException

Verifies the signature on the supplied data with an array of suitable Kerberos keys.

Parameters:

signatureData - the PAC signature data to be verified

data - the data to be verififed

keys - an array of keys to calculate the signature

Throws:

NullPointerException - if any argument is null

IllegalArgumentException - if any array is empty

IllegalArgumentException - if no key algorithm matches the signature encryption type

SignatureException - if signature cannot be verified