Inheritance diagram for SAML2\Signature\AbstractChainedValidator:

Collaboration diagram for SAML2\Signature\AbstractChainedValidator:

Public Member Functions
	__construct (LoggerInterface $logger)

Public Member Functions inherited from SAML2\Signature\ChainedValidator
	canValidate (SignedElement $signedElement, CertificateProvider $configuration)
	Test whether or not this link in the chain can validate the signedElement signature. More...

Public Member Functions inherited from SAML2\Signature\ValidatorInterface
	hasValidSignature (SignedElement $signedElement, CertificateProvider $configuration)
	Validate the signature of the signed Element based on the configuration. More...

Protected Member Functions
	validateElementWithKeys (SignedElement $element, $pemCandidates)
	BC compatible version of the signature check. More...

Protected Attributes
	$logger

Detailed Description

Definition at line 9 of file AbstractChainedValidator.php.

Constructor & Destructor Documentation

◆ __construct()

SAML2\Signature\AbstractChainedValidator::__construct ( LoggerInterface $logger )

Definition at line 16 of file AbstractChainedValidator.php.

References SAML2\Signature\AbstractChainedValidator\$logger.

     {
         $this->logger = $logger;
     }

Member Function Documentation

◆ validateElementWithKeys()

SAML2\Signature\AbstractChainedValidator::validateElementWithKeys	(	SignedElement	$element,
			$pemCandidates
	)

protected

BC compatible version of the signature check.

Parameters

\SAML2\SignedElement	$element

Definition at line 31 of file AbstractChainedValidator.php.

References $index, $key, $result, array, RobRichards\XMLSecLibs\XMLSecurityKey\RSA_SHA1, and SAML2\SignedElement\validate().

Referenced by SAML2\Signature\FingerprintValidator\canValidate(), and SAML2\Signature\PublicKeyValidator\hasValidSignature().

     {
         $lastException = null;
         foreach ($pemCandidates as $index => $candidateKey) {
             $key = new XMLSecurityKey(XMLSecurityKey::RSA_SHA1, array('type' => 'public'));
             $key->loadKey($candidateKey->getCertificate());
 
             try {
                 /*
                  * Make sure that we have a valid signature on either the response or the assertion.
                  */
                 $result = $element->validate($key);
                 if ($result) {
                     $this->logger->debug(sprintf('Validation with key "#%d" succeeded', $index));
                     return true;
                 }
                 $this->logger->debug(sprintf('Validation with key "#%d" failed without exception.', $index));
             } catch (\Exception $e) {
                 $this->logger->debug(sprintf(
                     'Validation with key "#%d" failed with exception: %s',
                     $index,
                     $e->getMessage()
                 ));
 
                 $lastException = $e;
             }
         }
 
         if ($lastException !== null) {
             throw $lastException;
         } else {
             return false;
         }
     }