Raw signature trust support, Redirect binding, "simple" signing rule.

[shibboleth/cpp-opensaml.git] / saml / security / impl / ExplicitKeyTrustEngine.cpp

diff --git a/saml/security/impl/ExplicitKeyTrustEngine.cpp b/saml/security/impl/ExplicitKeyTrustEngine.cpp
index 7249ee9..34219a6 100644 (file)
--- a/saml/security/impl/ExplicitKeyTrustEngine.cpp
+++ b/saml/security/impl/ExplicitKeyTrustEngine.cpp
@@ -60,6 +60,15 @@ namespace opensaml {
             const KeyResolver* keyResolver=NULL
             ) const;
         virtual bool validate(
+            const XMLCh* sigAlgorithm,
+            const char* sig,
+            KeyInfo* keyInfo,
+            const char* in,
+            unsigned int in_len,
+            const RoleDescriptor& role,
+            const KeyResolver* keyResolver=NULL
+            ) const;
+        virtual bool validate(
             XSECCryptoX509* certEE,
             const vector<XSECCryptoX509*>& certChain,
             const RoleDescriptor& role,
@@ -106,6 +115,20 @@ bool ExplicitKeyTrustEngine::validate(
 }
 
 bool ExplicitKeyTrustEngine::validate(
+    const XMLCh* sigAlgorithm,
+    const char* sig,
+    KeyInfo* keyInfo,
+    const char* in,
+    unsigned int in_len,
+    const RoleDescriptor& role,
+    const KeyResolver* keyResolver
+    ) const
+{
+    MetadataKeyInfoIterator keys(role);
+    return static_cast<xmltooling::TrustEngine*>(m_engine)->validate(sigAlgorithm,sig,keyInfo,in,in_len,keys,keyResolver);
+}
+
+bool ExplicitKeyTrustEngine::validate(
     XSECCryptoX509* certEE,
     const vector<XSECCryptoX509*>& certChain,
     const RoleDescriptor& role,