PacSignatureVerifier (SPNEGO/Kerberos Authenticator and Active Directory Realm for Apache Tomcat 9.0 4.2.4 API)

All Known Implementing Classes:

NopPacSignatureVerifier, PacSignatureVerifierBase, PrivateSunPacSignatureVerifier
```
public interface PacSignatureVerifier
```
An interface for pluggable PAC signature verifier implementations for PacSignatureData.
The specification of Kerberos checksum (calculation) is available at

Field Summary

Fields
Modifier and Type Field Description

static int KU_KERB_NON_KERB_CKSUM_SALT

Method Summary

All Methods Instance Methods Abstract Methods
Modifier and Type	Method	Description
`void`	`verify(PacSignatureData signatureData, byte[] data, Key[] keys)`	Verifies the signature on the supplied data with an array of suitable Kerberos keys.

- Field Detail
  - KU_KERB_NON_KERB_CKSUM_SALT
```
static final int KU_KERB_NON_KERB_CKSUM_SALT
```
    See Also:
    
    Constant Field Values
- Method Detail
  - verify
```
void verify(PacSignatureData signatureData,
            byte[] data,
            Key[] keys)
     throws SignatureException
```
    Verifies the signature on the supplied data with an array of suitable Kerberos keys.
    
    Parameters:
    
    signatureData - the PAC signature data to be verified
    
    data - the data to be verififed
    
    keys - an array of keys to calculate the signature
    
    Throws:
    
    NullPointerException - if any argument is null
    
    IllegalArgumentException - if any array is empty
    
    IllegalArgumentException - if no key algorithm matches the signature encryption type
    
    SignatureException - if signature cannot be verified