Index (ZeroEcho)

A B C D E F G H I J K L M N O P Q R S T U V W X Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

ACCEPTED - Enum constant in enum class zeroecho.pki.server.enrollment.CmpTransaction.Confirmation: Explicit or requested implicit confirmation accepted the certificate.
ACCEPTED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Signing authority accepted this exact operation.
acceptedHashes() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the acceptedHashes record component.
acceptedHashes() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the acceptedHashes record component.
accepting() - Method in class zeroecho.pki.server.http.PkiHttpsTransport: Indicates whether operation admission is accepting new requests.
Access(Optional, Optional, String) - Constructor for record class zeroecho.pki.server.PublicRepositoryGateway.Access: Validates mutually exclusive principal and capability authority.
account() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.Verified: Returns the value of the account record component.
account(String) - Method in class zeroecho.pki.server.acme.AcmeService: Returns one account record without exposing contact data through transport automatically.
Account(String, String, int, String, String, byte[], AcmeState.AccountStatus, List, boolean, Optional, Instant, Instant, String) - Constructor for record class zeroecho.pki.server.acme.AcmeState.Account: Creates an account with its initial validated key identity.
Account(String, String, int, String, String, byte[], AcmeState.AccountStatus, List, boolean, Optional, Instant, Instant, String, List) - Constructor for record class zeroecho.pki.server.acme.AcmeState.Account: Validates account identity, bounded public material, PII and commitments.
ACCOUNT - Enum constant in enum class zeroecho.pki.server.SecurityPrincipal.Type: Protocol-specific account identity.
accountByKey(String, String) - Method in class zeroecho.pki.server.acme.AcmeService: Resolves an account by its authenticated key identity within one directory.
accountDirectory(String) - Method in class zeroecho.pki.server.acme.AcmeService: Resolves the exact frozen directory for one existing account resource.
accountHistoryCharge(AcmeState.Account) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Measures exclusion-history retention, including its bounded account identity and framing, and verifies that the complete account fits the control-record cap.
accountId() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKey: Returns the value of the accountId record component.
accountId() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the accountId record component.
accountId() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns the value of the accountId record component.
accountId() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the accountId record component.
accountId() - Method in record class zeroecho.pki.server.ServerControlOperation.DeactivateAcmeAccount: Returns the value of the accountId record component.
accountId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeAccount: Returns the value of the accountId record component.
accountKey(String, String) - Method in class zeroecho.pki.server.acme.AcmeService: Resolves one active account key for strict KID authentication.
AccountKey(String, String, String, PublicKey, String) - Constructor for record class zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKey: Validates finite account authority metadata.
accountKeyCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the accountKeyCommitment record component.
AccountKeyIdentity(String, Set, Set) - Constructor for record class zeroecho.pki.server.acme.AcmeState.AccountKeyIdentity: Validates immutable bounded public commitments and aliases.
accountKeyThumbprint() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Returns the value of the accountKeyThumbprint record component.
accountKeyThumbprint() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Returns the value of the accountKeyThumbprint record component.
accounts(int, int) - Method in class zeroecho.pki.server.acme.AcmeService: Returns a deterministic bounded page of accounts for administrative inspection.
ACKNOWLEDGE - Enum constant in enum class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand.Action: Removes an acknowledged, authoritatively terminal workflow.
ACKNOWLEDGE - Static variable in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Acknowledge restore outcome operation identity.
ACME - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Protocol: Account-authorized automated certificate enrollment.
ACME_ACCOUNT - Enum constant in enum class zeroecho.pki.server.DisclosureService.Owner.OwnerType: Protocol-scoped ACME account.
ACME_ACCOUNT - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: ACME account.
ACME_ACCOUNT - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for ACME account records.
ACME_ACCOUNT_MANAGE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Manages an ACME account.
ACME_ACCOUNT_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads an ACME account.
ACME_AUTHORIZATION - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for ACME authorization records.
ACME_CHALLENGE - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for ACME challenge records.
ACME_DIRECTORY - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: ACME directory configuration.
ACME_DIRECTORY - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for ACME directory records.
ACME_DIRECTORY_MANAGE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Manages an ACME directory.
ACME_DIRECTORY_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads an ACME directory.
ACME_EVIDENCE - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for ACME validation-evidence records.
ACME_ORDER - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for ACME order records.
acmeAccount(String) - Static method in record class zeroecho.pki.server.DisclosureService.Owner: Creates a protocol-scoped ACME-account owner.
acmeAddress() - Method in class zeroecho.pki.server.PkiHttpsServer: Returns the actual ACME listener address when enabled.
AcmeChallengeEvent - Class in zeroecho.pki.server.jfr: JFR event emitted when an ACME challenge validation attempt completes.
AcmeChallengeEvent() - Constructor for class zeroecho.pki.server.jfr.AcmeChallengeEvent: Creates an uncommitted event with default field values; populate fields before committing.
AcmeChallengeProvider - Interface in zeroecho.pki.server.spi: Explicit evidence-producing ACME challenge-provider SPI.
AcmeChallengeProvider - Interface in zeroecho.pki.server.spi.v2: Explicit evidence-producing ACME challenge-provider SPI.
AcmeChallengeProvider.ChallengeType - Enum Class in zeroecho.pki.server.spi.v2: Supported challenge mechanisms.
AcmeChallengeProvider.Context - Record Class in zeroecho.pki.server.spi: Exact immutable challenge input; values are sensitive and must never be logged.
AcmeChallengeProvider.Context - Record Class in zeroecho.pki.server.spi.v2: Exact immutable challenge input; values are sensitive and must never be logged.
AcmeChallengeProvider.Identifier - Record Class in zeroecho.pki.server.spi.v2: Immutable canonical DNS identifier.
AcmeChallengeProvider.IdentifierType - Enum Class in zeroecho.pki.server.spi.v2: Supported ACME identifier kinds.
AcmeChallengeProvider.Result - Record Class in zeroecho.pki.server.spi: Finite provider result without raw network, DNS, token or response data.
AcmeChallengeProvider.Result - Record Class in zeroecho.pki.server.spi.v2: Finite provider result without raw network, DNS, token or response data.
acmeControl() - Method in class zeroecho.pki.server.ServerRealmContext: Returns typed ACME records in the realm's sole durable control authority.
AcmeControlStore - Class in zeroecho.pki.server.acme: Typed ACME record facade over the realm's sole transactional control authority.
AcmeControlStore(ServerControlStore) - Constructor for class zeroecho.pki.server.acme.AcmeControlStore: Binds ACME state to the lifecycle-owned realm control store.
AcmeControlStore.Graph - Record Class in zeroecho.pki.server.acme: Immutable atomically committed order graph.
AcmeControlStore.Replacement - Record Class in zeroecho.pki.server.acme: One exact prior-to-next ACME compare-and-set transition.
AcmeControlStore.Transition - Record Class in zeroecho.pki.server.acme: Results of one atomic ACME graph transition.
AcmeDirectoryProfilePrecondition(CertificateProfileRef, String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.AcmeDirectoryProfilePrecondition: Validates the authoritative exact profile and confirmation-policy identities.
AcmeExternalAccountBindingProvider - Interface in zeroecho.pki.server.spi: Secret-confining external-account-binding verification SPI.
AcmeExternalAccountBindingProvider - Interface in zeroecho.pki.server.spi.v2: Secret-confining external-account-binding verification SPI.
AcmeExternalAccountBindingProvider.Binding - Record Class in zeroecho.pki.server.spi: Finite EAB policy output without secret material.
AcmeExternalAccountBindingProvider.Binding - Record Class in zeroecho.pki.server.spi.v2: Finite EAB policy output without secret material.
AcmeExternalAccountBindingProvider.Request - Record Class in zeroecho.pki.server.spi: Exact bounded EAB verification request.
AcmeExternalAccountBindingProvider.Request - Record Class in zeroecho.pki.server.spi.v2: Exact bounded EAB verification request.
AcmeJwsVerifier - Class in zeroecho.pki.server.acme: Strict narrow ACME flattened-JWS verifier supporting only ES256.
AcmeJwsVerifier() - Constructor for class zeroecho.pki.server.acme.AcmeJwsVerifier: Creates a stateless strict ACME JWS verifier.
AcmeJwsVerifier.AccountKey - Record Class in zeroecho.pki.server.acme: Resolved durable account public key with exact revision commitment.
AcmeJwsVerifier.AccountKeyResolver - Interface in zeroecho.pki.server.acme: Account lookup used only after strict KID framing.
AcmeJwsVerifier.AcmeProblem - Exception Class in zeroecho.pki.server.acme: Safe finite protocol failure, never carrying provider or parser details.
AcmeJwsVerifier.KeyMode - Enum Class in zeroecho.pki.server.acme: Required protected-header account-key mode.
AcmeJwsVerifier.Verified - Record Class in zeroecho.pki.server.acme: Verified JWS data safe to pass to one closed endpoint decoder.
acmeListener() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the acmeListener record component.
AcmeListener(String, InetAddress, int, ProviderConfig, PkiServerConfiguration.AcmeTransportMode, List, Set, URI, int, int, PkiServerConfiguration.Execution, PkiServerConfiguration.Execution, Duration, int, int, int, Duration, int, int, int, int, int, List, List) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Validates listener isolation, URL authority, proxy policy, and finite bounds.
AcmeNonceService - Class in zeroecho.pki.server.acme: Bounded process-local one-time ACME replay-nonce authority.
AcmeNonceService(String, Duration, int, Clock, SecureRandom) - Constructor for class zeroecho.pki.server.acme.AcmeNonceService: Creates a bounded nonce service for one exact ACME listener.
AcmeProblem(String) - Constructor for exception class zeroecho.pki.server.acme.AcmeJwsVerifier.AcmeProblem: Creates a safe ACME problem classification.
AcmeProviders - Class in zeroecho.pki.server.acme: Deterministic explicitly enabled ACME ServiceLoader composition.
AcmeRateAdmission - Class in zeroecho.pki.server.acme: Bounded restart-local ACME rate and finalization admission authority.
AcmeRateAdmission(PkiServerConfiguration.AcmeListener, Clock) - Constructor for class zeroecho.pki.server.acme.AcmeRateAdmission: Creates admission limits from one exact ACME listener configuration.
AcmeService - Class in zeroecho.pki.server.acme: Transport-neutral durable ACME state machine and constrained PKI integration.
AcmeService(ServerRealmContext, Clock, SecureRandom, Map, Map) - Constructor for class zeroecho.pki.server.acme.AcmeService: Creates an ACME service without EAB providers.
AcmeService(ServerRealmContext, Clock, SecureRandom, Map, Map, Map, Map) - Constructor for class zeroecho.pki.server.acme.AcmeService: Creates a realm-bound ACME service with periodic-only reconciliation compatibility.
AcmeService(ServerRealmContext, Clock, SecureRandom, Map, Map, Map, Map, Runnable) - Constructor for class zeroecho.pki.server.acme.AcmeService: Creates a realm-bound ACME service from explicitly enabled providers.
AcmeService.DirectoryRegistration - Record Class in zeroecho.pki.server.acme: Safe immutable directory-registration input.
AcmeState - Class in zeroecho.pki.server.acme: Closed durable ACME domain records.
AcmeState.Account - Record Class in zeroecho.pki.server.acme: Durable protocol-scoped ACME account.
AcmeState.AccountKeyIdentity - Record Class in zeroecho.pki.server.acme: Exclusion-only evidence for one authenticated account key, retained across rollover.
AcmeState.AccountStatus - Enum Class in zeroecho.pki.server.acme: Account lifecycle.
AcmeState.Authorization - Record Class in zeroecho.pki.server.acme: Durable identifier authorization owned by one account order.
AcmeState.AuthorizationEvidence - Record Class in zeroecho.pki.server.acme: Immutable validator evidence; no control operation may construct it.
AcmeState.AuthorizationStatus - Enum Class in zeroecho.pki.server.acme: Authorization lifecycle.
AcmeState.Challenge - Record Class in zeroecho.pki.server.acme: Durable explicitly triggered challenge attempt.
AcmeState.ChallengeStatus - Enum Class in zeroecho.pki.server.acme: Challenge lifecycle.
AcmeState.ChallengeType - Enum Class in zeroecho.pki.server.acme: Supported proof challenges.
AcmeState.Directory - Record Class in zeroecho.pki.server.acme: Immutable directory policy revision bound to one exact PKI authority.
AcmeState.DirectoryStatus - Enum Class in zeroecho.pki.server.acme: Directory lifecycle.
AcmeState.EvidenceResult - Enum Class in zeroecho.pki.server.acme: Durable validation result.
AcmeState.Identifier - Record Class in zeroecho.pki.server.acme: One canonical DNS identifier with an explicit wildcard bit.
AcmeState.IdentifierType - Enum Class in zeroecho.pki.server.acme: Supported identifier kinds.
AcmeState.Order - Record Class in zeroecho.pki.server.acme: Durable ACME order frozen to one directory revision and issuance selection.
AcmeState.OrderStatus - Enum Class in zeroecho.pki.server.acme: Order lifecycle.
AcmeTransport - Class in zeroecho.pki.server.http: Lifecycle owner for the isolated optional ACME HTTPS listener.
AcmeWireBounds - Class in zeroecho.pki.server.acme: Exact bounded ACME wire-size calculations shared by configuration and transport.
acquire(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Acquires bounded access to an exact current or retained credential set.
action() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the action record component.
action() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns the value of the action record component.
action() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns the value of the action record component.
action() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the action record component.
action() - Method in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Returns the value of the action record component.
action() - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Returns the value of the action record component.
actions() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Template: Returns the value of the actions record component.
ACTIVATE - Static variable in record class zeroecho.pki.server.ServerControlOperation.ActivateBreakGlass: Stable operation identity used for authorization and dispatch.
ACTIVATE - Static variable in record class zeroecho.pki.server.ServerControlOperation.SetAcmeDirectoryActive: Stable operation identity used for authorization and dispatch.
ACTIVATE - Static variable in record class zeroecho.pki.server.ServerControlOperation.SetOcspResponderActive: Stable operation identity used for authorization and dispatch.
ActivateBreakGlass(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ActivateBreakGlass: Validates the operation's immutable input.
activatedAt() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the activatedAt record component.
activateDirectory(String) - Method in class zeroecho.pki.server.acme.AcmeService: Activates one exact directory revision after revalidating all frozen PKI authority.
ActivateEnrollmentProfile(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ActivateEnrollmentProfile: Validates the id.
activatePending(String, String, Optional) - Method in class zeroecho.pki.server.BreakGlassService: Activates one independently approved pending emergency grant.
active() - Method in record class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Snapshot: Returns the value of the active record component.
active() - Method in record class zeroecho.pki.server.ServerControlOperation.SetAcmeDirectoryActive: Returns the value of the active record component.
active() - Method in record class zeroecho.pki.server.ServerControlOperation.SetOcspResponderActive: Returns the value of the active record component.
ACTIVE - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.DirectoryStatus: Directory accepts protocol operations.
ACTIVE - Enum constant in enum class zeroecho.pki.server.BreakGlassService.State: Emergency grant is active and not expired.
ACTIVE - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentProfileState: Profile is active and can process enrollment requests.
ACTIVE - Enum constant in enum class zeroecho.pki.server.OcspResponderService.State: Responder is eligible to serve requests.
ACTIVE - Enum constant in enum class zeroecho.pki.server.RepositoryAliasService.State: Alias resolves its exact target.
ActiveCredential(EnrollmentRuntimeConfiguration.Protocol, String, String) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.ActiveCredential: Validates the selection identities.
activeCredentialId(EnrollmentRuntimeConfiguration.Protocol, String) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Resolves the immutable selection for a new transaction.
activeCredentials() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Returns the value of the activeCredentials record component.
activeDirectory(String) - Method in class zeroecho.pki.server.acme.AcmeService: Resolves the sole active directory revision for one public alias.
activeFor(String) - Method in class zeroecho.pki.server.BreakGlassService: Returns current active grants for one principal and enforces expiry after reopen.
ActiveGrants(List, Set) - Constructor for record class zeroecho.pki.server.BreakGlassService.ActiveGrants: Defensively snapshots active grants.
actorId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Returns the value of the actorId record component.
actorPrincipalId() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the actorPrincipalId record component.
address() - Method in class zeroecho.pki.server.http.AcmeTransport: Returns the actual listener address, including an allocated ephemeral port.
address() - Method in class zeroecho.pki.server.http.CmpTransport: Returns the actual listener address, including an allocated ephemeral port.
address() - Method in class zeroecho.pki.server.http.EstTransport: Returns the actual listener address, including an allocated ephemeral port.
address() - Method in class zeroecho.pki.server.http.PkiHttpsTransport: Returns the actual bound listener address, including an allocated ephemeral port.
address() - Method in class zeroecho.pki.server.http.PublicRepositoryTransport: Returns the actual public listener address.
address() - Method in class zeroecho.pki.server.http.ScepTransport: Returns the actual listener address, including an allocated ephemeral port.
address() - Method in class zeroecho.pki.server.PkiHttpsServer: Returns the actual bound administrative address, including an allocated ephemeral port.
address() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the address record component.
address() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns the value of the address record component.
address() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns the value of the address record component.
address() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Returns the value of the address record component.
address() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the address record component.
address() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns the value of the address record component.
ADMINISTRATIVE - Enum constant in enum class zeroecho.pki.server.OperationSecurityDescriptors.Eligibility: Only the authenticated administrative transport may expose the operation.
AdministrativeAuthenticationMode - Enum Class in zeroecho.pki.server: Explicit mutually exclusive administrative authentication deployment mode.
AdministrativeAuthenticator - Class in zeroecho.pki.server.http: Composes direct mutual-TLS authentication or separately authenticated proxy transport with independently validated forwarded end-client identity.
administrativeClientTrust() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the administrativeClientTrust record component.
AdministrativeDecisionActor - Record Class in zeroecho.pki.server: Immutable trusted administrative actor passed from gateway authorization to control dispatch.
AdministrativeDecisionActor(String, Optional) - Constructor for record class zeroecho.pki.server.AdministrativeDecisionActor: Validates the actor without manufacturing missing credential evidence.
AdministrativeOperation - Interface in zeroecho.pki.server: One closed administrative namespace spanning PKI and server-control families.
AdministrativeOperation.Control - Record Class in zeroecho.pki.server: Server security-control operation family.
AdministrativeOperation.Pki - Record Class in zeroecho.pki.server: Existing transport-neutral PKI operation family.
AdministrativeOperation.Signing - Record Class in zeroecho.pki.server: Server-owned inputs for one semantic signing acceptance.
AdminRequestEvent - Class in zeroecho.pki.server.jfr: JFR event emitted for every request handled by the administrative HTTPS handler.
AdminRequestEvent() - Constructor for class zeroecho.pki.server.jfr.AdminRequestEvent: Creates an uncommitted event with default field values; populate fields before committing.
Admission(EnrollmentTransaction.Protocol, String, EnrollmentTransaction.Requester, String, EnrollmentTransaction.Operation, X509EnrollmentPayload, Optional, Optional) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Creates input for a protocol governed solely by configured admission lifetime.
Admission(EnrollmentTransaction.Protocol, String, EnrollmentTransaction.Requester, String, EnrollmentTransaction.Operation, X509EnrollmentPayload, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Validates bounded, non-null adapter input without retaining mutable data.
admissionDeadline(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Returns a deadline bounded by both pending lifetime and the exact authority/response/trust certificate validity window.
admissionWindow() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the admissionWindow record component.
admit(EnrollmentCoordinator.Admission) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Stores the exact verified request before publishing its durable approval reference.
admit(EnrollmentCoordinator.Admission, String) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Admits verified protocol input against the exact endpoint context used for protocol authentication, preventing a policy replacement between verification and durable admission.
admitAccount(String) - Method in class zeroecho.pki.server.acme.AcmeRateAdmission: Admits one new-account request within the directory-wide window.
admitCmp(EnrollmentCoordinator.Admission, CmpTransaction) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Attaches an exact authenticated original CRMF to its reserved CMP manifest.
admitOrder(String) - Method in class zeroecho.pki.server.acme.AcmeRateAdmission: Admits one new-order request within the exact account window.
admitValidation(String) - Method in class zeroecho.pki.server.acme.AcmeRateAdmission: Admits one explicit challenge-validation attempt.
after() - Method in record class zeroecho.pki.server.ServerControlOperation.ConfigurationChoices: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCapabilities: Returns the value of the after record component.
algorithm() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the algorithm record component.
algorithmId() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the algorithmId record component.
algorithmId() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the algorithmId record component.
alias() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the alias record component.
alias() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the alias record component.
alias() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeyReference: Returns the value of the alias record component.
alias() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the alias record component.
alias() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the alias record component.
aliases() - Method in record class zeroecho.pki.server.acme.AcmeState.AccountKeyIdentity: Returns the value of the aliases record component.
aliases() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Returns the value of the aliases record component.
aliasId() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the aliasId record component.
all() - Static method in class zeroecho.pki.server.schema.OperationParameterSchemas: Returns the complete catalog projection, including explicitly unavailable operations.
ALL_REALM_AUTHORITIES - Enum constant in enum class zeroecho.pki.server.AuthorityExposurePolicy.Mode: Every authority in the realm session is eligible for scoped exposure.
ALLOW - Enum constant in enum class zeroecho.pki.server.Permission.Effect: Allows the action when no stronger deny applies.
allowed() - Method in record class zeroecho.pki.server.AuthorizationEngine.Decision: Indicates whether execution is authorized.
ALLOWED - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: A matching allow grant authorized the request.
ALLOWED - Enum constant in enum class zeroecho.pki.server.DisclosureService.Decision: Retrieval is authorized without revealing additional state.
allowedAuthorityIds() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns the value of the allowedAuthorityIds record component.
allowNew() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns the value of the allowNew record component.
allowPlaintextLoopback() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the allowPlaintextLoopback record component.
allows(PkiId) - Method in record class zeroecho.pki.server.AuthorityExposurePolicy: Tests process exposure for one canonical authority.
ANY - Enum constant in enum class zeroecho.pki.server.Permission.Relationship: Applies the grant to any object in its scope.
APPROVAL - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Approval request.
APPROVAL - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for approvals.
APPROVAL_REQUIRED - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: A matching conditional grant requires an approval.
APPROVAL_REQUIRED - Enum constant in enum class zeroecho.pki.server.Permission.Condition: Requires a valid approval.
approvalCategory() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the approvalCategory record component.
approvalCategory() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns the value of the approvalCategory record component.
approvalCommitment() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns the value of the approvalCommitment record component.
approvalCommitment() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the approvalCommitment record component.
approvalId() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the approvalId record component.
approvalId() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the approvalId record component.
approvalId() - Method in record class zeroecho.pki.server.ServerControlOperation.CancelApproval: Returns the value of the approvalId record component.
approvalId() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideApproval: Returns the value of the approvalId record component.
approvalId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectApproval: Returns the value of the approvalId record component.
approvalId() - Method in record class zeroecho.pki.server.ServerControlOperation.RequestApproval: Returns the value of the approvalId record component.
approvalId() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the approvalId record component.
approvalPolicies() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the approvalPolicies record component.
approvalPolicy() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the approvalPolicy record component.
approvalPolicyCategory(AdministrativeOperation, boolean) - Method in class zeroecho.pki.server.OperationSecurityDescriptors: Resolves the configured policy category for an operation's actual approval requirement.
approvalPresent() - Method in record class zeroecho.pki.server.Permission.Context: Returns the value of the approvalPresent record component.
ApprovalRequired(String) - Constructor for record class zeroecho.pki.server.ServerOperationGateway.Outcome.ApprovalRequired: Validates the safe exact-operation commitment.
approvals() - Method in class zeroecho.pki.server.ServerRealmContext: Returns durable approval service.
approvals(int, int) - Method in class zeroecho.pki.server.ServerControlStore: Returns a bounded stable page of approval records.
ApprovalService - Class in zeroecho.pki.server: Durable exact-operation multi-party approval service.
ApprovalService(ServerControlStore, Clock, AuditSink) - Constructor for class zeroecho.pki.server.ApprovalService: Creates a durable approval service over one server-control authority.
ApprovalService.Choice - Enum Class in zeroecho.pki.server: Individual immutable approval choice.
ApprovalService.Decision - Record Class in zeroecho.pki.server: One attributable immutable decision.
ApprovalService.Policy - Record Class in zeroecho.pki.server: Immutable approval policy.
ApprovalService.Request - Record Class in zeroecho.pki.server: Durable approval authority record.
ApprovalService.State - Enum Class in zeroecho.pki.server: Approval lifecycle states.
APPROVE - Enum constant in enum class zeroecho.pki.server.ApprovalService.Choice: Supports execution of the exact requested operation.
APPROVE - Static variable in record class zeroecho.pki.server.ServerControlOperation.DecideApproval: Stable operation identity used for authorization and dispatch.
APPROVE - Static variable in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Stable approval operation identity.
APPROVED - Enum constant in enum class zeroecho.pki.server.ApprovalService.State: Approval threshold was satisfied.
APPROVED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Policy permits a fresh dispatch claim.
artifact() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the artifact record component.
artifact() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the artifact record component.
artifact() - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyBackup: Returns the value of the artifact record component.
ArtifactBinding(String, String, String, long) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentTransaction.ArtifactBinding: Validates bounded immutable references; grants no delivery permission.
artifactHandle() - Method in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Returns the value of the artifactHandle record component.
artifactId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.ArtifactBinding: Returns the value of the artifactId record component.
assignment() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateRoleAssignment: Returns the value of the assignment record component.
Assignment(String, String, String, int, Permission.Scope, boolean) - Constructor for record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Creates an assignment without an expiry for existing embedded callers.
Assignment(String, String, String, int, Permission.Scope, Optional, boolean) - Constructor for record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Validates the exact scoped assignment.
ASSIGNMENT - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for scoped role assignments.
assignmentId() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Returns the value of the assignmentId record component.
assignmentId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleAssignment: Returns the value of the assignmentId record component.
assignmentId() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeRoleAssignment: Returns the value of the assignmentId record component.
assignments(int, int) - Method in class zeroecho.pki.server.ServerControlStore: Returns a bounded stable page of role assignments.
assignmentsFor(String) - Method in class zeroecho.pki.server.ServerControlStore: Lists assignments for one principal from one stable metadata snapshot.
assignRole(RoleTemplateCatalog.Assignment, String) - Method in class zeroecho.pki.server.ServerRealmContext: Creates one scoped role assignment; templates remain non-authoritative alone.
attach(X509EnrollmentPayload, byte[]) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator.KeygenGeneration: Stores the proved generated CSR and publishes encrypted bytes before one atomic descriptor/enrollment attachment.
ATTACHED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact.State: Exact generated request, encrypted body and enrollment are atomically linked.
attempt() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the attempt record component.
attempt() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the attempt record component.
attempt() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns the value of the attempt record component.
attempt() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns the value of the attempt record component.
attributes() - Method in record class zeroecho.pki.server.SecurityPrincipal: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackup: Returns the value of the attributes record component.
audience() - Method in record class zeroecho.pki.server.CredentialConfirmationProofPolicy: Returns the value of the audience record component.
AUDIT - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Audit data.
AUDIT_ANCHOR - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for the durable cross-store audit-log integrity anchor.
AUDIT_EVIDENCE_PROJECTION - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for per-family success-evidence audit-projection cursors.
AUDIT_EXPORT - Enum constant in enum class zeroecho.pki.server.Permission.Action: Exports audit data.
AUDIT_INTEGRITY_VERIFY - Enum constant in enum class zeroecho.pki.server.Permission.Action: Verifies audit-log integrity.
AUDIT_READ_FULL - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads complete audit metadata.
AUDIT_READ_PII - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads personal data from audit records.
AUDIT_READ_REDACTED - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads redacted audit data.
AuditActor(String) - Constructor for record class zeroecho.pki.server.CredentialPublicationGate.AuditActor: Validates the actor using the server principal-identity contract.
auditCommitment() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the auditCommitment record component.
auditorViews() - Method in class zeroecho.pki.server.ServerRealmContext: Returns explicit auditor projection service.
AuditorViews - Class in zeroecho.pki.server: Explicit certificate/request/status projection boundary for auditor data views.
AuditorViews(Clock, AuditSink) - Constructor for class zeroecho.pki.server.AuditorViews: Creates an auditor-view boundary using an injected clock and audit sink.
AuditorViews.FullContent - Record Class in zeroecho.pki.server: Full binary content projection; byte content is never redacted in place.
AuditorViews.FullMetadata - Record Class in zeroecho.pki.server: Full non-PII metadata projection.
AuditorViews.Pii - Record Class in zeroecho.pki.server: Explicit PII-enabled projection, separately authorized from content.
AuditorViews.Redacted - Record Class in zeroecho.pki.server: Redacted metadata projection containing indicators rather than PII.
AuditorViews.Source - Record Class in zeroecho.pki.server: Safe source metadata from which authorized projections are produced.
auditProjection() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the auditProjection record component.
AuditProjection(int, int, Duration) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.AuditProjection: Validates all projection bounds.
auditTransport(String, String, Map) - Method in class zeroecho.pki.server.ServerRealmContext: Records one transport-safe lifecycle or request classification through the shared realm audit authority.
auditUse(String) - Method in class zeroecho.pki.server.BreakGlassService: Records use without exposing grant internals or reason.
AuditWriteEvent - Class in zeroecho.pki.server.jfr: JFR event emitted when an audit record is written to the durable audit sink.
AuditWriteEvent() - Constructor for class zeroecho.pki.server.jfr.AuditWriteEvent: Creates an uncommitted event with default field values; populate fields before committing.
authenticate(OcspResponderService.Responder, OcspRequesterService.SignedRequest, List) - Method in class zeroecho.pki.server.OcspRequesterService: Authenticates and authorizes every CertID in one signed request.
authenticate(PkiServerAuthenticationContext) - Method in class zeroecho.pki.server.http.AdministrativeAuthenticator
authenticate(PkiServerAuthenticationContext) - Method in class zeroecho.pki.server.http.MutualTlsAuthenticator
authenticate(PkiServerAuthenticationContext) - Method in interface zeroecho.pki.server.spi.PkiServerAuthenticator: Authenticates one already TLS-validated peer without inspecting operation arguments.
Authenticated(String) - Constructor for record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Creates a direct-mTLS result for an existing certificate mapper.
Authenticated(AdministrativeAuthenticationMode, Optional, String) - Constructor for record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Creates an authentication result without enrollment credential evidence.
Authenticated(AdministrativeAuthenticationMode, Optional, String, Optional) - Constructor for record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Validates the finite principal identity.
AUTHENTICATED - Enum constant in enum class zeroecho.pki.server.DisclosureService.Policy: Any authenticated non-public principal may retrieve content.
authenticatePublicProxyTransport(PkiServerAuthenticationContext) - Method in class zeroecho.pki.server.http.AdministrativeAuthenticator: Authenticates only the backend transport for an anonymous public request.
authentication() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Returns the value of the authentication record component.
authentication() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the authentication record component.
authentication() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the authentication record component.
Authentication(AdministrativeAuthenticationMode, List, List, List, Set, Optional, Optional, Optional, Optional, int, int) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Validates strict mode separation, mappings, headers, and technical bounds.
authenticationMode() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the authenticationMode record component.
authorities(Optional, int) - Method in class zeroecho.pki.server.PublicRepositoryGateway: Returns one bounded keyset page of exposed public authority metadata.
authority(PkiId) - Method in class zeroecho.pki.server.PublicRepositoryGateway: Returns one exact exposed authority.
Authority(PkiId, CaKind, List, PkiId) - Constructor for record class zeroecho.pki.server.PublicRepositoryGateway.Authority: Snapshots finite issuer identities.
AUTHORITY - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Logical certificate authority.
AUTHORITY_ACTIVATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Activates an authority.
AUTHORITY_ACTIVE - Enum constant in enum class zeroecho.pki.server.Permission.Condition: Requires an active authority.
AUTHORITY_CREATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Creates an authority.
AUTHORITY_IMPORT - Enum constant in enum class zeroecho.pki.server.Permission.Action: Imports an authority.
AUTHORITY_LIST - Enum constant in enum class zeroecho.pki.server.Permission.Action: Lists authorities.
AUTHORITY_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads authority metadata.
AUTHORITY_RETIRE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Retires an authority.
AUTHORITY_SUSPEND - Enum constant in enum class zeroecho.pki.server.Permission.Action: Suspends an authority.
authorityActive() - Method in record class zeroecho.pki.server.Permission.Context: Returns the value of the authorityActive record component.
authorityCreationPermitted() - Method in record class zeroecho.pki.server.AuthorityExposurePolicy: Returns the value of the authorityCreationPermitted record component.
authorityExposure() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the authorityExposure record component.
AuthorityExposurePolicy - Record Class in zeroecho.pki.server: Immutable process policy controlling which logical authorities one realm context may expose.
AuthorityExposurePolicy(AuthorityExposurePolicy.Mode, Set, boolean) - Constructor for record class zeroecho.pki.server.AuthorityExposurePolicy: Validates and defensively snapshots the exposure policy.
AuthorityExposurePolicy.Mode - Enum Class in zeroecho.pki.server: Closed authority-exposure modes.
authorityFrom() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.TransportSemantics: Returns the value of the authorityFrom record component.
authorityId - Variable in class zeroecho.pki.server.jfr.CrlGenerationEvent: Identifier of the certificate authority issuing this CRL.
authorityId - Variable in class zeroecho.pki.server.jfr.SigningOperationEvent: Identifier of the certificate authority targeted by this operation.
authorityId() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.cmp.CmpEndpoint: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the authorityId record component.
authorityId() - Method in interface zeroecho.pki.server.enrollment.EnrollmentEndpoint: Returns the issuing authority binding.
authorityId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.ActiveCredential: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.est.EstEndpoint: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.Permission.Scope: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Authority: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.scep.ScepEndpoint: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRepositoryAlias: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.ServerControlOperation.RemoveRepositoryAlias: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Returns the value of the authorityId record component.
authorityIds() - Method in record class zeroecho.pki.server.AuthorityExposurePolicy: Returns the value of the authorityIds record component.
authorityListExposed() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the authorityListExposed record component.
authorization() - Method in class zeroecho.pki.server.ServerRealmContext: Returns deterministic authorization engine.
authorization(String, String) - Method in class zeroecho.pki.server.acme.AcmeService: Returns one account-owned authorization without revealing another account's state.
Authorization(String, String, String, AcmeState.Identifier, AcmeState.AuthorizationStatus, List, Instant, Optional, String) - Constructor for record class zeroecho.pki.server.acme.AcmeState.Authorization: Validates exact ownership and evidence state.
authorizationCommitment() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns the value of the authorizationCommitment record component.
authorizationCommitment() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the authorizationCommitment record component.
authorizationDirectory(String) - Method in class zeroecho.pki.server.acme.AcmeService: Resolves the exact frozen directory for one existing authorization resource.
AuthorizationEngine - Class in zeroecho.pki.server: Deterministic side-effect-free default-deny authorization engine.
AuthorizationEngine(Clock) - Constructor for class zeroecho.pki.server.AuthorizationEngine: Creates an engine using an injected authoritative decision clock.
AuthorizationEngine.Code - Enum Class in zeroecho.pki.server: Safe decision codes that reveal no protected-object existence.
AuthorizationEngine.Decision - Record Class in zeroecho.pki.server: Finite safe authorization result.
AuthorizationEngine.Request - Record Class in zeroecho.pki.server: One complete authorization input.
AuthorizationEvidence(String, String, String, AcmeState.ChallengeType, AcmeState.Identifier, String, String, String, int, Instant, Instant, AcmeState.EvidenceResult, Optional, String) - Constructor for record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Validates complete authorization-evidence binding.
authorizationId() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns the value of the authorizationId record component.
authorizationId() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the authorizationId record component.
authorizationId() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the authorizationId record component.
authorizationId() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns the value of the authorizationId record component.
authorizationId() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns the value of the authorizationId record component.
authorizationIds() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the authorizationIds record component.
authorizations() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Graph: Returns the value of the authorizations record component.
authorize(AuthorizationEngine.Request) - Method in class zeroecho.pki.server.AuthorizationEngine: Evaluates one request with explicit-deny precedence.
authorizeControl(String, Permission.Action, Permission.Resource, Permission.Context, String) - Method in class zeroecho.pki.server.ServerOperationGateway: Authorizes one non-PKI administrative control resource through the same default-deny engine used for typed operations.
authorized - Variable in class zeroecho.pki.server.jfr.AdminRequestEvent: Whether the request was authorized and admitted for execution.
Authorized(String) - Constructor for record class zeroecho.pki.server.OcspRequesterService.Authorized: Validates the mapped principal identity.
AUTHORIZED_SIGNED_REQUIRED - Enum constant in enum class zeroecho.pki.server.OcspResponderService.RequestAuthenticationMode: Requires every request to carry an authorized signature.
authorizedRaKeys() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns the value of the authorizedRaKeys record component.
authorizeForwardedIdentity(String, String) - Method in class zeroecho.pki.server.ServerOperationGateway: Authorizes a dedicated service principal to attest one forwarded client identity.
authorizeOcspQuery(String, OcspResponderService.Responder) - Method in class zeroecho.pki.server.ServerRealmContext: Evaluates the protocol-only OCSP query permission for one exact responder and issuer generation.
available() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns whether this operation may be advertised for execution.
available() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Entry: Returns the value of the available record component.
available(String) - Static method in class zeroecho.pki.server.OperationSecurityDescriptors: Tests current operation availability without changing its security descriptor.
AWAITING - Enum constant in enum class zeroecho.pki.server.enrollment.CmpTransaction.Confirmation: The returned certificate awaits authenticated certConf.

B

BACKUP - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Backup archive.
BACKUP_EXPORT - Enum constant in enum class zeroecho.pki.server.Permission.Action: Exports a backup.
BACKUP_VERIFY - Enum constant in enum class zeroecho.pki.server.Permission.Action: Verifies a backup.
BackupArtifactCommand(ServerControlOperation.BackupArtifactCommand.Action, String, Optional) - Constructor for record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Validates shape; ownership and phase are checked by the server.
backupId() - Method in record class zeroecho.pki.server.ServerControlOperation.ReserveBackupUpload: Returns the value of the backupId record component.
BackupTransferChannel - Interface in zeroecho.pki.server: Transport-owned binary streams opened only after full gateway authorization and approval.
backupTransferConfiguration() - Method in class zeroecho.pki.server.ServerRealmContext: Returns explicitly installed binary transfer settings.
BackupTransferConfiguration - Record Class in zeroecho.pki.server: Explicit, opt-in budgets for remote backup transfer.
BackupTransferConfiguration(Path, long, long, int, int, long, Duration, Duration, URI) - Constructor for record class zeroecho.pki.server.BackupTransferConfiguration: Validates mandatory budgets without creating directories or opening stores.
base64(String, boolean) - Static method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Defines standard Base64 binary data encoded as a JSON string.
BASE64 - Enum constant in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Base64-encoded binary.
bearerCredential(String, byte[]) - Static method in class zeroecho.pki.server.DisclosureService: Returns the strict bearer credential for one non-secret capability ID.
bearerCredential(DisclosureService.Capability, byte[]) - Static method in class zeroecho.pki.server.DisclosureService: Returns the strict one-time bearer credential for an issued capability.
beforeSigning(byte[], List, ContentSigner) - Method in class zeroecho.pki.server.ct.CtIssuanceInterceptor: Executes the CT pre-issuance pipeline and returns the modified TBSCertificate DER with SCTs embedded.
beginKeygen(EnrollmentCoordinator.Admission, X509Certificate) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Reserves all descriptor, CSR, approval, ciphertext and generation capacity before returning permission to generate one key.
Binding(String, String, Set, Instant, boolean) - Constructor for record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Binding: Validates complete EAB policy binding.
Binding(String, String, Set, Instant, boolean) - Constructor for record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Binding: Validates complete EAB policy binding.
bindingId() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the bindingId record component.
bindingId() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the bindingId record component.
bindingId() - Method in record class zeroecho.pki.server.OcspResponderService.RequestSignatureBinding: Returns the value of the bindingId record component.
body() - Method in record class zeroecho.pki.server.est.EstService.EnrollmentResult: Returns a defensive copy.
body() - Method in record class zeroecho.pki.server.scep.ScepService.CaCertificateResponse: Copies the response.
bool(String, boolean) - Static method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Defines a boolean argument.
BOOLEAN - Enum constant in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Boolean true/false.
BREAK_GLASS - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Break-glass authorization.
BREAK_GLASS - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for break-glass records.
breakGlass() - Method in class zeroecho.pki.server.ServerRealmContext: Returns durable break-glass service.
breakGlass(int, int) - Method in class zeroecho.pki.server.ServerControlStore: Returns a bounded stable page of break-glass records.
breakGlassFor(String) - Method in class zeroecho.pki.server.ServerControlStore: Lists break-glass records for one principal.
breakGlassGrantIds() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the breakGlassGrantIds record component.
breakGlassId() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the breakGlassId record component.
breakGlassId() - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateBreakGlass: Returns the value of the breakGlassId record component.
breakGlassId() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Returns the value of the breakGlassId record component.
breakGlassId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectBreakGlass: Returns the value of the breakGlassId record component.
breakGlassId() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeBreakGlass: Returns the value of the breakGlassId record component.
BreakGlassService - Class in zeroecho.pki.server: Durable, scoped, mandatory-expiry emergency authorization service.
BreakGlassService(ServerControlStore, Clock, AuditSink) - Constructor for class zeroecho.pki.server.BreakGlassService: Creates a durable break-glass service.
BreakGlassService.ActiveGrants - Record Class in zeroecho.pki.server: Active grants plus their identities for authorization and use auditing.
BreakGlassService.Record - Record Class in zeroecho.pki.server: Durable break-glass record.
BreakGlassService.State - Enum Class in zeroecho.pki.server: Break-glass lifecycle states.
browserOrigin() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the value of the browserOrigin record component.
budgets() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Returns the value of the budgets record component.
Budgets(int, int, long, int, int, Duration, Duration) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Validates exact positive budgets and their relationships.
build(byte[], List, ContentSigner) - Static method in class zeroecho.pki.server.ct.PreCertificateBuilder: Builds a CT pre-certificate from a TBSCertificate using the CA's content signer.
bytesReleased() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the bytesReleased record component.

C

CA_CERTIFICATE - Enum constant in enum class zeroecho.pki.server.DisclosureService.ObjectType: Certificate-authority certificate.
CA_CHAIN - Enum constant in enum class zeroecho.pki.server.DisclosureService.ObjectType: Ordered certificate-authority chain.
CA_CHAIN_DOWNLOAD - Enum constant in enum class zeroecho.pki.server.Permission.Action: Downloads a CA certificate chain.
CaCertificateResponse(String, byte[]) - Constructor for record class zeroecho.pki.server.scep.ScepService.CaCertificateResponse: Validates and copies the response body.
cacerts(EstEndpoint) - Method in class zeroecho.pki.server.est.EstService: Returns the CA certificate chain for the endpoint as MIME-base64-encoded CMS certs-only (RFC 7030 section 4.1).
caChain() - Method in record class zeroecho.pki.server.DisclosureService.Defaults: Returns the value of the caChain record component.
cacheClass() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Returns the value of the cacheClass record component.
cacheClass() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Content: Returns the value of the cacheClass record component.
cacheLifetime() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the cacheLifetime record component.
cacheLifetime() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the cacheLifetime record component.
call(CancellationSignal) - Method in interface zeroecho.pki.server.http.ServerRuntime.CancellableOperation: Computes a result, releasing every acquired resource before returning.
cancel(String, String) - Method in class zeroecho.pki.server.ApprovalService: Cancels a pending request by its requester.
CancelApproval(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.CancelApproval: Validates the operation's immutable input.
CANCELLED - Enum constant in enum class zeroecho.pki.server.ApprovalService.State: The requester cancelled the request.
canonicalKeySha256() - Method in record class zeroecho.pki.server.CertificateIdentityEvidence: Returns the value of the canonicalKeySha256 record component.
canonicalKeySha256() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Returns the value of the canonicalKeySha256 record component.
canonicalSha256() - Method in record class zeroecho.pki.server.acme.AcmeState.AccountKeyIdentity: Returns the value of the canonicalSha256 record component.
capabilitiesFor(PkiId) - Method in class zeroecho.pki.server.ServerControlStore: Lists capability commitments bound to one object.
capability() - Method in class zeroecho.pki.server.DisclosureService.IssuedCapability: Returns the persisted commitment-only metadata.
Capability(String, RealmId, PkiId, String, byte[], Instant, boolean) - Constructor for record class zeroecho.pki.server.DisclosureService.Capability: Creates compatibility metadata with a non-secret system issuer.
Capability(String, RealmId, PkiId, String, String, byte[], Instant, boolean) - Constructor for record class zeroecho.pki.server.DisclosureService.Capability: Creates capability metadata in the delivered state for embedded compatibility.
Capability(String, RealmId, PkiId, String, String, byte[], Instant, DisclosureService.DeliveryState, boolean) - Constructor for record class zeroecho.pki.server.DisclosureService.Capability: Validates and snapshots capability metadata.
CAPABILITY - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Delegated disclosure capability.
CAPABILITY - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for capability commitments.
capabilityBearer() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Access: Returns the value of the capabilityBearer record component.
capabilityId() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns the value of the capabilityId record component.
capabilityId() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeCapability: Returns the value of the capabilityId record component.
category - Variable in class zeroecho.pki.server.jfr.AuditWriteEvent: Audit category of the record, e.g.
certificate() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Returns the value of the certificate record component.
CERTIFICATE - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Issued certificate.
CERTIFICATE_CONFIRM - Enum constant in enum class zeroecho.pki.server.Permission.Action: Confirms certificate possession.
CERTIFICATE_DOWNLOAD - Enum constant in enum class zeroecho.pki.server.Permission.Action: Downloads a certificate.
CERTIFICATE_HOLD - Enum constant in enum class zeroecho.pki.server.Permission.Action: Places a certificate on hold.
CERTIFICATE_INVALID - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Presented certificate is invalid.
CERTIFICATE_ISSUE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Issues a certificate.
CERTIFICATE_PUBLICATION_CHANGE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Changes certificate publication.
CERTIFICATE_READ_CONTENT - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads certificate content.
CERTIFICATE_READ_METADATA - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads certificate metadata.
CERTIFICATE_READ_PII - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads certificate personal data.
CERTIFICATE_REKEY - Enum constant in enum class zeroecho.pki.server.Permission.Action: Replaces a certificate key.
CERTIFICATE_RELEASE_HOLD - Enum constant in enum class zeroecho.pki.server.Permission.Action: Releases a certificate hold.
CERTIFICATE_RENEW - Enum constant in enum class zeroecho.pki.server.Permission.Action: Renews a certificate.
CERTIFICATE_REVOKE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Permanently revokes a certificate.
CERTIFICATE_SEARCH - Enum constant in enum class zeroecho.pki.server.Permission.Action: Searches certificates.
certificateChain() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Signer: Returns the value of the certificateChain record component.
CertificateIdentityEvidence - Record Class in zeroecho.pki.server: Immutable realm-bound certificate and mathematical key commitments used only for enrollment separation.
CertificateIdentityEvidence(RealmId, String, String, Set, String) - Constructor for record class zeroecho.pki.server.CertificateIdentityEvidence: Validates fixed-size commitments and snapshots at most three SPKI hashes.
certificateProfileId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns the value of the certificateProfileId record component.
certificates() - Method in record class zeroecho.pki.server.OcspRequesterService.SignedRequest: Returns immutable defensive copies of the requester certificates.
certificateSha256() - Method in record class zeroecho.pki.server.CertificateIdentityEvidence: Returns the value of the certificateSha256 record component.
certificateSha256() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ClientCertificateMapping: Returns the value of the certificateSha256 record component.
Chain(PkiId, PkiId, PkiId, List, String, String, PublicRepositoryGateway.CacheClass) - Constructor for record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Snapshots exact order.
chainPath(PkiId, PkiId, PkiId, PublicRepositoryGateway.Access) - Method in class zeroecho.pki.server.PublicRepositoryGateway: Resolves one explicit chain path without constructing or preferring a path.
chainPathId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns the value of the chainPathId record component.
chainPathId() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the chainPathId record component.
chainPathId() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the chainPathId record component.
challenge(String, String) - Method in class zeroecho.pki.server.acme.AcmeService: Returns one account-owned challenge without URL-derived authority.
Challenge(String, String, AcmeState.ChallengeType, String, AcmeState.ChallengeStatus, String, int, Optional, Optional, Instant, Instant, String) - Constructor for record class zeroecho.pki.server.acme.AcmeState.Challenge: Validates token, provider, monotonic attempt and state.
challengeDirectory(String) - Method in class zeroecho.pki.server.acme.AcmeService: Resolves the exact frozen directory for one existing challenge resource.
challengeId() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the challengeId record component.
challengeIds() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns the value of the challengeIds record component.
challengePasswordHash() - Method in record class zeroecho.pki.server.scep.ScepEndpoint: Returns the value of the challengePasswordHash record component.
challengeProviderIds() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the challengeProviderIds record component.
challengeProviderIds() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the challengeProviderIds record component.
challengeProviders() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the challengeProviders record component.
challenges() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Graph: Returns the value of the challenges record component.
challenges(List, ClassLoader) - Static method in class zeroecho.pki.server.acme.AcmeProviders: Resolves only explicitly configured challenge-provider identities.
challengeTimeToLive() - Method in record class zeroecho.pki.server.CredentialConfirmationProofPolicy: Returns the value of the challengeTimeToLive record component.
challengeType - Variable in class zeroecho.pki.server.jfr.AcmeChallengeEvent: Challenge type: HTTP_01 or DNS_01.
challengeType() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the challengeType record component.
challengeType() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns the value of the challengeType record component.
challengeType() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns the value of the challengeType record component.
challengeTypes() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the challengeTypes record component.
challengeTypes() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the challengeTypes record component.
challengeTypes() - Method in class zeroecho.pki.server.acme.Http01ChallengeProvider
challengeTypes() - Method in class zeroecho.pki.server.acme.JndiDns01ChallengeProvider
challengeTypes() - Method in interface zeroecho.pki.server.spi.AcmeChallengeProvider: Returns the exact challenge types supported by this provider.
challengeTypes() - Method in interface zeroecho.pki.server.spi.v2.AcmeChallengeProvider: Returns the exact challenge types supported by this provider.
change(PkiId, DisclosureService.Policy, boolean, boolean, String) - Method in class zeroecho.pki.server.DisclosureService: Changes only disclosure metadata; increased exposure may require approval.
choice() - Method in record class zeroecho.pki.server.ApprovalService.Decision: Returns the value of the choice record component.
choice() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Decision: Returns the value of the choice record component.
choice() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideApproval: Returns the value of the choice record component.
choice() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Returns the value of the choice record component.
choices() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Returns the value of the choices record component.
cipherSuite() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Returns the value of the cipherSuite record component.
ciphertextBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.ArtifactBinding: Returns the value of the ciphertextBytes record component.
ciphertextSha256() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.ArtifactBinding: Returns the value of the ciphertextSha256 record component.
claim(String, String, String, Permission.Scope) - Method in class zeroecho.pki.server.ApprovalService: Validates and durably claims an approved operation before dispatch.
classification() - Method in exception class zeroecho.pki.server.OcspRequesterService.UnauthorizedException: Returns the rejection classification.
classification() - Method in interface zeroecho.pki.server.ServerControlOperationOutcome: Returns the response handling classification.
classification() - Method in class zeroecho.pki.server.ServerControlOperationOutcome.OneTimeSensitive
classification() - Method in record class zeroecho.pki.server.ServerControlOperationOutcome.Ordinary
classification() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Result: Returns the value of the classification record component.
classification() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Result: Returns the value of the classification record component.
classifyDelivery(String, boolean) - Method in class zeroecho.pki.server.DisclosureService: Persists the safe post-write delivery classification without changing token validity.
CLIENT_TRUST_REJECTED - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Client certificate trust validation failed.
CLIENT_USAGE_REJECTED - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Client certificate usage constraints reject authentication.
ClientCertificateMapping(String, String, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.ClientCertificateMapping: Validates stable identities and fixed-size lowercase commitments.
clientCertificateRequired() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Returns the value of the clientCertificateRequired record component.
close() - Method in interface zeroecho.pki.server.ct.CtLogClient: Releases resources held by this client (e.g., the underlying HTTP connection pool).
close() - Method in class zeroecho.pki.server.ct.HttpCtLogClient
close() - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Fences new work; active callers must drain before realm dependencies close.
close() - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator.KeygenDelivery
close() - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator.KeygenGeneration: Releases generation capacity.
close() - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Fences new leases and releases exclusive custody only after all borrowers have released their leases.
close() - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime.CredentialLease: Releases this borrower exactly once; it does not close shared custody.
close() - Method in class zeroecho.pki.server.est.EstServerKeygenResponse.Body: Releases the ciphertext lease; safe to call repeatedly.
close() - Method in class zeroecho.pki.server.http.AcmeTransport
close() - Method in class zeroecho.pki.server.http.CmpTransport
close() - Method in class zeroecho.pki.server.http.EstTransport
close() - Method in class zeroecho.pki.server.http.PkiHttpsTransport
close() - Method in class zeroecho.pki.server.http.PublicRepositoryTransport
close() - Method in class zeroecho.pki.server.http.ScepTransport
close() - Method in class zeroecho.pki.server.http.ServerRuntime
close() - Method in class zeroecho.pki.server.PkiHttpsServer: Quiesces admission, terminates the listener and bounded executors, then closes realm and authentication resources.
close() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Content: Closes the underlying immutable-content lease.
close() - Method in class zeroecho.pki.server.ServerControlStore: Opens no sidecar authority and closes the sole metadata authority idempotently.
close() - Method in class zeroecho.pki.server.ServerControlStore.ProtocolCursor: Releases the cursor and snapshot; repeated close is harmless.
close() - Method in class zeroecho.pki.server.ServerRealmContext: Quiesces the realm and releases resources through one retryable shared attempt.
close() - Method in interface zeroecho.pki.server.spi.PkiServerAuthenticator: Releases optional provider resources.
CLOSED - Enum constant in enum class zeroecho.pki.server.ServerRealmContext.State: All realm-owned resources are closed.
CLOSING - Enum constant in enum class zeroecho.pki.server.ServerRealmContext.State: Realm rejects new work while owned resources close.
CMP - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Protocol: Certificate Management Protocol.
CMP - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Protocol: CMP signature or password-based message protection.
CMP - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Protocol: Protected PKI messages.
CMP_ENDPOINT - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: CMP endpoint configuration.
CMP_ENDPOINT_ADMINISTER - Enum constant in enum class zeroecho.pki.server.Permission.Action: Administers a CMP endpoint.
CMP_ENDPOINT_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads a CMP endpoint.
CMP_RESPONSE - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for fixed CMP response slots owned by a manifest.
CMP_TRANSACTION - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for quota-reserved CMP transaction manifests.
cmpAddress() - Method in class zeroecho.pki.server.PkiHttpsServer: Returns the actual CMP listener address when enabled.
CmpEndpoint - Record Class in zeroecho.pki.server.cmp: Immutable binding that maps a CMP path suffix to a CA authority, an issuance profile, and a required PKIMessage protection policy.
CmpEndpoint(String, String, String, String, CmpProtectionPolicy) - Constructor for record class zeroecho.pki.server.cmp.CmpEndpoint: Validates all fields.
cmpListener() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the cmpListener record component.
CmpListener(String, InetAddress, int, ProviderConfig, PkiServerConfiguration.Execution, int, int) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Validates the CMP listener configuration.
CmpProtectionPolicy - Enum Class in zeroecho.pki.server.cmp: CMP PKIMessage protection policy required by a CMP endpoint.
CmpProtocolException - Exception Class in zeroecho.pki.server.cmp: Signals a CMP protocol-level error that maps to an HTTP error response.
CmpProtocolException(int, String) - Constructor for exception class zeroecho.pki.server.cmp.CmpProtocolException: Creates a CMP protocol exception.
CmpProtocolException(int, String, Throwable) - Constructor for exception class zeroecho.pki.server.cmp.CmpProtocolException: Creates a CMP protocol exception with a cause.
cmpResponse(CmpTransaction) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Returns a complete committed response from a consistent manifest/slot view.
CmpService - Class in zeroecho.pki.server.cmp: Authenticated CMP enrollment, replacement, revocation and CA discovery.
CmpService(ServerRealmContext) - Constructor for class zeroecho.pki.server.cmp.CmpService: Creates a protocol adapter with the system clock and secure nonce source.
CmpService(ServerRealmContext, Clock, SecureRandom) - Constructor for class zeroecho.pki.server.cmp.CmpService: Creates an adapter with explicit time and nonce capabilities.
CmpTransaction - Record Class in zeroecho.pki.server.enrollment: Immutable CMP wire continuation, independent of signing acceptance.
CmpTransaction(String, long, CmpTransaction.Frozen, Optional, Optional) - Constructor for record class zeroecho.pki.server.enrollment.CmpTransaction: Validates identity, state and allocation bounds without trusting persisted data.
CmpTransaction.Confirmation - Enum Class in zeroecho.pki.server.enrollment: Durable protocol confirmation, independent of domain credential confirmation.
CmpTransaction.Frozen - Record Class in zeroecho.pki.server.enrollment: Authenticated immutable reservation.
CmpTransaction.Response - Record Class in zeroecho.pki.server.enrollment: Metadata committed atomically with every fixed response slot.
CmpTransport - Class in zeroecho.pki.server.http: Lifecycle owner for the optional CMP RFC 4210/9480 HTTPS listener (RFC 6712 transport).
code() - Method in enum class zeroecho.pki.server.ApprovalService.Choice: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.ApprovalService.State: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.AuthorityExposurePolicy.Mode: Returns the stable persistence code.
code() - Method in record class zeroecho.pki.server.AuthorizationEngine.Decision: Returns the value of the code record component.
code() - Method in enum class zeroecho.pki.server.BreakGlassService.State: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.DisclosureService.DeliveryState: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.DisclosureService.ObjectType: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.DisclosureService.Policy: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.OcspResponderService.NoncePolicy: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.OcspResponderService.PrincipalMappingType: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.OcspResponderService.RequestAuthenticationMode: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.OcspResponderService.RequesterRevocationPolicy: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.OcspResponderService.SigningMode: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.OcspResponderService.State: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.OcspResponderService.TrustSelectorType: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.Permission.Action: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.Permission.Condition: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.Permission.DataView: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.Permission.Effect: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.Permission.Relationship: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.Permission.ResourceType: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.RepositoryAliasService.State: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.RepositoryAliasService.Type: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.server.SecurityPrincipal.Type: Returns the stable persistence code.
code() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.Denied: Returns the value of the code record component.
code() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Rejected: Returns the value of the code record component.
commitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns a stable commitment for this policy.
commitment() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction: Returns the complete versioned manifest commitment.
commitment() - Method in record class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Snapshot: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns complete revision-sensitive record commitment.
commitment() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns the complete versioned persisted record commitment.
commitment() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.OcspResponderService.PrincipalMapping: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.OcspResponderService.RequestSignatureBinding: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Returns the value of the commitment record component.
commitment() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolRecord: Returns the value of the commitment record component.
commitment(EnrollmentEndpoint) - Static method in class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry: Commits all endpoint fields independently of the storage revision.
commitment(EnrollmentProfile) - Static method in class zeroecho.pki.server.enrollment.EnrollmentProfileService: Commits every policy field using the same canonical encoding as persistence.
commitment(RealmId, PkiOperation, Permission.Resource) - Method in class zeroecho.pki.server.OperationSecurityDescriptors: Computes an exact deterministic safe PKI-operation commitment.
commitment(RealmId, AdministrativeOperation, Permission.Resource) - Method in class zeroecho.pki.server.OperationSecurityDescriptors: Computes an exact deterministic commitment for either closed operation family.
compile(String) - Static method in class zeroecho.pki.server.enrollment.EnrollmentSubjectPattern: Compiles the closed, bounded subject-pattern grammar.
complete(String, String) - Method in class zeroecho.pki.server.ApprovalService: Durably links the safe result of one claimed execution.
completeCredentialConfirmation(String, String, String, long, String, String, byte[]) - Method in class zeroecho.pki.server.acme.AcmeService: Completes or exactly replays confirmation proof processing for one valid account-owned order.
CONDITION_NOT_SATISFIED - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: Another closed grant condition was not satisfied.
conditions() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the conditions record component.
configuration() - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Returns explicit immutable settings; no credential material is exposed.
configuration() - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime.CredentialLease: Returns the exact frozen public configuration.
configuration() - Method in class zeroecho.pki.server.ServerRealmContext: Returns exact realm configuration without rendering provider values.
ConfigurationChoices(int, Optional) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ConfigurationChoices: Validates the bounded key page.
configurationCommitment() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the configurationCommitment record component.
CONFIGURED_TRUST_ANCHORS - Enum constant in enum class zeroecho.pki.server.OcspResponderService.TrustSelectorType: Selects explicitly configured trust-anchor credentials.
configuredChallengeProviders() - Method in class zeroecho.pki.server.acme.AcmeService: Returns configured challenge-provider identities and supported challenge types without options.
configuredEabProviders() - Method in class zeroecho.pki.server.acme.AcmeService: Returns explicitly configured external-account-binding provider identifiers without options.
confirmation() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns the value of the confirmation record component.
confirmationDeadline() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns the value of the confirmationDeadline record component.
confirmationPolicy() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the confirmationPolicy record component.
confirmationPolicyCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the confirmationPolicyCommitment record component.
confirmationProofPolicy() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the confirmationProofPolicy record component.
consume(String, String) - Method in class zeroecho.pki.server.acme.AcmeNonceService: Consumes one nonce exactly once for the bound listener and canonical alias scope.
consumed() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Binding: Returns the value of the consumed record component.
consumed() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Binding: Returns the value of the consumed record component.
consumeToken() - Method in class zeroecho.pki.server.ServerControlOperationOutcome.OneTimeSensitive: Consumes the raw token exactly once and clears the retained copy.
contacts() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the contacts record component.
content() - Method in record class zeroecho.pki.server.AuditorViews.FullContent: Returns a defensive content copy.
content() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the content record component.
Content(PkiRepositoryContent, String, String, PublicRepositoryGateway.CacheClass) - Constructor for record class zeroecho.pki.server.PublicRepositoryGateway.Content: Validates response metadata.
CONTENT_FULL - Enum constant in enum class zeroecho.pki.server.Permission.DataView: Complete object content.
contentType() - Method in class zeroecho.pki.server.est.EstServerKeygenResponse: Returns the transport media type.
contentType() - Method in record class zeroecho.pki.server.scep.ScepService.CaCertificateResponse: Returns the value of the contentType record component.
context() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the context record component.
context() - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Returns the value of the context record component.
context() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the context record component.
Context(String, String, AcmeState.Identifier, AcmeState.ChallengeType, String, String, int, Instant, Instant) - Constructor for record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Validates complete attempt binding.
Context(String, String, AcmeChallengeProvider.Identifier, AcmeChallengeProvider.ChallengeType, String, String, int, Instant, Instant) - Constructor for record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Validates complete attempt binding.
Context(Optional, boolean, boolean, Map) - Constructor for record class zeroecho.pki.server.Permission.Context: Validates the finite condition context.
Control(ServerControlOperation) - Constructor for record class zeroecho.pki.server.AdministrativeOperation.Control: Validates the typed control operation.
ControlExecuted(ServerControlOperationOutcome) - Constructor for record class zeroecho.pki.server.ServerOperationGateway.Outcome.ControlExecuted: Validates the control result.
controlLogPath() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the controlLogPath record component.
controlStoreId() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns the value of the controlStoreId record component.
controlStoreId() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the controlStoreId record component.
correlationId() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Access: Returns the value of the correlationId record component.
correlationId() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the correlationId record component.
create(String, String, PkiId, PkiId, OcspResponderService.SigningMode, PkiId, KeyRef, PkiId, String, Optional, String, OcspResponseService.ResponderId, Duration, OcspResponderService.NoncePolicy, int, Set, int, int, Duration) - Method in class zeroecho.pki.server.OcspResponderService: Creates a canonical unsigned-only unsealed record before registration.
create(String, String, PkiId, PkiId, OcspResponderService.SigningMode, PkiId, KeyRef, PkiId, String, Optional, String, OcspResponseService.ResponderId, Duration, OcspResponderService.NoncePolicy, int, Set, int, int, Duration, OcspResponderService.RequestAuthenticationMode, Optional) - Method in class zeroecho.pki.server.OcspResponderService: Creates a canonical unsealed record with explicit signed-request policy.
create(String, String, Permission.Grant, String, String, Optional, Instant) - Method in class zeroecho.pki.server.BreakGlassService: Creates one durable pending emergency grant without activating it.
create(T) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Creates one record after canonical sealing.
create(CtLogDescriptor) - Static method in class zeroecho.pki.server.ct.HttpCtLogClient: Creates a client for the given CT log using a virtual-thread-based HTTP client.
create(PkiServerConfiguration.Authentication, Function, BiFunction, Clock, ClassLoader) - Static method in class zeroecho.pki.server.http.AdministrativeAuthenticator: Creates the configured authentication composition before listener startup.
create(ProviderConfig) - Method in class zeroecho.pki.server.http.Pkcs12ClientTrustProvider
create(ProviderConfig) - Method in class zeroecho.pki.server.http.Pkcs12TlsProvider
create(ProviderConfig) - Method in interface zeroecho.pki.server.spi.PkiServerClientTrustProvider: Creates an independent client trust manager without exposing trust-store secrets.
create(ProviderConfig) - Method in interface zeroecho.pki.server.spi.PkiServerTlsProvider: Creates one fully initialized mutual-TLS context.
create(ProviderConfig) - Method in interface zeroecho.pki.server.spi.v2.PkiServerClientTrustProvider: Creates an independent client trust manager without exposing trust-store secrets.
create(ProviderConfig) - Method in interface zeroecho.pki.server.spi.v2.PkiServerTlsProvider: Creates one fully initialized mutual-TLS context.
CREATE - Static variable in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Stable operation identity used for authorization and dispatch.
createAccount(AcmeState.Directory, String, byte[], List, boolean, Optional, boolean) - Method in class zeroecho.pki.server.acme.AcmeService: Creates or returns an account under one exact active directory.
createApproval(ApprovalService.Request) - Method in class zeroecho.pki.server.ServerControlStore: Creates one approval request.
createAssignment(RoleTemplateCatalog.Assignment) - Method in class zeroecho.pki.server.ServerControlStore: Creates one scoped role assignment.
createBreakGlass(BreakGlassService.Record) - Method in class zeroecho.pki.server.ServerControlStore: Creates one break-glass record.
CreateBreakGlass(String, String, Permission.Grant, String, Instant) - Constructor for record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Validates the operation's immutable input.
createCapability(DisclosureService.Capability) - Method in class zeroecho.pki.server.ServerControlStore: Creates one commitment-only capability record.
createChallenge(KeyPossessionProofChallengeContext) - Method in class zeroecho.pki.server.confirmation.SignatureKeyPossessionProofProvider
created() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Transition: Returns the value of the created record component.
createdAt() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the createdAt record component.
createDisclosure(DisclosureService.Record) - Method in class zeroecho.pki.server.ServerControlStore: Creates one disclosure record.
createGrant(Permission.Grant) - Method in class zeroecho.pki.server.ServerControlStore: Creates one direct grant.
CreateGrant(Permission.Grant) - Constructor for record class zeroecho.pki.server.ServerControlOperation.CreateGrant: Validates the operation's immutable input.
createOrder(String, String, AcmeState.Directory, List, Optional, Optional, Duration) - Method in class zeroecho.pki.server.acme.AcmeService: Atomically creates one account-owned order, authorization, and challenge graph.
createOrderGraph(AcmeState.Order, List, List) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Atomically creates an order and its complete authorization/challenge graph.
createPrincipal(SecurityPrincipal) - Method in class zeroecho.pki.server.ServerControlStore: Creates one principal.
createPrincipal(SecurityPrincipal, String) - Method in class zeroecho.pki.server.ServerRealmContext: Creates a principal and records only safe administrative audit metadata.
createRepositoryAlias(RepositoryAliasService.Record) - Method in class zeroecho.pki.server.ServerControlStore: Creates one exact repository alias record.
CreateRoleAssignment(RoleTemplateCatalog.Assignment) - Constructor for record class zeroecho.pki.server.ServerControlOperation.CreateRoleAssignment: Validates the operation's immutable input.
credential(PkiId, PublicRepositoryGateway.Access) - Method in class zeroecho.pki.server.PublicRepositoryGateway: Opens one exact leaf certificate; object identity alone grants no access.
CredentialConfirmationProofPolicy - Record Class in zeroecho.pki.server: Immutable realm configuration for credential-confirmation proof challenges.
CredentialConfirmationProofPolicy(CredentialConfirmationProofAudience, Duration, int) - Constructor for record class zeroecho.pki.server.CredentialConfirmationProofPolicy: Validates the exact audience and shared portable proof bounds.
credentialEvidence() - Method in record class zeroecho.pki.server.AdministrativeDecisionActor: Returns the value of the credentialEvidence record component.
credentialEvidence() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the credentialEvidence record component.
credentialEvidence() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Returns the value of the credentialEvidence record component.
credentialId() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.ActiveCredential: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.server.ServerControlOperation.EnrollCredentialPublication: Returns the value of the credentialId record component.
credentialNotAfter(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Returns the immutable end of the credential and validated chain validity window.
credentialPublication() - Method in class zeroecho.pki.server.ServerRealmContext: Returns synchronous authoritative credential publication gate.
CredentialPublicationGate - Class in zeroecho.pki.server: Synchronous stateless gate that freezes confirmation before leaf disclosure.
CredentialPublicationGate.AuditActor - Record Class in zeroecho.pki.server: Explicit administrative audit identity, distinct from credential ownership.
CredentialSet(String, EnrollmentRuntimeConfiguration.Protocol, String, String, String, Optional, List, List, Optional) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Validates the closed protocol capability combination.
credentialSets() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Returns the value of the credentialSets record component.
crl() - Method in record class zeroecho.pki.server.DisclosureService.Defaults: Returns the value of the crl record component.
CRL - Enum constant in enum class zeroecho.pki.server.DisclosureService.ObjectType: Complete certificate revocation list.
CRL_DOWNLOAD - Enum constant in enum class zeroecho.pki.server.Permission.Action: Downloads a certificate revocation list.
CRL_GENERATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Generates a certificate revocation list.
CRL_PUBLISH - Enum constant in enum class zeroecho.pki.server.Permission.Action: Publishes a certificate revocation list.
CrlGenerationEvent - Class in zeroecho.pki.server.jfr: JFR event emitted when a CRL or OCSP status object is generated.
CrlGenerationEvent() - Constructor for class zeroecho.pki.server.jfr.CrlGenerationEvent: Creates an uncommitted event with default field values; populate fields before committing.
csrattrs(EstEndpoint) - Method in class zeroecho.pki.server.est.EstService: Returns CSR attribute suggestions as MIME-base64-encoded RFC 7030 CsrAttrs DER (RFC 7030 section 4.5).
CtIssuanceInterceptor - Class in zeroecho.pki.server.ct: Certificate Transparency pipeline stage that runs between request approval and final certificate signing (Mode B — external CT log submission).
CtIssuanceInterceptor(List, Map, int, Duration) - Constructor for class zeroecho.pki.server.ct.CtIssuanceInterceptor: Creates a CT issuance interceptor.
CtLogClient - Interface in zeroecho.pki.server.ct: Client for a single Certificate Transparency log endpoint.
CtLogSubmitter - Class in zeroecho.pki.server.ct: Submits a pre-certificate to multiple CT logs in parallel using virtual threads.
CtSubmissionException - Exception Class in zeroecho.pki.server.ct: Thrown when pre-certificate submission to a CT log fails.
CtSubmissionException(String, String) - Constructor for exception class zeroecho.pki.server.ct.CtSubmissionException: Creates an exception for the given CT log.
CtSubmissionException(String, String, Throwable) - Constructor for exception class zeroecho.pki.server.ct.CtSubmissionException: Creates an exception wrapping a lower-level cause.
current() - Static method in class zeroecho.pki.server.schema.OperationDescriptorCatalog: Returns the lazily assembled current catalog.
CURRENT_CHAIN - Enum constant in enum class zeroecho.pki.server.RepositoryAliasService.Type: Stable route to one explicit immutable issuer chain path.
CURRENT_CRL - Enum constant in enum class zeroecho.pki.server.RepositoryAliasService.Type: Stable route to one explicit immutable CRL.
CURRENT_DELTA_CRL - Enum constant in enum class zeroecho.pki.server.RepositoryAliasService.Type: Stable route to one explicit immutable delta CRL.
CURRENT_VERSION - Static variable in record class zeroecho.pki.server.PkiServerConfiguration: Current server configuration schema.
currentChain(PkiId, PublicRepositoryGateway.Access) - Method in class zeroecho.pki.server.PublicRepositoryGateway: Resolves the stable chain route only through CURRENT_CHAIN metadata.
currentCrl(PkiId, PublicRepositoryGateway.Access) - Method in class zeroecho.pki.server.PublicRepositoryGateway: Resolves the stable current-CRL route only through CURRENT_CRL metadata.
currentDeltaCrl(PkiId, PublicRepositoryGateway.Access) - Method in class zeroecho.pki.server.PublicRepositoryGateway: Resolves the stable current-delta-CRL route only through CURRENT_DELTA_CRL metadata.
currentIssuanceIssuerId() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Authority: Returns the value of the currentIssuanceIssuerId record component.
currentThreadIsServerWorker() - Static method in class zeroecho.pki.server.http.PkiHttpsTransport: Reports the implementation-owned worker marker used to prevent lifecycle self-waits.

D

dataView() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the dataView record component.
dataView() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns the value of the dataView record component.
dataView() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the dataView record component.
dataView() - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Returns the value of the dataView record component.
DEACTIVATE - Static variable in record class zeroecho.pki.server.ServerControlOperation.SetAcmeDirectoryActive: Stable operation identity used for authorization and dispatch.
DEACTIVATE - Static variable in record class zeroecho.pki.server.ServerControlOperation.SetOcspResponderActive: Stable operation identity used for authorization and dispatch.
deactivateAccount(String) - Method in class zeroecho.pki.server.acme.AcmeService: Durably changes account status while preserving its key and history commitment.
deactivateAccount(String, String) - Method in class zeroecho.pki.server.acme.AcmeService: Durably changes account status after exact account-key authority revalidation.
DeactivateAcmeAccount(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.DeactivateAcmeAccount: Validates the operation's immutable input.
DEACTIVATED - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.AccountStatus: Account was voluntarily deactivated.
DEACTIVATED - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.AuthorizationStatus: Authorization was administratively deactivated.
deactivateDirectory(String) - Method in class zeroecho.pki.server.acme.AcmeService: Deactivates new account/order admission while existing unexpired orders remain usable.
deadline() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns the value of the deadline record component.
decide(String, String, AdministrativeDecisionActor, ApprovalService.Choice, String) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Persists an independently authenticated, currently eligible decision before acknowledgement.
decide(String, String, ApprovalService.Choice, String) - Method in class zeroecho.pki.server.ApprovalService: Records one distinct qualified decision and advances the durable state.
decide(PkiId, Optional, boolean, boolean, Optional) - Method in class zeroecho.pki.server.DisclosureService: Evaluates direct retrieval separately from search authorization.
DecideApproval(String, ApprovalService.Choice, String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.DecideApproval: Validates the operation's immutable input.
decidedAt() - Method in record class zeroecho.pki.server.ApprovalService.Decision: Returns the value of the decidedAt record component.
decidedAt() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Decision: Returns the value of the decidedAt record component.
DecideEnrollmentRequest(String, String, ApprovalService.Choice, String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Validates all caller-controlled decision fields.
decideRepository(PkiId, Optional, boolean, boolean, Optional) - Method in class zeroecho.pki.server.DisclosureService: Evaluates public repository retrieval using a point-addressable bearer credential.
Decision(String, ApprovalService.Choice, String, Instant) - Constructor for record class zeroecho.pki.server.ApprovalService.Decision: Validates the decision.
Decision(String, CertificateIdentityEvidence, ApprovalService.Choice, String, Instant) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Decision: Validates bounded immutable decision evidence.
Decision(AuthorizationEngine.Code, boolean) - Constructor for record class zeroecho.pki.server.AuthorizationEngine.Decision: Validates result invariants.
decisions() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the decisions record component.
decisions() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns the value of the decisions record component.
decode(byte[]) - Static method in record class zeroecho.pki.server.BackupTransferConfiguration: Parses a closed version-1 transfer configuration.
decode(byte[]) - Static method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Decodes a closed version-one JSON document, at most 1 MiB.
decode(byte[]) - Static method in class zeroecho.pki.server.PkiServerConfigurationCodec: Decodes one bounded strict configuration document.
decodeAccount(ServerControlStore.ProtocolRecord) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Validates an account from a stable startup snapshot without a second lookup.
defaultDeadline() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns the value of the defaultDeadline record component.
defaultPolicy(DisclosureService.ObjectType, boolean, boolean) - Method in class zeroecho.pki.server.DisclosureService: Returns the default policy for one object classification.
defaults() - Static method in record class zeroecho.pki.server.PkiServerConfiguration.AuditProjection: Returns the current production defaults.
defaults() - Static method in record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Returns the standard bounded reconciliation policy.
Defaults(DisclosureService.Policy, DisclosureService.Policy, DisclosureService.Policy, DisclosureService.Policy, DisclosureService.Policy, DisclosureService.Policy) - Constructor for record class zeroecho.pki.server.DisclosureService.Defaults: Validates non-null defaults and prohibits public sensitive-leaf defaults.
definitions() - Static method in class zeroecho.pki.server.OperationSecurityDescriptors: Returns the typed, immutable security definitions used to assemble the catalog.
definitions() - Static method in class zeroecho.pki.server.schema.OperationParameterSchemas: Returns pure parameter definitions for catalog assembly.
DELEGATED_RESPONDER - Enum constant in enum class zeroecho.pki.server.OcspResponderService.SigningMode: Uses an issuer-authorized delegated responder certificate and key.
DELIVERED - Enum constant in enum class zeroecho.pki.server.DisclosureService.DeliveryState: The raw token was delivered exactly once.
DELIVERY_UNKNOWN - Enum constant in enum class zeroecho.pki.server.DisclosureService.DeliveryState: Delivery may have occurred but could not be confirmed.
deliveryDeadline() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the deliveryDeadline record component.
deliveryRetention() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Returns the value of the deliveryRetention record component.
deliveryState() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns the value of the deliveryState record component.
delta - Variable in class zeroecho.pki.server.jfr.CrlGenerationEvent: Whether this is a delta CRL rather than a full CRL.
DELTA_CRL - Enum constant in enum class zeroecho.pki.server.DisclosureService.ObjectType: Delta certificate revocation list.
Denied(AuthorizationEngine.Code) - Constructor for record class zeroecho.pki.server.ServerOperationGateway.Outcome.Denied: Validates the safe code.
DENIED - Enum constant in enum class zeroecho.pki.server.DisclosureService.Decision: Retrieval is denied without revealing object existence.
DENY - Enum constant in enum class zeroecho.pki.server.Permission.Effect: Explicitly denies the action.
deregister(String) - Method in class zeroecho.pki.server.cmp.CmpService: Removes the durable binding.
deregister(String) - Method in class zeroecho.pki.server.est.EstService: Removes the endpoint with the given label.
deregister(String) - Method in class zeroecho.pki.server.scep.ScepService: Removes an endpoint.
deregister(EnrollmentEndpointRegistry.Protocol, String) - Method in class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry: Atomically tombstones an active endpoint without discarding its revision.
DeregisterCmpEndpoint(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.DeregisterCmpEndpoint: Validates the label.
DeregisterEstEndpoint(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.DeregisterEstEndpoint: Validates the label.
DeregisterScepEndpoint(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.DeregisterScepEndpoint: Validates the label.
descriptor() - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator.KeygenGeneration: Returns immutable original template, policy and resource reservation.
descriptor(int) - Method in class zeroecho.pki.server.confirmation.SignatureKeyPossessionProofProvider
descriptor(String) - Method in class zeroecho.pki.server.ServerOperationGateway: Resolves one descriptor by stable ID before closed typed decoding.
descriptor(PkiOperation) - Method in class zeroecho.pki.server.ServerOperationGateway: Resolves the existing security descriptor for a decoded typed operation.
descriptor(AdministrativeOperation) - Method in class zeroecho.pki.server.ServerOperationGateway: Resolves one descriptor by its immutable administrative operation family.
Descriptor(String, OperationSecurityDescriptors.Family, Permission.Action, Permission.ResourceType, boolean, Permission.DataView, OperationSecurityDescriptors.ApprovalCategory, OperationSecurityDescriptors.Eligibility) - Constructor for record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Validates one finite descriptor.
Descriptor(String, Permission.Action, Permission.ResourceType, boolean, Permission.DataView, OperationSecurityDescriptors.ApprovalCategory, OperationSecurityDescriptors.Eligibility) - Constructor for record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Creates an existing PKI-family descriptor for embedded callers.
descriptors() - Method in class zeroecho.pki.server.OperationSecurityDescriptors: Returns the complete descriptor registry.
digest(String) - Static method in class zeroecho.pki.server.ApprovalService: Computes a deterministic SHA-256 hexadecimal commitment.
digests() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Returns the value of the digests record component.
DIRECT_MTLS - Enum constant in enum class zeroecho.pki.server.AdministrativeAuthenticationMode: ZeroEcho validates and maps the TLS peer as the administrative client.
DIRECT_TLS - Enum constant in enum class zeroecho.pki.server.PkiServerConfiguration.AcmeTransportMode: Client connects directly through server-authenticated TLS.
directClientMappings() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the directClientMappings record component.
directories(int, int) - Method in class zeroecho.pki.server.acme.AcmeService: Returns a deterministic bounded page of directory revisions.
directory() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the value of the directory record component.
directory() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Returns the value of the directory record component.
directory(String) - Method in class zeroecho.pki.server.acme.AcmeService: Returns one exact directory revision for administrative and protocol inspection.
Directory(String, String, int, RealmId, PkiId, CertificateProfileRef, String, PkiId, PkiId, String, Set, Set, Duration, Set, Set, Set, Set, Optional, boolean, CredentialConfirmationPolicy, String, AcmeState.DirectoryStatus, String, Instant, String) - Constructor for record class zeroecho.pki.server.acme.AcmeState.Directory: Validates the complete frozen directory revision.
directoryId() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the directoryId record component.
directoryId() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the directoryId record component.
directoryId() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the directoryId record component.
directoryId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeDirectory: Returns the value of the directoryId record component.
directoryId() - Method in record class zeroecho.pki.server.ServerControlOperation.SetAcmeDirectoryActive: Returns the value of the directoryId record component.
directoryId() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns the value of the directoryId record component.
directoryId() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Returns the value of the directoryId record component.
directoryId() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns the value of the directoryId record component.
directoryId() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Returns the value of the directoryId record component.
directoryPolicyCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the directoryPolicyCommitment record component.
directoryPolicyCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the directoryPolicyCommitment record component.
directoryPolicyCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the directoryPolicyCommitment record component.
DirectoryRegistration(String, PkiId, String, String, Set, Duration, Set, Set, Set, Set, Optional, boolean) - Constructor for record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Validates required registration input before PKI resolution.
directoryRevision() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the directoryRevision record component.
directoryRevision() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the directoryRevision record component.
DISABLE - Static variable in record class zeroecho.pki.server.ServerControlOperation.SetPrincipalEnabled: Stable operation identity used for authorization and dispatch.
disabled() - Static method in class zeroecho.pki.server.ct.CtIssuanceInterceptor: Returns a disabled interceptor that passes tbsCertificateDer through unchanged.
DISABLED - Static variable in record class zeroecho.pki.server.est.KeygenPolicy: Sentinel policy for endpoints where server-side key generation is disabled.
disclosure() - Method in class zeroecho.pki.server.ServerRealmContext: Returns durable disclosure decision service.
DISCLOSURE - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Disclosure configuration or result.
DISCLOSURE - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for disclosure records.
DISCLOSURE_CAPABILITY_ISSUE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Issues a disclosure capability.
DISCLOSURE_CAPABILITY_REVOKE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Revokes a disclosure capability.
DISCLOSURE_CHANGE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Changes disclosure policy or state.
DISCLOSURE_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads disclosure policy and state.
disclosureCommitment() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns the value of the disclosureCommitment record component.
disclosureCommitment() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the disclosureCommitment record component.
disclosureDefaults() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the disclosureDefaults record component.
disclosures(int, int) - Method in class zeroecho.pki.server.ServerControlStore: Returns a bounded stable page of disclosure records.
DisclosureService - Class in zeroecho.pki.server: Durable disclosure authority and capability-based retrieval decision service.
DisclosureService(RealmId, ServerControlStore, DisclosureService.Defaults, Clock, SecureRandom, AuditSink) - Constructor for class zeroecho.pki.server.DisclosureService: Creates a durable disclosure service with an injected random source and clock.
DisclosureService.Capability - Record Class in zeroecho.pki.server: Persisted commitment-only capability authority.
DisclosureService.Decision - Enum Class in zeroecho.pki.server: Safe retrieval result that reveals no protected-object existence.
DisclosureService.Defaults - Record Class in zeroecho.pki.server: Configuration-driven safe defaults.
DisclosureService.DeliveryState - Enum Class in zeroecho.pki.server: Durable one-time delivery classification without retaining the raw token.
DisclosureService.IssuedCapability - Class in zeroecho.pki.server: One-time raw-token issuance result.
DisclosureService.ObjectType - Enum Class in zeroecho.pki.server: Public-object classes with independent default policies.
DisclosureService.Owner - Record Class in zeroecho.pki.server: Typed disclosure owner, keeping ACME accounts outside administrative principals.
DisclosureService.Owner.OwnerType - Enum Class in zeroecho.pki.server: Closed owner categories.
DisclosureService.Policy - Enum Class in zeroecho.pki.server: Persisted disclosure states, independent of issuance and publication.
DisclosureService.Record - Record Class in zeroecho.pki.server: Durable policy bound to exact object and profile/policy commitment.
discoverableOperations(String) - Method in class zeroecho.pki.server.ServerOperationGateway: Returns operation descriptors discoverable by one principal without returning grant scopes or protected resource identities.
dispatch(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Dispatches or reconciles one approved request.
dispatch(String, CancellationSignal) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Dispatches with cooperative cancellation before the durable claim.
dispatch(String, CancellationSignal, Runnable) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Dispatches with a transport-owned last pre-claim validation.
DISPATCHING - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Durable admission owns the exact prepared receipt.
displayName() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns the value of the displayName record component.
displayName() - Method in record class zeroecho.pki.server.SecurityPrincipal: Returns the value of the displayName record component.
displayName() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns the value of the displayName record component.
displayName() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the displayName record component.
DNS - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.IdentifierType: Domain Name System identifier.
DNS - Enum constant in enum class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.IdentifierType: Domain Name System identifier.
DNS_01 - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.ChallengeType: DNS TXT-record validation.
DNS_01 - Enum constant in enum class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.ChallengeType: DNS TXT-record validation.
dnsNamespaces() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the dnsNamespaces record component.
dnsNamespaces() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the dnsNamespaces record component.
dnsNamespaces() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Binding: Returns the value of the dnsNamespaces record component.
dnsNamespaces() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Binding: Returns the value of the dnsNamespaces record component.
DOWNLOAD - Enum constant in enum class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand.Action: Consumes a single authorized archive download.
DOWNLOAD - Static variable in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Download backup archive operation identity.

E

eab(List, ClassLoader) - Static method in class zeroecho.pki.server.acme.AcmeProviders: Resolves only explicitly configured EAB-provider identities.
eabPolicyCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the eabPolicyCommitment record component.
eabProviderId() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the eabProviderId record component.
eabProviderId() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the eabProviderId record component.
eabProviders() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the eabProviders record component.
eabRequired() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the eabRequired record component.
eabRequired() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the eabRequired record component.
effect() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the effect record component.
eligibility() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns the value of the eligibility record component.
eligibleApprovers() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns the value of the eligibleApprovers record component.
empty() - Static method in record class zeroecho.pki.server.Permission.Context: Creates an empty safe context.
ENABLE - Static variable in record class zeroecho.pki.server.ServerControlOperation.SetPrincipalEnabled: Stable operation identity used for authorization and dispatch.
enabled() - Method in record class zeroecho.pki.server.est.KeygenPolicy: Returns the value of the enabled record component.
enabled() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the enabled record component.
enabled() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Returns the value of the enabled record component.
enabled() - Method in record class zeroecho.pki.server.SecurityPrincipal: Returns the value of the enabled record component.
enabled() - Method in record class zeroecho.pki.server.ServerControlOperation.SetPrincipalEnabled: Returns the value of the enabled record component.
encode(PkiOperationValue) - Static method in class zeroecho.pki.server.http.StrictJson: Encodes one safe operation value deterministically as UTF-8 JSON.
endClientPrincipalId() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Returns the value of the endClientPrincipalId record component.
endClientPrincipalId() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Rejected: Returns the value of the endClientPrincipalId record component.
endpoint() - Method in record class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Snapshot: Returns the value of the endpoint record component.
endpoint() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterCmpEndpoint: Returns the value of the endpoint record component.
endpoint() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEstEndpoint: Returns the value of the endpoint record component.
endpoint() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterScepEndpoint: Returns the value of the endpoint record component.
endpointId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns the value of the endpointId record component.
EnrollCredentialPublication(PkiId, Optional) - Constructor for record class zeroecho.pki.server.ServerControlOperation.EnrollCredentialPublication: Validates the operation's immutable input.
enrollment() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns whether the transaction requires an attached issuance workflow.
ENROLLMENT_CREDENTIAL - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for immutable enrollment credential-set commitments.
ENROLLMENT_ENDPOINT - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for revisioned enrollment endpoint bindings and tombstones.
ENROLLMENT_KEYGEN - Static variable in class zeroecho.pki.server.ServerControlStore: Immutable server-keygen reservations and encrypted delivery lifecycle.
ENROLLMENT_PROFILE - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Enrollment profile configuration.
ENROLLMENT_PROFILE - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for durable enrollment policy profiles.
ENROLLMENT_PROFILE_ADMINISTER - Enum constant in enum class zeroecho.pki.server.Permission.Action: Administers an enrollment profile.
ENROLLMENT_PROFILE_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads an enrollment profile.
ENROLLMENT_REQUEST - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Durable protocol enrollment transaction and independent approval.
ENROLLMENT_REQUEST - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for durable enrollment transactions and replay tombstones.
enrollmentCommitment() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns the value of the enrollmentCommitment record component.
enrollmentCoordinator() - Method in class zeroecho.pki.server.ServerRealmContext: Returns the coordinator installed for this realm's enrollment services.
EnrollmentCoordinator - Class in zeroecho.pki.server.enrollment: Realm-owned durable enrollment admission, independent approval and exact signing continuation.
EnrollmentCoordinator(ServerControlStore, ServerRealmConfiguration, PkiSession, EnrollmentEndpointRegistry, EnrollmentProfileService, AcmeControlStore, EnrollmentRuntime, EnrollmentIdentityAliases, Clock) - Constructor for class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Validates retained references and rebuilds bounded counters before readiness.
EnrollmentCoordinator.Admission - Record Class in zeroecho.pki.server.enrollment: Verified adapter input; this API does not authenticate wire messages.
EnrollmentCoordinator.KeygenDelivery - Class in zeroecho.pki.server.enrollment: Bounded ciphertext borrower; the caller must close it on every HTTP outcome.
EnrollmentCoordinator.KeygenGeneration - Class in zeroecho.pki.server.enrollment: Exclusive generation claim.
EnrollmentEndpoint - Interface in zeroecho.pki.server.enrollment: Closed immutable protocol binding with an explicit enrollment policy.
EnrollmentEndpointRegistry - Class in zeroecho.pki.server.enrollment: Realm-owned, thread-safe durable endpoint registry.
EnrollmentEndpointRegistry(ServerControlStore, EnrollmentProfileService) - Constructor for class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry: Opens the registry and validates every persisted record and active binding.
EnrollmentEndpointRegistry.Protocol - Enum Class in zeroecho.pki.server.enrollment: Closed protocols sharing the durable enrollment endpoint authority.
EnrollmentEndpointRegistry.Snapshot - Record Class in zeroecho.pki.server.enrollment: Exact persisted endpoint snapshot suitable for binding an approval request.
enrollmentEndpoints() - Method in class zeroecho.pki.server.ServerRealmContext: Returns the realm-owned durable enrollment endpoint authority.
enrollmentId() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction: Returns the value of the enrollmentId record component.
enrollmentId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns exact linked enrollment identity, whether delivery remains available or expired.
EnrollmentIdentityAliases - Class in zeroecho.pki.server.enrollment: Conservative, exclusion-only aliases derived from configured end-client credential commitments.
EnrollmentIdentityAliases(RealmId, PkiServerConfiguration.Authentication) - Constructor for class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases: Selects only end-client mappings for the configured administrative topology.
EnrollmentIdentityAliases.Snapshot - Record Class in zeroecho.pki.server.enrollment: Immutable sorted aliases bound to one realm; at most 20,000 entries permits union of one frozen and one current configuration snapshot.
EnrollmentKeygenArtifact - Record Class in zeroecho.pki.server.enrollment: Durable server-keygen reservation and encrypted delivery lifecycle.
EnrollmentKeygenArtifact(String, long, EnrollmentTransaction.Intent, String, int, long, int, Instant, EnrollmentKeygenArtifact.State, Optional, boolean) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Validates the closed persistent grammar and all immutable linkage fields.
EnrollmentKeygenArtifact.State - Enum Class in zeroecho.pki.server.enrollment: Durable phases distinguish an interrupted generation from an attached enrollment.
EnrollmentProfile - Record Class in zeroecho.pki.server.enrollment: Immutable enrollment profile.
EnrollmentProfile(String, String, EnrollmentProfileState, String, Set, Optional, List, boolean) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentProfile: Validates and defensively copies the record.
enrollmentProfileId() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the enrollmentProfileId record component.
enrollmentProfileId() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the enrollmentProfileId record component.
enrollmentProfileId() - Method in record class zeroecho.pki.server.cmp.CmpEndpoint: Returns the value of the enrollmentProfileId record component.
enrollmentProfileId() - Method in interface zeroecho.pki.server.enrollment.EnrollmentEndpoint: Returns the admission-policy binding.
enrollmentProfileId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns the value of the enrollmentProfileId record component.
enrollmentProfileId() - Method in record class zeroecho.pki.server.est.EstEndpoint: Returns the value of the enrollmentProfileId record component.
enrollmentProfileId() - Method in record class zeroecho.pki.server.scep.ScepEndpoint: Returns the value of the enrollmentProfileId record component.
enrollmentProfiles() - Method in class zeroecho.pki.server.ServerRealmContext: Returns the realm-owned durable enrollment policy authority.
EnrollmentProfileService - Class in zeroecho.pki.server.enrollment: Durable, thread-safe enrollment profile registry owned by one realm.
EnrollmentProfileService(ServerControlStore) - Constructor for class zeroecho.pki.server.enrollment.EnrollmentProfileService: Opens and validates the realm's durable registry.
EnrollmentProfileState - Enum Class in zeroecho.pki.server.enrollment: Lifecycle state of an enrollment profile.
EnrollmentResult(int, byte[], Optional) - Constructor for record class zeroecho.pki.server.est.EstService.EnrollmentResult: Validates response state and defensively copies the response body.
enrollmentRuntime() - Method in class zeroecho.pki.server.ServerRealmContext: Returns explicitly installed enrollment custody and resource limits.
EnrollmentRuntime - Class in zeroecho.pki.server.enrollment: Thread-safe realm owner of dedicated enrollment keyrings and immutable authority-scoped credentials.
EnrollmentRuntime.CredentialLease - Class in zeroecho.pki.server.enrollment: Bounded credential borrower.
EnrollmentRuntimeConfiguration - Record Class in zeroecho.pki.server.enrollment: Immutable, separately versioned enrollment resource and credential configuration.
EnrollmentRuntimeConfiguration(EnrollmentRuntimeConfiguration.Budgets, List, List, List, Optional) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Validates bounded collections and every cross-reference.
EnrollmentRuntimeConfiguration.ActiveCredential - Record Class in zeroecho.pki.server.enrollment: Selection for newly admitted transactions; retained transactions keep their ID.
EnrollmentRuntimeConfiguration.Budgets - Record Class in zeroecho.pki.server.enrollment: Explicit transaction budgets, including terminal replay records.
EnrollmentRuntimeConfiguration.CredentialSet - Record Class in zeroecho.pki.server.enrollment: Immutable authority-scoped protocol credentials.
EnrollmentRuntimeConfiguration.KeygenArtifacts - Record Class in zeroecho.pki.server.enrollment: Optional client-encrypted server-keygen delivery storage.
EnrollmentRuntimeConfiguration.KeyReference - Record Class in zeroecho.pki.server.enrollment: Reference to existing material in a configured encrypted keyring.
EnrollmentRuntimeConfiguration.Keyring - Record Class in zeroecho.pki.server.enrollment: Dedicated, preprovisioned encrypted keyring.
EnrollmentRuntimeConfiguration.Pbm - Record Class in zeroecho.pki.server.enrollment: Explicit CMP PBM work, salt and algorithm limits.
EnrollmentRuntimeConfiguration.PbmDigest - Enum Class in zeroecho.pki.server.enrollment: Explicitly supported PBM digest families.
EnrollmentRuntimeConfiguration.PbmIdentity - Record Class in zeroecho.pki.server.enrollment: One CMP PBM requester, isolated to this credential set and authority.
EnrollmentRuntimeConfiguration.PbmMac - Enum Class in zeroecho.pki.server.enrollment: Explicitly supported PBM MAC families.
EnrollmentRuntimeConfiguration.Protocol - Enum Class in zeroecho.pki.server.enrollment: Protocols requiring explicitly provisioned message credentials.
EnrollmentRuntimeConfiguration.Signer - Record Class in zeroecho.pki.server.enrollment: Response signer with a leaf-to-anchor DER certificate chain.
enrollmentScope(String) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Resolves scope from the retained request before gateway authorization.
EnrollmentSubjectPattern - Class in zeroecho.pki.server.enrollment: Immutable linear-time matcher for bounded enrollment subject constraints.
EnrollmentTransaction - Record Class in zeroecho.pki.server.enrollment: Immutable durable enrollment state.
EnrollmentTransaction(String, long, EnrollmentTransaction.Intent, EnrollmentTransaction.State, List, Optional, Optional) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Validates state-dependent references and unique principal/key votes.
EnrollmentTransaction.ArtifactBinding - Record Class in zeroecho.pki.server.enrollment: Frozen client-encrypted key delivery, included in issuance and approval commitments.
EnrollmentTransaction.Decision - Record Class in zeroecho.pki.server.enrollment: One verified independent administrative decision.
EnrollmentTransaction.Intent - Record Class in zeroecho.pki.server.enrollment: Frozen verified original request reference and complete issuance selection.
EnrollmentTransaction.Operation - Enum Class in zeroecho.pki.server.enrollment: Existing enrollment operation kinds with separate replay domains.
EnrollmentTransaction.Protocol - Enum Class in zeroecho.pki.server.enrollment: Protocol family determines admission and recovery binding semantics.
EnrollmentTransaction.Requester - Record Class in zeroecho.pki.server.enrollment: Authenticated protocol actor, distinct from an administrative principal.
EnrollmentTransaction.Source - Record Class in zeroecho.pki.server.enrollment: Frozen endpoint identity.
EnrollmentTransaction.State - Enum Class in zeroecho.pki.server.enrollment: Durable states; uncertain or accepted work never silently expires.
ensureRealm(ServerControlStore.RealmRecord) - Method in class zeroecho.pki.server.ServerControlStore: Creates or validates the sole realm identity record.
entries() - Method in class zeroecho.pki.server.schema.OperationDescriptorCatalog: Returns every operation, including unavailable identities, in lexical order.
Entry(OperationSecurityDescriptors.Descriptor, OperationParameterSchema.OperationSpec, OperationDescriptorCatalog.Presentation, boolean) - Constructor for record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Entry: Creates an instance of a Entry record class.
ENUM - Enum constant in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Single enum constant from a closed set.
enum_(String, boolean, List) - Static method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Defines one enum constant encoded as a JSON string.
ENUM_SET - Enum constant in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Set of enum constants from a closed set.
enumSet(String, boolean, List) - Static method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Defines enum constants encoded as a JSON array.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Graph: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Replacement: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Transition: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKey: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.Verified: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeState.AccountKeyIdentity: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeState.Identifier: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AdministrativeDecisionActor: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AdministrativeOperation.Control: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AdministrativeOperation.Pki: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AdministrativeOperation.Signing: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ApprovalService.Decision: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ApprovalService.Policy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ApprovalService.Request: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AuditorViews.FullContent: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AuditorViews.FullMetadata: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AuditorViews.Pii: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AuditorViews.Source: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AuthorityExposurePolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AuthorizationEngine.Decision: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.BreakGlassService.ActiveGrants: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.BreakGlassService.Record: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.CertificateIdentityEvidence: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.cmp.CmpEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.CredentialConfirmationProofPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.CredentialPublicationGate.AuditActor: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.DisclosureService.Capability: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.DisclosureService.Defaults: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.DisclosureService.Owner: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.DisclosureService.Record: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.CmpTransaction: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Snapshot: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases.Snapshot: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.ActiveCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeyReference: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Keyring: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmIdentity: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Signer: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.ArtifactBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Decision: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.est.EstEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.est.EstService.EnrollmentResult: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.est.KeygenPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.OcspRequesterService.Authorized: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.OcspRequesterService.SignedRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.OcspResponderService.PrincipalMapping: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.OcspResponderService.RequestSignatureBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.OcspResponderService.TrustSelector: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.Permission.Context: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.Permission.Grant: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.Permission.Resource: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.Permission.Scope: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.AuditProjection: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.ClientCertificateMapping: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.RuntimeCapabilities: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Access: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Authority: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Content: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.RealmId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Template: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.scep.ScepEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.scep.ScepService.CaCertificateResponse: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Entry: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Presentation: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.TransportSemantics: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.OperationSpec: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.schema.OperationParameterSchemas.Parameters: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.SecurityPrincipal: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.AcmeDirectoryProfilePrecondition: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateBreakGlass: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateEnrollmentProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.CancelApproval: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ConfigurationChoices: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.CreateGrant: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.CreateRoleAssignment: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.DeactivateAcmeAccount: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.DecideApproval: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterCmpEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterEstEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterScepEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.EnrollCredentialPublication: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ExecuteRestore: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackup: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackupStream: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeAccount: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeDirectory: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectApproval: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectBreakGlass: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectCmpEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectDisclosure: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEstEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectGrant: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectOcspResponder: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectPrincipal: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRepositoryAlias: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleAssignment: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleTemplate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.InspectScepEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.IssueCapability: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeAccounts: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeDirectories: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListBreakGlass: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListCapabilities: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListCmpEndpoints: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentProfiles: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentRequests: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListEstEndpoints: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListGrants: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListOcspResponders: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListPrincipals: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListRepositoryAliases: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleAssignments: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleTemplates: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ListScepEndpoints: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterAcmeDirectory: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterCmpEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEnrollmentProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEstEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterOcspResponder: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterPrincipal: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterScepEndpoint: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RemoveRepositoryAlias: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RequestApproval: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.ReserveBackupUpload: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeBreakGlass: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeCapability: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeGrant: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeRoleAssignment: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.SearchAudit: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.SetAcmeDirectoryActive: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.SetDisclosure: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.SetOcspResponderActive: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.SetPrincipalEnabled: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.SuspendEnrollmentProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.UpdateEnrollmentProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyAuditIntegrity: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyBackup: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlOperationOutcome.Ordinary: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlStore.Page: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolMutation: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.ApprovalRequired: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.ControlExecuted: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.Denied: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.Executed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Result: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Binding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Rejected: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Identifier: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Result: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Binding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Indicates whether some other object is "equal to" this one.
EST - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Protocol: Enrollment over Secure Transport.
EST - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Protocol: EST server-generated private-key delivery signature.
EST - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Protocol: Authenticated HTTPS enrollment.
EST_ENDPOINT - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: EST endpoint configuration.
EST_ENDPOINT_ADMINISTER - Enum constant in enum class zeroecho.pki.server.Permission.Action: Administers an EST endpoint.
EST_ENDPOINT_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads an EST endpoint.
estAddress() - Method in class zeroecho.pki.server.PkiHttpsServer: Returns the actual EST listener address when enabled.
EstEndpoint - Record Class in zeroecho.pki.server.est: Immutable binding that maps an EST URL label to a CA authority, an issuance profile, and a server-keygen policy.
EstEndpoint(String, String, String, String, KeygenPolicy) - Constructor for record class zeroecho.pki.server.est.EstEndpoint: Validates all fields.
EstHttpHandler - Class in zeroecho.pki.server.est: HTTP handler for the EST RFC 7030 protocol.
EstHttpHandler(ServerRealmContext, EstService, ServerRuntime, RequestIds, BooleanSupplier, int, Duration) - Constructor for class zeroecho.pki.server.est.EstHttpHandler: Creates an EST boundary with mutual TLS and runtime admission control.
estListener() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the estListener record component.
EstListener(String, InetAddress, int, ProviderConfig, PkiServerConfiguration.Execution, int, int) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Validates the EST listener configuration.
EstProtocolException - Exception Class in zeroecho.pki.server.est: Signals an EST protocol-level error that maps to an HTTP error response.
EstProtocolException(int, String) - Constructor for exception class zeroecho.pki.server.est.EstProtocolException: Creates an EST protocol exception with the given HTTP status and message.
EstProtocolException(int, String, Throwable) - Constructor for exception class zeroecho.pki.server.est.EstProtocolException: Creates an EST protocol exception with a cause.
EstServerKeygenResponse - Class in zeroecho.pki.server.est: Immutable EST server-key-generation status with deferred encrypted delivery.
EstServerKeygenResponse.Body - Class in zeroecho.pki.server.est: Thread-confined encrypted multipart delivery.
EstService - Class in zeroecho.pki.server.est: EST RFC 7030 protocol service.
EstService(ServerRealmContext) - Constructor for class zeroecho.pki.server.est.EstService: Creates an EST service over the given realm.
EstService.EnrollmentResult - Record Class in zeroecho.pki.server.est: Immutable EST enrollment response.
EstTransport - Class in zeroecho.pki.server.http: Lifecycle owner for the optional EST RFC 7030 HTTPS listener.
etag() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Returns the value of the etag record component.
etag() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Content: Returns the value of the etag record component.
EvaluateAuthorization(String, Permission.Action, Permission.Resource, Permission.Relationship, Permission.DataView, Permission.Context) - Constructor for record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Validates the operation's immutable input.
evidence() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Decision: Returns the value of the evidence record component.
evidenceId() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns the value of the evidenceId record component.
evidenceId() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the evidenceId record component.
evidenceId() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the evidenceId record component.
EXACT_REQUESTER_CERTIFICATE_COMMITMENTS - Enum constant in enum class zeroecho.pki.server.OcspResponderService.TrustSelectorType: Selects exact requester certificate commitments.
execute(Duration, ServerRuntime.CancellableOperation) - Method in class zeroecho.pki.server.http.ServerRuntime: Executes one operation through the owned bounded queue and waits for its result.
execute(ServerControlOperation, String, Permission.Resource, Optional, CancellationSignal) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Executes exactly one already-authorized control operation synchronously.
execute(ServerOperationGateway.Request, Optional, CancellationSignal) - Method in interface zeroecho.pki.server.ServerOperationGateway.SigningExecutor: Admits the authorized operation once, retaining its durable receipt when available.
execute(ServerOperationGateway.Request, CancellationSignal) - Method in class zeroecho.pki.server.ServerOperationGateway: Admits and synchronously executes one operation.
executeBackupTransfer(ServerOperationGateway.Request, CancellationSignal, BackupTransferChannel) - Method in class zeroecho.pki.server.ServerOperationGateway: Executes binary backup I/O through the same authentication, authorization and approval gate as ordinary operations.
Executed(PkiOperationOutcome) - Constructor for record class zeroecho.pki.server.ServerOperationGateway.Outcome.Executed: Validates the backend result.
EXECUTED - Enum constant in enum class zeroecho.pki.server.ApprovalService.State: Execution completed and its safe classification is linked.
ExecuteRestore(RestoreRequest) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ExecuteRestore: Validates the operation's immutable input.
EXECUTING - Enum constant in enum class zeroecho.pki.server.ApprovalService.State: The approved operation is durably claimed for execution.
execution() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the execution record component.
execution() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns the value of the execution record component.
execution() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns the value of the execution record component.
execution() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the execution record component.
execution() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the execution record component.
execution() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns the value of the execution record component.
Execution(int, int, int, int, int, Duration, Duration, Duration, Duration) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.Execution: Validates finite positive bounds and duration ordering.
expectedCommitment() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Returns the value of the expectedCommitment record component.
expectedCommitment() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolMutation: Returns the value of the expectedCommitment record component.
expectedCurrentCommitment() - Method in record class zeroecho.pki.server.ServerControlOperation.RemoveRepositoryAlias: Returns the value of the expectedCurrentCommitment record component.
expectedCurrentCommitment() - Method in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Returns the value of the expectedCurrentCommitment record component.
expectedHead() - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyAuditIntegrity: Returns the value of the expectedHead record component.
expectedKeyAuthorization() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns the value of the expectedKeyAuthorization record component.
expectedKeyAuthorization() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns the value of the expectedKeyAuthorization record component.
expectedPolicyCommitment() - Method in record class zeroecho.pki.server.ServerControlOperation.AcmeDirectoryProfilePrecondition: Returns the value of the expectedPolicyCommitment record component.
expectedProfile() - Method in record class zeroecho.pki.server.ServerControlOperation.AcmeDirectoryProfilePrecondition: Returns the value of the expectedProfile record component.
EXPIRED - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.AuthorizationStatus: Authorization evidence expired.
EXPIRED - Enum constant in enum class zeroecho.pki.server.ApprovalService.State: The request exceeded its approval lifetime.
EXPIRED - Enum constant in enum class zeroecho.pki.server.BreakGlassService.State: Mandatory emergency lifetime elapsed.
EXPIRED - Enum constant in enum class zeroecho.pki.server.enrollment.CmpTransaction.Confirmation: The explicit confirmation deadline elapsed.
EXPIRED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact.State: Attached delivery ended durably; original enrollment replay remains authoritative.
EXPIRED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Unaccepted request passed its admission deadline.
expiresAt() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.ServerControlOperation.IssueCapability: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Result: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Binding: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Result: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Binding: Returns the value of the expiresAt record component.
EXPLICIT_AUTHORITIES - Enum constant in enum class zeroecho.pki.server.AuthorityExposurePolicy.Mode: Only the exact configured authority identities are eligible.
EXPLICITLY_DENIED - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: A matching deny grant took precedence.
ExportBackup(String, AttributeSet) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ExportBackup: Validates the operation's immutable input.
ExportBackupStream(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ExportBackupStream: Validates the export label.
exposure() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the exposure record component.
exposure() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns the value of the exposure record component.
extendedApprovalCommitment() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns the value of the extendedApprovalCommitment record component.
extendedApprovalCommitment() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the extendedApprovalCommitment record component.
extendedApprovalCommitment(Map) - Static method in record class zeroecho.pki.server.ServerRealmConfiguration: Computes the canonical tamper-evidence commitment over every approval policy other than OperationSecurityDescriptors.ApprovalCategory.HIGH_RISK (which the durable record commits separately).
externalBaseUri() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the externalBaseUri record component.

F

FAILED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact.State: Unattached generation ended durably and will never be regenerated.
FAILED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Accepted operation terminated without a credential.
failureCode() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the failureCode record component.
failureCode() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the failureCode record component.
failureReason - Variable in class zeroecho.pki.server.jfr.AcmeChallengeEvent: Short reason code when the challenge failed; null when AcmeChallengeEvent.succeeded is true.
failureReason - Variable in class zeroecho.pki.server.jfr.SigningOperationEvent: Short failure reason code when the operation did not succeed; null when SigningOperationEvent.succeeded is true.
family() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns the value of the family record component.
fields() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.TransportSemantics: Returns the value of the fields record component.
fields() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.OperationSpec: Returns the value of the fields record component.
fields() - Method in record class zeroecho.pki.server.schema.OperationParameterSchemas.Parameters: Returns the value of the fields record component.
FieldSemantics(String, String, boolean, boolean, boolean, String, String, String) - Constructor for record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Rejects null semantics.
FieldSpec(String, OperationParameterSchema.FieldType, boolean, List) - Constructor for record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Snapshots the choice list.
finalizeOrder(String, String, String, byte[]) - Method in class zeroecho.pki.server.acme.AcmeService: Finalizes a ready order through the existing strict CSR and issuance services.
finalizeOrder(String, String, String, byte[], CancellationSignal) - Method in class zeroecho.pki.server.acme.AcmeService: Finalizes a ready order while propagating transport cancellation into signing.
find(String) - Method in class zeroecho.pki.server.cmp.CmpService: Looks up an endpoint.
find(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Finds the exact retained transaction without changing its state.
find(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentProfileService: Looks up the current profile by identifier.
find(String) - Method in class zeroecho.pki.server.est.EstService: Returns the endpoint for the given label.
find(String) - Method in class zeroecho.pki.server.scep.ScepService: Finds an endpoint.
find(String) - Method in class zeroecho.pki.server.schema.OperationDescriptorCatalog: Looks up a canonical identity without filling custom registries.
find(EnrollmentEndpointRegistry.Protocol, String) - Method in class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry: Reads one active endpoint without admitting an enrollment request.
find(EnrollmentTransaction.Protocol, String, IssuanceExecutionEvidence.ActorType, String, String, EnrollmentTransaction.Operation) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Finds a retained transaction by stable authenticated protocol coordinates.
findCmp(String, String) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Finds a wire reservation by stable coordinates.
findDisclosure(PkiId) - Method in class zeroecho.pki.server.ServerControlStore: Finds one disclosure record without converting absence into an error.
findKeygen(EnrollmentCoordinator.Admission) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Finds the stable server-keygen replay descriptor and checks the exact original template and authenticated recipient.
findRepositoryAlias(String) - Method in class zeroecho.pki.server.ServerControlStore: Finds one exact repository alias record.
forcedShutdown() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns the value of the forcedShutdown record component.
FORWARD_AUTHENTICATED_CLIENT_IDENTITY - Enum constant in enum class zeroecho.pki.server.Permission.Action: Forwards an authenticated client identity.
FORWARDED_IDENTITY_FORBIDDEN - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Forwarded identity is forbidden in the active topology.
FORWARDED_IDENTITY_INVALID - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Forwarded client identity is malformed or untrusted.
FORWARDED_IDENTITY_MISSING - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Required forwarded client identity is absent.
forwardedCertificateChainHeaderName() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the forwardedCertificateChainHeaderName record component.
forwardedCertificateFormat() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the forwardedCertificateFormat record component.
ForwardedCertificateFormat - Enum Class in zeroecho.pki.server: Closed forwarding representation selected explicitly by server configuration.
forwardedCertificateHeaderName() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the forwardedCertificateHeaderName record component.
forwardedClientMappings() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the forwardedClientMappings record component.
FORWARDING_NOT_AUTHORIZED - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Proxy may not forward client identities.
fromCertificate(RealmId, X509Certificate) - Static method in record class zeroecho.pki.server.CertificateIdentityEvidence: Computes evidence from an already validated end-client certificate.
fromCode(int) - Static method in enum class zeroecho.pki.server.ApprovalService.Choice: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.ApprovalService.State: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.AuthorityExposurePolicy.Mode: Resolves one stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.BreakGlassService.State: Resolves one stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.DisclosureService.DeliveryState: Resolves one stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.DisclosureService.ObjectType: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.DisclosureService.Policy: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.OcspResponderService.NoncePolicy: Resolves an exact stable code.
fromCode(int) - Static method in enum class zeroecho.pki.server.OcspResponderService.PrincipalMappingType: Resolves an exact stable code.
fromCode(int) - Static method in enum class zeroecho.pki.server.OcspResponderService.RequestAuthenticationMode: Resolves an exact stable code.
fromCode(int) - Static method in enum class zeroecho.pki.server.OcspResponderService.RequesterRevocationPolicy: Resolves an exact stable code.
fromCode(int) - Static method in enum class zeroecho.pki.server.OcspResponderService.SigningMode: Resolves an exact stable code.
fromCode(int) - Static method in enum class zeroecho.pki.server.OcspResponderService.State: Resolves an exact stable code.
fromCode(int) - Static method in enum class zeroecho.pki.server.OcspResponderService.TrustSelectorType: Resolves an exact stable code.
fromCode(int) - Static method in enum class zeroecho.pki.server.Permission.Action: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.Permission.Condition: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.Permission.DataView: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.Permission.Effect: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.Permission.Relationship: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.Permission.ResourceType: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.RepositoryAliasService.State: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.RepositoryAliasService.Type: Resolves a stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.server.SecurityPrincipal.Type: Resolves one stable persistence code.
fromKey(byte[], Set) - Static method in record class zeroecho.pki.server.acme.AcmeState.AccountKeyIdentity: Derives supported canonical commitments from validated public-key material.
frozen() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction: Returns the value of the frozen record component.
Frozen(RealmId, EnrollmentTransaction.Source, EnrollmentTransaction.Requester, PkiId, CertificateProfileRef, PkiId, PkiId, String, String, String, int, BigInteger, Optional, boolean, Instant, Instant, int) - Constructor for record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Rejects mechanism, authority, request and response-capacity inconsistencies.
fsync - Variable in class zeroecho.pki.server.jfr.AuditWriteEvent: Whether the write included an explicit filesystem sync; false for best-effort writes.
FULL - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Stable operation identity used for authorization and dispatch.
fullContent(AuditorViews.Source, boolean, boolean) - Method in class zeroecho.pki.server.AuditorViews: Returns full binary content only with separate content permission.
FullContent(AuditorViews.FullMetadata, byte[]) - Constructor for record class zeroecho.pki.server.AuditorViews.FullContent: Defensively snapshots content.
fullMetadata(AuditorViews.Source, boolean) - Method in class zeroecho.pki.server.AuditorViews: Returns full non-PII metadata after explicit authorization by the caller.
FullMetadata(AuditorViews.Redacted, Map) - Constructor for record class zeroecho.pki.server.AuditorViews.FullMetadata: Defensively snapshots safe metadata.
fullSubject() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the fullSubject record component.
fullSubjectAlternativeNames() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the fullSubjectAlternativeNames record component.

G

gateway() - Method in class zeroecho.pki.server.ServerRealmContext: Returns authorized typed-operation gateway.
GenerateOperationSchema - Class in zeroecho.pki.server.schema: Build-time generator for complete JSON and TypeScript catalog projections.
GENERATING - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact.State: Capacity and exact template are retained; no signing is authorized.
generationCommitment() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns immutable reservation commitment included in the generated issuance intent.
generationCommitment() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.ArtifactBinding: Returns the value of the generationCommitment record component.
get(Class, String) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Reads one exact typed record and cross-checks its identity.
getCaCaps() - Method in class zeroecho.pki.server.scep.ScepService: Advertises implemented capabilities.
getCaCert(ScepEndpoint) - Method in class zeroecho.pki.server.scep.ScepService: Advertises the actual active RA and its exact issuing CA chain.
getCaCertChain(ScepEndpoint) - Method in class zeroecho.pki.server.scep.ScepService: Returns the same provisioned certificate set as GetCACert.
gracefulShutdown() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns the value of the gracefulShutdown record component.
grant() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the grant record component.
grant() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Returns the value of the grant record component.
grant() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateGrant: Returns the value of the grant record component.
grant(Permission.Grant, String) - Method in class zeroecho.pki.server.ServerRealmContext: Creates one explicit scoped direct grant.
Grant(String, String, Permission.Effect, Permission.Action, Permission.ResourceType, Permission.Scope, Permission.Relationship, Permission.DataView, Set, Optional, boolean) - Constructor for record class zeroecho.pki.server.Permission.Grant: Validates and snapshots the finite grant.
GRANT - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Permission grant.
GRANT - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for direct permission grants.
GRANT_EXPIRED - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: Matching grants exist but have expired.
grantId() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the grantId record component.
grantId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectGrant: Returns the value of the grantId record component.
grantId() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeGrant: Returns the value of the grantId record component.
grantIds() - Method in record class zeroecho.pki.server.BreakGlassService.ActiveGrants: Returns the value of the grantIds record component.
grants() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the grants record component.
grants() - Method in record class zeroecho.pki.server.BreakGlassService.ActiveGrants: Returns the value of the grants record component.
grants(int, int) - Method in class zeroecho.pki.server.ServerControlStore: Returns a bounded stable page of direct grants.
grantsFor(String) - Method in class zeroecho.pki.server.ServerControlStore: Lists direct grants for one principal from one stable snapshot.
Graph(AcmeState.Order, List, List) - Constructor for record class zeroecho.pki.server.acme.AcmeControlStore.Graph: Defensively snapshots the graph.

H

handle(HttpExchange) - Method in class zeroecho.pki.server.est.EstHttpHandler
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Graph: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Replacement: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Transition: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKey: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.Verified: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeState.AccountKeyIdentity: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeState.Identifier: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AdministrativeDecisionActor: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AdministrativeOperation.Control: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AdministrativeOperation.Pki: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AdministrativeOperation.Signing: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ApprovalService.Decision: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AuditorViews.FullContent: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AuditorViews.FullMetadata: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AuditorViews.Pii: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AuthorityExposurePolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AuthorizationEngine.Decision: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.BreakGlassService.ActiveGrants: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.CertificateIdentityEvidence: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.cmp.CmpEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.CredentialConfirmationProofPolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.CredentialPublicationGate.AuditActor: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.DisclosureService.Defaults: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.DisclosureService.Owner: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.DisclosureService.Record: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Snapshot: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases.Snapshot: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.ActiveCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeyReference: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Keyring: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmIdentity: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Signer: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.ArtifactBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Decision: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.est.EstEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.est.EstService.EnrollmentResult: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.est.KeygenPolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.OcspRequesterService.Authorized: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.OcspRequesterService.SignedRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.OcspResponderService.PrincipalMapping: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.OcspResponderService.RequestSignatureBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.OcspResponderService.TrustSelector: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.Permission.Context: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.Permission.Grant: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.Permission.Resource: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.Permission.Scope: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AuditProjection: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ClientCertificateMapping: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.RuntimeCapabilities: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Access: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Authority: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Content: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.RealmId: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Template: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.scep.ScepEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.scep.ScepService.CaCertificateResponse: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Entry: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Presentation: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.TransportSemantics: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.OperationSpec: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.schema.OperationParameterSchemas.Parameters: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.SecurityPrincipal: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.AcmeDirectoryProfilePrecondition: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateBreakGlass: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateEnrollmentProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.CancelApproval: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ConfigurationChoices: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateGrant: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateRoleAssignment: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.DeactivateAcmeAccount: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideApproval: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterCmpEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterEstEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterScepEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.EnrollCredentialPublication: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ExecuteRestore: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackup: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackupStream: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeAccount: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeDirectory: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectApproval: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectBreakGlass: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectCmpEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectDisclosure: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEstEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectGrant: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectOcspResponder: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectPrincipal: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRepositoryAlias: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleAssignment: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleTemplate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectScepEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.IssueCapability: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeAccounts: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeDirectories: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListBreakGlass: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCapabilities: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCmpEndpoints: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentProfiles: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentRequests: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEstEndpoints: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListGrants: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListOcspResponders: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListPrincipals: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRepositoryAliases: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleAssignments: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleTemplates: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ListScepEndpoints: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterAcmeDirectory: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterCmpEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEnrollmentProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEstEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterOcspResponder: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterPrincipal: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterScepEndpoint: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RemoveRepositoryAlias: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RequestApproval: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.ReserveBackupUpload: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeBreakGlass: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeCapability: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeGrant: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeRoleAssignment: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.SearchAudit: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.SetAcmeDirectoryActive: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.SetDisclosure: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.SetOcspResponderActive: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.SetPrincipalEnabled: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.SuspendEnrollmentProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.UpdateEnrollmentProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyAuditIntegrity: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyBackup: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlOperationOutcome.Ordinary: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlStore.Page: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolMutation: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolRecord: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.ApprovalRequired: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.ControlExecuted: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.Denied: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.Executed: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Result: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Binding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Rejected: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Identifier: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Result: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Binding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Returns a hash code value for this object.
hasMore() - Method in record class zeroecho.pki.server.ServerControlStore.Page: Returns the value of the hasMore record component.
HEADER - Static variable in class zeroecho.pki.server.http.RequestIds: HTTP header carrying the opaque correlation identifier.
help() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns the value of the help record component.
hidden() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns the value of the hidden record component.
HIGH_RISK - Enum constant in enum class zeroecho.pki.server.OperationSecurityDescriptors.ApprovalCategory: Realm-wide high-risk dual control applies.
HMAC_SHA256 - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmMac: HMAC with SHA-256.
HMAC_SHA384 - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmMac: HMAC with SHA-384.
HMAC_SHA512 - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmMac: HMAC with SHA-512.
HTTP_01 - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.ChallengeType: HTTP token-file validation.
HTTP_01 - Enum constant in enum class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.ChallengeType: HTTP token-file validation.
Http01ChallengeProvider - Class in zeroecho.pki.server.acme: Production HTTP-01 validator using policy-checked, IP-pinned port-80 sockets.
Http01ChallengeProvider() - Constructor for class zeroecho.pki.server.acme.Http01ChallengeProvider: Creates the stateless built-in HTTP-01 challenge provider.
HttpCtLogClient - Class in zeroecho.pki.server.ct: HTTP implementation of CtLogClient using java.net.http.HttpClient.
HttpCtLogClient(CtLogDescriptor, HttpClient) - Constructor for class zeroecho.pki.server.ct.HttpCtLogClient: Creates a client for the given CT log using the supplied HTTP client.
httpStatus - Variable in class zeroecho.pki.server.jfr.AdminRequestEvent: HTTP status code of the response sent to the caller.
httpStatus() - Method in exception class zeroecho.pki.server.cmp.CmpProtocolException: Returns the HTTP status code.
httpStatus() - Method in exception class zeroecho.pki.server.est.EstProtocolException: Returns the HTTP status code.
httpStatus() - Method in exception class zeroecho.pki.server.scep.ScepProtocolException: Returns the HTTP status code.

I

id() - Method in class zeroecho.pki.server.acme.Http01ChallengeProvider
id() - Method in class zeroecho.pki.server.acme.JndiDns01ChallengeProvider
id() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction: Returns the value of the id record component.
id() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the id record component.
id() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns the value of the id record component.
id() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Keyring: Returns the value of the id record component.
id() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns the value of the id record component.
id() - Method in class zeroecho.pki.server.http.Pkcs12ClientTrustProvider
id() - Method in class zeroecho.pki.server.http.Pkcs12TlsProvider
id() - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateEnrollmentProfile: Returns the value of the id record component.
id() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Returns the value of the id record component.
id() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentProfile: Returns the value of the id record component.
id() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentRequest: Returns the value of the id record component.
id() - Method in record class zeroecho.pki.server.ServerControlOperation.SuspendEnrollmentProfile: Returns the value of the id record component.
id() - Method in class zeroecho.pki.server.ServerControlStore: Returns the durable server-control metadata-store identity.
id() - Method in interface zeroecho.pki.server.spi.AcmeChallengeProvider: Returns the stable provider identity.
id() - Method in interface zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider: Returns the stable, explicitly configured provider identity.
id() - Method in interface zeroecho.pki.server.spi.PkiServerClientTrustProvider: Returns the stable, explicitly configured provider identity.
id() - Method in interface zeroecho.pki.server.spi.PkiServerTlsProvider: Returns the stable explicit provider identity.
id() - Method in interface zeroecho.pki.server.spi.v2.AcmeChallengeProvider: Returns the stable provider identity.
id() - Method in interface zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider: Returns the stable, explicitly configured provider identity.
id() - Method in interface zeroecho.pki.server.spi.v2.PkiServerClientTrustProvider: Returns the stable, explicitly configured provider identity.
id() - Method in interface zeroecho.pki.server.spi.v2.PkiServerTlsProvider: Returns the stable explicit provider identity.
ID - Static variable in class zeroecho.pki.server.acme.Http01ChallengeProvider: Stable built-in provider identity.
ID - Static variable in class zeroecho.pki.server.acme.JndiDns01ChallengeProvider: Stable built-in provider identity.
ID - Static variable in class zeroecho.pki.server.http.Pkcs12ClientTrustProvider: Stable provider identity.
ID - Static variable in class zeroecho.pki.server.http.Pkcs12TlsProvider: Stable explicit provider identity.
identifier - Variable in class zeroecho.pki.server.jfr.AcmeChallengeEvent: DNS name or IP address identifier being validated.
identifier() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns the value of the identifier record component.
identifier() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the identifier record component.
identifier() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns the value of the identifier record component.
identifier() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns the value of the identifier record component.
Identifier(AcmeState.IdentifierType, String, boolean) - Constructor for record class zeroecho.pki.server.acme.AcmeState.Identifier: Validates the canonical lower-case ASCII DNS representation.
Identifier(AcmeChallengeProvider.IdentifierType, String, boolean) - Constructor for record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Identifier: Validates the complete canonical DNS representation.
identifiers() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the identifiers record component.
identifierTypes() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the identifierTypes record component.
identities() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Returns the value of the identities record component.
identities() - Method in record class zeroecho.pki.server.OcspResponderService.TrustSelector: Returns the value of the identities record component.
IDENTITY_COLLISION - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Transport and end-client identities collide.
IDENTITY_PROVIDER_MANAGE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Manages identity-provider configuration.
identityId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmIdentity: Returns the value of the identityId record component.
idFor(RealmId, PkiId, RepositoryAliasService.Type) - Static method in class zeroecho.pki.server.RepositoryAliasService: Returns the deterministic alias ID for one realm, authority, and type.
idleInterval() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AuditProjection: Returns the value of the idleInterval record component.
idleInterval() - Method in record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Returns the value of the idleInterval record component.
implicitConfirmation() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the implicitConfirmation record component.
INACTIVE - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.DirectoryStatus: Directory exists but does not accept protocol operations.
INACTIVE - Enum constant in enum class zeroecho.pki.server.OcspResponderService.State: Responder configuration exists but cannot serve requests.
input() - Method in interface zeroecho.pki.server.BackupTransferChannel: Opens the request archive stream after upload admission.
InspectAcmeAccount(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectAcmeAccount: Validates the operation's immutable input.
InspectAcmeDirectory(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectAcmeDirectory: Validates the operation's immutable input.
InspectApproval(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectApproval: Validates the operation's immutable input.
InspectAuditView(PkiId, Permission.DataView, Optional) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Validates the operation's immutable input.
InspectBreakGlass(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectBreakGlass: Validates the operation's immutable input.
InspectCmpEndpoint(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectCmpEndpoint: Validates the label.
InspectDisclosure(PkiId) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectDisclosure: Validates the operation's immutable input.
InspectEnrollmentProfile(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentProfile: Validates the id.
InspectEnrollmentRequest(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentRequest: Validates the stable reference.
InspectEstEndpoint(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectEstEndpoint: Validates the label.
InspectGrant(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectGrant: Validates the operation's immutable input.
inspectIdentity(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Re-parses the exact retained request for authorized administrative inspection.
InspectOcspResponder(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectOcspResponder: Validates the operation's immutable input.
InspectPrincipal(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectPrincipal: Validates the operation's immutable input.
InspectRepositoryAlias(PkiId, RepositoryAliasService.Type) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectRepositoryAlias: Validates the operation's immutable input.
InspectRoleAssignment(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectRoleAssignment: Validates the operation's immutable input.
InspectRoleTemplate(String, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectRoleTemplate: Validates the operation's immutable input.
InspectScepEndpoint(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.InspectScepEndpoint: Validates the label.
installAcme(AcmeService) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Installs the explicitly configured ACME capability exactly once before listener readiness.
installAcme(AcmeService) - Method in class zeroecho.pki.server.ServerOperationGateway: Installs the optional configured ACME control capability once before listener readiness.
installAudit(AuditService, AuditIntegrityService) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Installs the queryable/verifiable audit capability exactly once.
installAudit(AuditService, AuditIntegrityService) - Method in class zeroecho.pki.server.ServerOperationGateway: Installs the queryable/verifiable audit capability when the configured sink supports it.
installBackup(BackupService) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Installs the backup capability exactly once.
installBackup(BackupService) - Method in class zeroecho.pki.server.ServerOperationGateway: Installs the backup capability when the configured store supports it.
installCmp(CmpService) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Installs the CMP RFC 4210/9480 endpoint registry exactly once before listener readiness.
installCmp(CmpService) - Method in class zeroecho.pki.server.ServerOperationGateway: Installs the CMP service so that CMP admin operations can reach it.
installEnrollmentCoordinator(EnrollmentCoordinator) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Installs the realm-owned durable protocol approval coordinator exactly once.
installEnrollmentCoordinator(EnrollmentCoordinator) - Method in class zeroecho.pki.server.ServerOperationGateway: Installs the validated coordinator before publishing realm readiness.
installEnrollmentProfiles(EnrollmentProfileService) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Installs the enrollment profile registry exactly once before listener readiness.
installEnrollmentProfiles(EnrollmentProfileService) - Method in class zeroecho.pki.server.ServerOperationGateway: Installs the enrollment profile service so that enrollment profile admin operations can reach it.
installEst(EstService) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Installs the EST RFC 7030 endpoint registry exactly once before listener readiness.
installEst(EstService) - Method in class zeroecho.pki.server.ServerOperationGateway: Installs the EST service so that EST admin operations can reach it.
installOcsp(OcspResponderService) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Installs the realm-owned durable OCSP responder capability exactly once.
installOcsp(OcspResponderService) - Method in class zeroecho.pki.server.ServerOperationGateway: Installs the realm-owned OCSP administration capability before readiness.
installRuntime(EnrollmentRuntime) - Method in class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry: Validates every active endpoint, durably pins the credential identities, and installs custody under the same control-store monitor.
installScep(ScepService) - Method in class zeroecho.pki.server.ServerControlOperationExecutor: Installs the SCEP RFC 8894 endpoint registry exactly once before listener readiness.
installScep(ScepService) - Method in class zeroecho.pki.server.ServerOperationGateway: Installs the SCEP service so that SCEP admin operations can reach it.
installShutdownHook() - Method in class zeroecho.pki.server.PkiHttpsServer: Installs the sole finite process-shutdown bridge for the packaged launcher.
instantiate(RoleTemplateCatalog.Assignment) - Method in class zeroecho.pki.server.RoleTemplateCatalog: Expands one enabled scoped assignment to explicit immutable grants.
INSUFFICIENT_DATA_VIEW - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: A matching grant does not permit the requested data view.
integer(String, boolean) - Static method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Defines an integer argument; decoder-specific bounds still apply.
INTEGER - Enum constant in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Signed 64-bit integer.
intent() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns the value of the intent record component.
Intent(RealmId, EnrollmentTransaction.Source, EnrollmentTransaction.Requester, String, EnrollmentTransaction.Operation, PkiId, X509EnrollmentPayload.Kind, String, int, PkiId, CertificateProfileRef, PkiId, PkiId, String, Optional, Optional, Optional, OperationSecurityDescriptors.ApprovalCategory, Optional, Optional, Instant, Instant) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Validates complete, bounded, internally consistent admission references.
intentCommitment() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns the complete immutable intent commitment used by issuance and approval.
intermediateCa() - Method in record class zeroecho.pki.server.DisclosureService.Defaults: Returns the value of the intermediateCa record component.
INTERNAL_FAILURE - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Authentication failed internally without a safe detailed classification.
INVALID - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.AuthorizationStatus: Authorization validation failed terminally.
INVALID - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.ChallengeStatus: Challenge validation failed.
INVALID - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.EvidenceResult: Validator rejected the authorization.
INVALID - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.OrderStatus: Order cannot complete successfully.
isEnabled() - Method in class zeroecho.pki.server.ct.CtIssuanceInterceptor: Returns true if this interceptor has at least one CT log configured.
ISSUANCE_SINGLE - Enum constant in enum class zeroecho.pki.server.OperationSecurityDescriptors.ApprovalCategory: Profile-selected single approval applies.
ISSUANCE_THRESHOLD - Enum constant in enum class zeroecho.pki.server.OperationSecurityDescriptors.ApprovalCategory: Profile-selected threshold approval applies.
issuanceBinding(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Projects the actual domain correlation for a retained issuance request.
issuanceCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the issuanceCommitment record component.
issuancePathCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the issuancePathCommitment record component.
issuancePathCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the issuancePathCommitment record component.
issuancePathId() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the issuancePathId record component.
issuancePathId() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the issuancePathId record component.
issue(String) - Method in class zeroecho.pki.server.acme.AcmeNonceService: Issues one canonical unpadded Base64url nonce with 256 bits of entropy.
ISSUE - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Operation: Issue a credential for a proved request.
issueCapability(PkiId, Instant, String) - Method in class zeroecho.pki.server.DisclosureService: Issues 256 random capability bits and persists only their commitment.
IssueCapability(PkiId, Instant) - Constructor for record class zeroecho.pki.server.ServerControlOperation.IssueCapability: Validates the operation's immutable input.
issueCredentialConfirmationChallenge(String, String, String) - Method in class zeroecho.pki.server.acme.AcmeService: Issues or exactly replays confirmation proof material for one valid account-owned order.
ISSUED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Credential was persisted and its binding verified.
IssuedCapability(DisclosureService.Capability, byte[]) - Constructor for class zeroecho.pki.server.DisclosureService.IssuedCapability: Validates and snapshots the one-time token.
ISSUER - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Authority issuer generation.
ISSUER_AND_SERIAL_COMMITMENT - Enum constant in enum class zeroecho.pki.server.OcspResponderService.PrincipalMappingType: Maps a commitment to the requester issuer and serial number.
ISSUER_CREATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Creates an issuer generation.
ISSUER_RETIRE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Retires an issuer generation.
ISSUER_ROTATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Rotates an issuer generation.
ISSUER_SIGNED - Enum constant in enum class zeroecho.pki.server.OcspResponderService.SigningMode: Uses the issuer certificate and key directly.
issuerCertificate(PkiId, PkiId, PublicRepositoryGateway.Access) - Method in class zeroecho.pki.server.PublicRepositoryGateway: Opens one exact issuer-generation certificate after disclosure enforcement.
issuerId() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.Permission.Scope: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Returns the value of the issuerId record component.
issuerIds() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Authority: Returns the value of the issuerIds record component.
issuerPrincipalId() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the issuerPrincipalId record component.
issuerPrincipalId() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns the value of the issuerPrincipalId record component.
issuerSerialSha256() - Method in record class zeroecho.pki.server.CertificateIdentityEvidence: Returns the value of the issuerSerialSha256 record component.
issuerSerialSha256() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ClientCertificateMapping: Returns the value of the issuerSerialSha256 record component.

J

JndiDns01ChallengeProvider - Class in zeroecho.pki.server.acme: Production DNS-01 validator using one explicit absolute-name JNDI DNS resolver.
JndiDns01ChallengeProvider() - Constructor for class zeroecho.pki.server.acme.JndiDns01ChallengeProvider: Creates the stateless built-in JNDI DNS-01 challenge provider.
justification() - Method in record class zeroecho.pki.server.ApprovalService.Decision: Returns the value of the justification record component.
justification() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Decision: Returns the value of the justification record component.
justification() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideApproval: Returns the value of the justification record component.
justification() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Returns the value of the justification record component.
justificationRequired() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns the value of the justificationRequired record component.
JWK - Enum constant in enum class zeroecho.pki.server.acme.AcmeJwsVerifier.KeyMode: Protected header carries a new-account JSON Web Key.

K

key() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Signer: Returns the value of the key record component.
keyAuthorizationCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the keyAuthorizationCommitment record component.
keygen() - Method in record class zeroecho.pki.server.est.EstEndpoint: Returns the value of the keygen record component.
keygenArtifacts() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Returns the value of the keygenArtifacts record component.
KeygenArtifacts(Path, long, long, int, int, Duration) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Validates all explicit artifact budgets.
keygenDelivery(EnrollmentCoordinator.Admission) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Opens a bounded ciphertext lease only for the exact authenticated template after its correlated certificate is durably issued.
KeygenPolicy - Record Class in zeroecho.pki.server.est: Controls server-keygen eligibility for an EST endpoint.
KeygenPolicy(boolean, List, int, boolean) - Constructor for record class zeroecho.pki.server.est.KeygenPolicy: Validates and defensively copies all mutable fields.
keyHistory() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the keyHistory record component.
keyId() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Binding: Returns the value of the keyId record component.
keyId() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Binding: Returns the value of the keyId record component.
KeyReference(String, String) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeyReference: Validates both canonical references.
Keyring(String, Path) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Keyring: Validates the identity and normalizes the path without opening it.
keyringId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeyReference: Returns the value of the keyringId record component.
keyrings() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Returns the value of the keyrings record component.
keyThumbprint() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKey: Returns the value of the keyThumbprint record component.
keyThumbprint() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.Verified: Returns the value of the keyThumbprint record component.
keyThumbprint() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the keyThumbprint record component.
keyUnlockEnvironmentVariable() - Method in record class zeroecho.pki.server.PkiServerConfiguration.RuntimeCapabilities: Returns the value of the keyUnlockEnvironmentVariable record component.
kid() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKey: Returns the value of the kid record component.
KID - Enum constant in enum class zeroecho.pki.server.acme.AcmeJwsVerifier.KeyMode: Protected header carries an existing-account key identifier.
kidRoutingHint(byte[], int, URI) - Method in class zeroecho.pki.server.acme.AcmeJwsVerifier: Extracts a strictly framed KID only as a routing hint before full JWS verification.
kind() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Authority: Returns the value of the kind record component.
knownAliases(CertificateIdentityEvidence) - Method in class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases: Collects every known alias without principal-state or authorization lookups.
knownKeyAliases(PublicKeyIdentity) - Method in class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases: Finds exclusion-only aliases for an authenticated account key that has no client certificate.

L

label() - Method in record class zeroecho.pki.server.cmp.CmpEndpoint: Returns the value of the label record component.
label() - Method in interface zeroecho.pki.server.enrollment.EnrollmentEndpoint: Returns the protocol-local path identity.
label() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.est.EstEndpoint: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.scep.ScepEndpoint: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterCmpEndpoint: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterEstEndpoint: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterScepEndpoint: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackup: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackupStream: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectCmpEndpoint: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEstEndpoint: Returns the value of the label record component.
label() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectScepEndpoint: Returns the value of the label record component.
leaf() - Method in record class zeroecho.pki.server.DisclosureService.Defaults: Returns the value of the leaf record component.
LEAF_CERTIFICATE - Enum constant in enum class zeroecho.pki.server.DisclosureService.ObjectType: End-entity certificate.
lease() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Content: Returns the value of the lease record component.
legacySpkiSha256() - Method in record class zeroecho.pki.server.acme.AcmeState.AccountKeyIdentity: Returns the value of the legacySpkiSha256 record component.
legacySpkiSha256() - Method in record class zeroecho.pki.server.CertificateIdentityEvidence: Returns the value of the legacySpkiSha256 record component.
legacySpkiSha256() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Returns the value of the legacySpkiSha256 record component.
length() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns the value of the length record component.
length() - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator.KeygenDelivery: Returns exact encrypted body length.
length() - Method in record class zeroecho.pki.server.ServerControlOperation.ReserveBackupUpload: Returns the value of the length record component.
lifecycleState() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the lifecycleState record component.
lifecycleState() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the lifecycleState record component.
lifetime() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns the value of the lifetime record component.
lifetime() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the value of the lifetime record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ConfigurationChoices: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeAccounts: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeDirectories: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListBreakGlass: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCapabilities: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCmpEndpoints: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentProfiles: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentRequests: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEstEndpoints: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListGrants: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListOcspResponders: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListPrincipals: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRepositoryAliases: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleAssignments: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.server.ServerControlOperation.ListScepEndpoints: Returns the value of the limit record component.
list() - Method in class zeroecho.pki.server.cmp.CmpService: Returns immutable endpoints in deterministic registry order.
list() - Method in class zeroecho.pki.server.enrollment.EnrollmentProfileService: Collects all current profiles in deterministic store-key order.
list() - Method in class zeroecho.pki.server.est.EstService: Collects active endpoints in deterministic store-key order.
list() - Method in class zeroecho.pki.server.scep.ScepService: Collects current endpoints.
list(int, int) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Reads a bounded deterministic page for the authoritative administrative projection.
list(int, int) - Method in class zeroecho.pki.server.enrollment.EnrollmentProfileService: Reads a bounded page without retaining the complete registry.
list(int, int) - Method in class zeroecho.pki.server.OcspResponderService: Lists one bounded deterministic responder page.
list(int, int) - Method in class zeroecho.pki.server.RepositoryAliasService: Returns a bounded alias page.
list(EnrollmentEndpointRegistry.Protocol) - Method in class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry: Collects active endpoints in deterministic control-store order.
ListAcmeAccounts(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListAcmeAccounts: Validates the operation's immutable input.
ListAcmeDirectories(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListAcmeDirectories: Validates the operation's immutable input.
ListApprovals(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Creates an unfiltered bounded approval page.
ListApprovals(int, int, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Validates the operation's immutable input.
ListBreakGlass(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListBreakGlass: Validates the operation's immutable input.
ListCapabilities(PkiId, int, Optional) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListCapabilities: Validates the object and bounded lexical page.
ListCmpEndpoints(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListCmpEndpoints: Validates bounds.
listener() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the listener record component.
Listener(InetAddress, int, ProviderConfig, boolean, int, int) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.Listener: Validates listener bounds and explicit TLS selection.
listenerId() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the listenerId record component.
listenerId() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns the value of the listenerId record component.
listenerId() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns the value of the listenerId record component.
listenerId() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns the value of the listenerId record component.
ListEnrollmentProfiles(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentProfiles: Validates bounds.
ListEnrollmentRequests(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentRequests: Validates bounded pagination.
ListEstEndpoints(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListEstEndpoints: Validates bounds.
ListGrants(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListGrants: Validates the operation's immutable input.
ListOcspResponders(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListOcspResponders: Validates the operation's immutable input.
ListPrincipals(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListPrincipals: Validates the operation's immutable input.
ListRepositoryAliases(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListRepositoryAliases: Validates the operation's immutable input.
ListRoleAssignments(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListRoleAssignments: Validates the operation's immutable input.
ListRoleTemplates() - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListRoleTemplates: Creates an instance of a ListRoleTemplates record class.
ListScepEndpoints(int, int) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ListScepEndpoints: Validates bounds.
load(ClassLoader) - Static method in class zeroecho.pki.server.RoleTemplateCatalog: Loads the built-in strict resource through the supplied class loader.
LOCAL_AUTHORITATIVE_IF_MANAGED - Enum constant in enum class zeroecho.pki.server.OcspResponderService.RequesterRevocationPolicy: Requires local revocation state only for managed requesters.
LOCAL_AUTHORITATIVE_REQUIRED - Enum constant in enum class zeroecho.pki.server.OcspResponderService.RequesterRevocationPolicy: Requires authoritative local revocation state for every requester.
logId() - Method in interface zeroecho.pki.server.ct.CtLogClient: Returns the stable CT log identifier (64-character hex SHA-256 of the log's public key).
logId() - Method in exception class zeroecho.pki.server.ct.CtSubmissionException: Returns the hex log ID of the CT log that failed.
logId() - Method in class zeroecho.pki.server.ct.HttpCtLogClient

M

macs() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Returns the value of the macs record component.
main(String[]) - Static method in class zeroecho.pki.server.PkiServerMain: Runs configuration validation or starts the long-lived server process.
main(String[]) - Static method in class zeroecho.pki.server.schema.GenerateOperationSchema: Writes the requested catalog artifacts.
MANAGED_ISSUER_GENERATIONS - Enum constant in enum class zeroecho.pki.server.OcspResponderService.TrustSelectorType: Selects managed issuer generations.
MAPPING_AMBIGUOUS - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: More than one principal mapping matches.
MAPPING_UNAVAILABLE - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: No exact principal mapping exists.
mappingId() - Method in record class zeroecho.pki.server.OcspResponderService.PrincipalMapping: Returns the value of the mappingId record component.
mappingId() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ClientCertificateMapping: Returns the value of the mappingId record component.
matches(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentSubjectPattern: Tests the complete subject against the compiled constraint.
MAX_FUTURE_DRIFT_MINUTES - Static variable in class zeroecho.pki.server.ct.SctVerifier: Maximum allowed clock skew between a CT log and the local clock.
MAX_LABEL_LENGTH - Static variable in record class zeroecho.pki.server.cmp.CmpEndpoint: Maximum permitted label length.
MAX_LABEL_LENGTH - Static variable in record class zeroecho.pki.server.est.EstEndpoint: Maximum permitted label length.
MAX_LABEL_LENGTH - Static variable in record class zeroecho.pki.server.scep.ScepEndpoint: Maximum permitted label length.
MAX_PROOF_B64URL_CHARS - Static variable in class zeroecho.pki.server.acme.AcmeWireBounds: Maximum canonical unpadded Base64url proof-response characters.
MAXIMUM_CONFIGURATION_BYTES - Static variable in class zeroecho.pki.server.PkiServerConfigurationCodec: Maximum server configuration document size.
MAXIMUM_DOCUMENT_BYTES - Static variable in class zeroecho.pki.server.http.StrictJson: Absolute technical JSON document ceiling.
MAXIMUM_PROOF_RESPONSE_BASE64URL_CHARACTERS - Static variable in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Exact canonical unpadded Base64url character bound for one proof response.
maximumAccountsPresented() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumAccountsPresented record component.
maximumAdmittedRequests() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns the value of the maximumAdmittedRequests record component.
maximumArchiveBytes() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the value of the maximumArchiveBytes record component.
maximumArtifactBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Returns the value of the maximumArtifactBytes record component.
maximumArtifacts() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the value of the maximumArtifacts record component.
maximumArtifacts() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Returns the value of the maximumArtifacts record component.
maximumBodyBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumBodyBytes record component.
maximumBodyBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns the value of the maximumBodyBytes record component.
maximumBodyBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns the value of the maximumBodyBytes record component.
maximumBodyBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Returns the value of the maximumBodyBytes record component.
maximumBodyBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the maximumBodyBytes record component.
maximumBodyBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns the value of the maximumBodyBytes record component.
maximumChallengeValidationsPerAccountWindow() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumChallengeValidationsPerAccountWindow record component.
maximumCiphertextBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the maximumCiphertextBytes record component.
maximumConcurrentDispatches() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Returns the value of the maximumConcurrentDispatches record component.
maximumConcurrentFinalizations() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumConcurrentFinalizations record component.
maximumConcurrentGenerations() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Returns the value of the maximumConcurrentGenerations record component.
maximumConcurrentJobs() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the value of the maximumConcurrentJobs record component.
maximumDeadline() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns the value of the maximumDeadline record component.
maximumEntries() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the maximumEntries record component.
maximumEntries() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the maximumEntries record component.
maximumForwardedCertificateBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the maximumForwardedCertificateBytes record component.
maximumForwardedChainBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the maximumForwardedChainBytes record component.
maximumGeneratedRequestBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the maximumGeneratedRequestBytes record component.
maximumHeaderBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumHeaderBytes record component.
maximumHeaderBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns the value of the maximumHeaderBytes record component.
maximumHeaderBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns the value of the maximumHeaderBytes record component.
maximumHeaderBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Returns the value of the maximumHeaderBytes record component.
maximumHeaderBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the maximumHeaderBytes record component.
maximumHeaderBytes() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns the value of the maximumHeaderBytes record component.
maximumIterations() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Returns the value of the maximumIterations record component.
maximumKeySizeBits() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the maximumKeySizeBits record component.
maximumKeySizeBits() - Method in record class zeroecho.pki.server.est.KeygenPolicy: Returns the value of the maximumKeySizeBits record component.
maximumNewAccountsPerWindow() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumNewAccountsPerWindow record component.
maximumNewOrdersPerAccountWindow() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumNewOrdersPerAccountWindow record component.
maximumNonceBytes() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the maximumNonceBytes record component.
maximumNonceBytes() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the maximumNonceBytes record component.
maximumOrdersPresented() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumOrdersPresented record component.
maximumOutstandingNonces() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumOutstandingNonces record component.
maximumPending() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Returns the value of the maximumPending record component.
maximumPendingOrdersPerAccount() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the maximumPendingOrdersPerAccount record component.
maximumProviderCalls() - Method in record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Returns the value of the maximumProviderCalls record component.
maximumRecords() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AuditProjection: Returns the value of the maximumRecords record component.
maximumRecords() - Method in record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Returns the value of the maximumRecords record component.
maximumRequestBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Returns the value of the maximumRequestBytes record component.
maximumRequestBytes() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the maximumRequestBytes record component.
maximumRequestBytes() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the maximumRequestBytes record component.
maximumResponseBytes() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the maximumResponseBytes record component.
maximumRetainedBytes() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the value of the maximumRetainedBytes record component.
maximumRetainedBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Returns the value of the maximumRetainedBytes record component.
maximumRetainedRequestBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Returns the value of the maximumRetainedRequestBytes record component.
maximumSaltBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Returns the value of the maximumSaltBytes record component.
maximumSignerCertificates() - Method in record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Returns the value of the maximumSignerCertificates record component.
maximumSignerChainBytes() - Method in record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Returns the value of the maximumSignerChainBytes record component.
maximumSinkCalls() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AuditProjection: Returns the value of the maximumSinkCalls record component.
maximumStreamDuration() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the maximumStreamDuration record component.
maximumTransactions() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Returns the value of the maximumTransactions record component.
maximumValidity() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the maximumValidity record component.
maximumValidity() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the maximumValidity record component.
maximumWorkspaceBytes() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the value of the maximumWorkspaceBytes record component.
mediaType() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Content: Returns the value of the mediaType record component.
metadata() - Method in record class zeroecho.pki.server.AuditorViews.FullContent: Returns the value of the metadata record component.
metadata() - Method in record class zeroecho.pki.server.AuditorViews.Pii: Returns the value of the metadata record component.
METADATA_FULL - Enum constant in enum class zeroecho.pki.server.Permission.DataView: Complete metadata without content or personal data.
METADATA_REDACTED - Enum constant in enum class zeroecho.pki.server.Permission.DataView: Redacted non-sensitive metadata.
MINIMUM_BODY_BYTES - Static variable in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Minimum administrative body bound that can carry the canonical maximum proof-completion request, including worst-case JSON escaping of both IDs.
minimumCompletionDocumentBytes(URI) - Static method in class zeroecho.pki.server.acme.AcmeWireBounds: Returns the exact minimum listener body limit capable of carrying the largest version-1 proof-completion JWS under the configured URL authority.
minimumIterations() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Returns the value of the minimumIterations record component.
minimumSaltBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Returns the value of the minimumSaltBytes record component.
minScts() - Method in class zeroecho.pki.server.ct.CtIssuanceInterceptor: Returns the minimum number of valid SCTs required for issuance.
mode() - Method in record class zeroecho.pki.server.AuthorityExposurePolicy: Returns the value of the mode record component.
mode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the mode record component.
mode() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Returns the value of the mode record component.
mode() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Rejected: Returns the value of the mode record component.
mutateProtocol(List) - Method in class zeroecho.pki.server.ServerControlStore: Atomically creates or compare-and-replaces a finite set of protocol records.
mutating() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns the value of the mutating record component.
MutualTlsAuthenticator - Class in zeroecho.pki.server.http: Production mutual-TLS authenticator using immutable cryptographic certificate commitments rather than mutable subject or SAN strings.
MutualTlsAuthenticator(List, Function, Clock) - Constructor for class zeroecho.pki.server.http.MutualTlsAuthenticator: Creates one immutable principal mapper.

N

name() - Method in record class zeroecho.pki.server.AdministrativeOperation.Control
name() - Method in interface zeroecho.pki.server.AdministrativeOperation: Returns the stable operation identity.
name() - Method in record class zeroecho.pki.server.AdministrativeOperation.Pki
name() - Method in record class zeroecho.pki.server.AdministrativeOperation.Signing
name() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Returns the value of the name record component.
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateBreakGlass
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateEnrollmentProfile
name() - Method in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand
name() - Method in record class zeroecho.pki.server.ServerControlOperation.CancelApproval
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ConfigurationChoices
name() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass
name() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateGrant
name() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateRoleAssignment
name() - Method in record class zeroecho.pki.server.ServerControlOperation.DeactivateAcmeAccount
name() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideApproval
name() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest
name() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterCmpEndpoint
name() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterEstEndpoint
name() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterScepEndpoint
name() - Method in record class zeroecho.pki.server.ServerControlOperation.EnrollCredentialPublication
name() - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ExecuteRestore
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackup
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackupStream
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeAccount
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeDirectory
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectApproval
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectBreakGlass
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectCmpEndpoint
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectDisclosure
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentProfile
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentRequest
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEstEndpoint
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectGrant
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectOcspResponder
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectPrincipal
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRepositoryAlias
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleAssignment
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleTemplate
name() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectScepEndpoint
name() - Method in record class zeroecho.pki.server.ServerControlOperation.IssueCapability
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeAccounts
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeDirectories
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListApprovals
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListBreakGlass
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCapabilities
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCmpEndpoints
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentProfiles
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentRequests
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEstEndpoints
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListGrants
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListOcspResponders
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListPrincipals
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRepositoryAliases
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleAssignments
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleTemplates
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ListScepEndpoints
name() - Method in interface zeroecho.pki.server.ServerControlOperation: Returns the stable operation identity used for authorization and dispatch.
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterAcmeDirectory
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterCmpEndpoint
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEnrollmentProfile
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEstEndpoint
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterOcspResponder
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterPrincipal
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterScepEndpoint
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RemoveRepositoryAlias
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RequestApproval
name() - Method in record class zeroecho.pki.server.ServerControlOperation.ReserveBackupUpload
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeBreakGlass
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeCapability
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeGrant
name() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeRoleAssignment
name() - Method in record class zeroecho.pki.server.ServerControlOperation.SearchAudit
name() - Method in record class zeroecho.pki.server.ServerControlOperation.SetAcmeDirectoryActive
name() - Method in record class zeroecho.pki.server.ServerControlOperation.SetDisclosure
name() - Method in record class zeroecho.pki.server.ServerControlOperation.SetOcspResponderActive
name() - Method in record class zeroecho.pki.server.ServerControlOperation.SetPrincipalEnabled
name() - Method in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias
name() - Method in record class zeroecho.pki.server.ServerControlOperation.SuspendEnrollmentProfile
name() - Method in record class zeroecho.pki.server.ServerControlOperation.UpdateEnrollmentProfile
name() - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyAuditIntegrity
name() - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyBackup
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ActivateEnrollmentProfile: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.CancelApproval: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ConfigurationChoices: Stable semantic name.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.CreateGrant: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.CreateRoleAssignment: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.DeactivateAcmeAccount: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.DeregisterCmpEndpoint: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.DeregisterEstEndpoint: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.DeregisterScepEndpoint: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.EnrollCredentialPublication: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ExecuteRestore: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ExportBackup: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ExportBackupStream: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeAccount: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeDirectory: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectApproval: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectBreakGlass: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectCmpEndpoint: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectDisclosure: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentProfile: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentRequest: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectEstEndpoint: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectGrant: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectOcspResponder: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectPrincipal: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectRepositoryAlias: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectRoleAssignment: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectRoleTemplate: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectScepEndpoint: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.IssueCapability: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListAcmeAccounts: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListAcmeDirectories: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListBreakGlass: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListCapabilities: Stable semantic name.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListCmpEndpoints: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentProfiles: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentRequests: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListEstEndpoints: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListGrants: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListOcspResponders: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListPrincipals: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListRepositoryAliases: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListRoleAssignments: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListRoleTemplates: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ListScepEndpoints: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RegisterAcmeDirectory: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RegisterCmpEndpoint: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RegisterEnrollmentProfile: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RegisterEstEndpoint: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RegisterOcspResponder: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RegisterPrincipal: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RegisterScepEndpoint: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RemoveRepositoryAlias: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RequestApproval: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.ReserveBackupUpload: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RevokeBreakGlass: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RevokeCapability: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RevokeGrant: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.RevokeRoleAssignment: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.SearchAudit: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.SetDisclosure: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.SuspendEnrollmentProfile: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.UpdateEnrollmentProfile: Stable operation identity.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.VerifyAuditIntegrity: Stable operation identity used for authorization and dispatch.
NAME - Static variable in record class zeroecho.pki.server.ServerControlOperation.VerifyBackup: Stable operation identity used for authorization and dispatch.
namespace() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolRecord: Returns the value of the namespace record component.
nav() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Presentation: Returns the value of the nav record component.
nestedJws() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Returns a defensive copy of the nested JWS.
nestedJws() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Returns a defensive copy of the nested JWS.
NEW - Enum constant in enum class zeroecho.pki.server.PkiHttpsServer.State: Constructed but not yet starting.
next() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Replacement: Returns the value of the next record component.
next() - Method in class zeroecho.pki.server.ServerControlStore.ProtocolCursor: Reads and validates the next record without retaining previously read records.
nextOffset() - Method in record class zeroecho.pki.server.ServerControlStore.Page: Returns the value of the nextOffset record component.
NGINX_ESCAPED_PEM_V1 - Enum constant in enum class zeroecho.pki.server.ForwardedCertificateFormat: Strict URL-escaped single-certificate PEM emitted by NGINX.
NO_MATCHING_GRANT - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: No enabled grant matched the principal, action, resource, and relationship.
NO_STORE_CAPABILITY - Enum constant in enum class zeroecho.pki.server.PublicRepositoryGateway.CacheClass: Capability-authorized responses must not be stored.
nonceLifetime() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the nonceLifetime record component.
noncePolicy() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the noncePolicy record component.
noncePolicy() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the noncePolicy record component.
nonceScope(String) - Method in class zeroecho.pki.server.acme.AcmeService: Returns the canonical nonce scope for one known directory alias.
NONE - Enum constant in enum class zeroecho.pki.server.enrollment.CmpTransaction.Confirmation: No certificate confirmation is outstanding.
NONE - Enum constant in enum class zeroecho.pki.server.OperationSecurityDescriptors.ApprovalCategory: No approval workflow is required.
NOT_PUBLISHED - Enum constant in enum class zeroecho.pki.server.DisclosureService.Policy: Content must not be served.
notAfter() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the notAfter record component.
notBefore() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the notBefore record component.
now() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Returns the value of the now record component.
now() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Returns the value of the now record component.

O

object(String, boolean) - Static method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Defines a nested JSON argument.
OBJECT - Enum constant in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Nested JSON object validated by the typed operation decoder.
objectId() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.server.DisclosureService.Record: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.server.Permission.Resource: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectDisclosure: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.server.ServerControlOperation.IssueCapability: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCapabilities: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.server.ServerControlOperation.SetDisclosure: Returns the value of the objectId record component.
objectType() - Method in record class zeroecho.pki.server.DisclosureService.Record: Returns the value of the objectType record component.
observedAt() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Result: Returns the value of the observedAt record component.
observedAt() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Result: Returns the value of the observedAt record component.
OCSP_ADMINISTER - Enum constant in enum class zeroecho.pki.server.Permission.Action: Administers OCSP configuration.
OCSP_RESPONDER - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: OCSP responder configuration.
OCSP_RESPONDER - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for durable OCSP responder bindings.
OCSP_RESPONDER_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads OCSP responder configuration.
OCSP_STATUS_QUERY - Enum constant in enum class zeroecho.pki.server.Permission.Action: Queries certificate status through OCSP.
OcspRequesterService - Class in zeroecho.pki.server: Transport-neutral signed-OCSP requester authentication and scoped query authorization.
OcspRequesterService(ServerRealmContext, Clock) - Constructor for class zeroecho.pki.server.OcspRequesterService: Creates one realm-bound requester authentication service.
OcspRequesterService.Authorized - Record Class in zeroecho.pki.server: Safe successful authentication result.
OcspRequesterService.SignedRequest - Record Class in zeroecho.pki.server: Exact bounded cryptographic fields retained from one canonical request.
OcspRequesterService.UnauthorizedException - Exception Class in zeroecho.pki.server: Safe authentication or authorization rejection.
OcspRequesterService.UnavailableException - Exception Class in zeroecho.pki.server: Dependency corruption or recovery-required authorization authority.
ocspResponders() - Method in class zeroecho.pki.server.ServerRealmContext: Returns durable exact OCSP responder bindings.
OcspResponderService - Class in zeroecho.pki.server: Durable exact responder-binding authority over the server control store.
OcspResponderService(RealmId, ServerControlStore, PkiRepository, X509AlgorithmBindingRegistry, Optional, Clock) - Constructor for class zeroecho.pki.server.OcspResponderService: Binds responder control to one realm and one authoritative PKI repository.
OcspResponderService.NoncePolicy - Enum Class in zeroecho.pki.server: Closed nonce behavior.
OcspResponderService.PrincipalMapping - Record Class in zeroecho.pki.server: One cryptographic requester-certificate mapping.
OcspResponderService.PrincipalMappingType - Enum Class in zeroecho.pki.server: Cryptographic requester-to-principal mapping type.
OcspResponderService.Registration - Record Class in zeroecho.pki.server: Closed administrator input without server-authoritative timestamps, state, or record commitments.
OcspResponderService.RequestAuthenticationMode - Enum Class in zeroecho.pki.server: Closed signed-request authentication policy.
OcspResponderService.RequesterRevocationPolicy - Enum Class in zeroecho.pki.server: Closed local requester-certificate revocation behavior.
OcspResponderService.RequesterTrustPolicy - Record Class in zeroecho.pki.server: Finite immutable requester trust, mapping, signature and chain policy.
OcspResponderService.RequestSignatureBinding - Record Class in zeroecho.pki.server: One exact active request-signature binding reference.
OcspResponderService.Responder - Record Class in zeroecho.pki.server: Strict versioned responder binding.
OcspResponderService.SigningMode - Enum Class in zeroecho.pki.server: Exact signing authority.
OcspResponderService.State - Enum Class in zeroecho.pki.server: Durable activation state.
OcspResponderService.TrustSelector - Record Class in zeroecho.pki.server: One explicit repository-backed trust selector.
OcspResponderService.TrustSelectorType - Enum Class in zeroecho.pki.server: Repository-backed requester trust selector.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeAccounts: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeDirectories: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListBreakGlass: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCmpEndpoints: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentProfiles: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentRequests: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEstEndpoints: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListGrants: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListOcspResponders: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListPrincipals: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRepositoryAliases: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleAssignments: Returns the value of the offset record component.
offset() - Method in record class zeroecho.pki.server.ServerControlOperation.ListScepEndpoints: Returns the value of the offset record component.
ONE_TIME_SENSITIVE - Enum constant in enum class zeroecho.pki.server.ServerControlOperationOutcome.Classification: Result carrying a secret that may be consumed exactly once.
OneTimeSensitive(PkiOperationResult, byte[]) - Constructor for class zeroecho.pki.server.ServerControlOperationOutcome.OneTimeSensitive: Creates a one-time result after its commitment has been durably persisted.
open(EnrollmentRuntimeConfiguration, ServerRealmConfiguration, PkiRepository, ServerControlStore, EnrollmentEndpointRegistry, PkiSessionRuntimeDependencies, Clock, Optional) - Static method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Opens preprovisioned encrypted keyrings, validates the complete credential graph and atomically pins immutable public commitments in server control.
open(ServerRealmConfiguration, PkiSessionRuntimeDependencies) - Static method in class zeroecho.pki.server.ServerRealmContext: Opens one production realm using explicit process-local capabilities.
OPEN - Enum constant in enum class zeroecho.pki.server.ServerRealmContext.State: Realm accepts operations.
openDelivery() - Method in class zeroecho.pki.server.est.EstServerKeygenResponse: Acquires delivery inside the transport's owned deadline execution and before HTTP headers.
openStream() - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator.KeygenDelivery: Opens the sole bounded body stream.
operation() - Method in record class zeroecho.pki.server.AdministrativeOperation.Control: Returns the value of the operation record component.
operation() - Method in record class zeroecho.pki.server.AdministrativeOperation.Pki: Returns the value of the operation record component.
operation() - Method in record class zeroecho.pki.server.AdministrativeOperation.Signing: Returns the value of the operation record component.
operation() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns the value of the operation record component.
operation() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the operation record component.
operation() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the operation record component.
operationAvailable(String) - Method in class zeroecho.pki.server.ServerOperationGateway: Reports deployment capability availability independently of caller permission.
operationCommitment() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the operationCommitment record component.
operationCommitment() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.ApprovalRequired: Returns the value of the operationCommitment record component.
OperationDescriptorCatalog - Class in zeroecho.pki.server.schema: Immutable, validated authority for static operation projections.
OperationDescriptorCatalog(List, List, List) - Constructor for class zeroecho.pki.server.schema.OperationDescriptorCatalog: Assembles an exact join, rejecting missing, duplicate and unknown definitions.
OperationDescriptorCatalog.Entry - Record Class in zeroecho.pki.server.schema: One fully validated operation projection.
OperationDescriptorCatalog.FieldSemantics - Record Class in zeroecho.pki.server.schema: Request-affecting field refinements and optional display hints.
OperationDescriptorCatalog.Presentation - Record Class in zeroecho.pki.server.schema: Presentation joined to a canonical operation.
OperationDescriptorCatalog.TransportSemantics - Record Class in zeroecho.pki.server.schema: Request-envelope and field semantics.
operationId - Variable in class zeroecho.pki.server.jfr.AdminRequestEvent: Stable operation identifier resolved from the request path, e.g.
operationId - Variable in class zeroecho.pki.server.jfr.SigningOperationEvent: Stable operation identifier, e.g.
operationId() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Presentation: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.OperationSpec: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.server.schema.OperationParameterSchemas.Parameters: Returns the value of the operationId record component.
operationId() - Method in enum class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand.Action: Returns the stable operation identity.
OperationParameterSchema - Class in zeroecho.pki.server.schema: Immutable model for machine-readable operation parameter schemas.
OperationParameterSchema.FieldSpec - Record Class in zeroecho.pki.server.schema: Specification for one operation argument field.
OperationParameterSchema.FieldType - Enum Class in zeroecho.pki.server.schema: Wire types matching the codec's strict intake methods.
OperationParameterSchema.OperationSpec - Record Class in zeroecho.pki.server.schema: Specification for one operation: identity, required permission, and fields.
OperationParameterSchemas - Class in zeroecho.pki.server.schema: Complete registry of machine-readable operation parameter schemas derived from the codec.
OperationParameterSchemas.Parameters - Record Class in zeroecho.pki.server.schema: Immutable parameter definition before permissions are joined from security metadata.
operationQueueCapacity() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns the value of the operationQueueCapacity record component.
OperationSecurityDescriptors - Class in zeroecho.pki.server: Immutable security descriptors keyed by existing typed-operation identities.
OperationSecurityDescriptors() - Constructor for class zeroecho.pki.server.OperationSecurityDescriptors: Creates the closed current gateway descriptor registry.
OperationSecurityDescriptors(List) - Constructor for class zeroecho.pki.server.OperationSecurityDescriptors: Creates a registry and rejects duplicate operation identities.
OperationSecurityDescriptors.ApprovalCategory - Enum Class in zeroecho.pki.server: Approval treatment for one operation.
OperationSecurityDescriptors.Descriptor - Record Class in zeroecho.pki.server: Immutable operation security descriptor.
OperationSecurityDescriptors.Eligibility - Enum Class in zeroecho.pki.server: Future transport eligibility without defining a transport protocol.
OperationSecurityDescriptors.Family - Enum Class in zeroecho.pki.server: Internally fixed execution family; callers cannot select it.
OperationSpec(String, String, String, List) - Constructor for record class zeroecho.pki.server.schema.OperationParameterSchema.OperationSpec: Snapshots the field list.
operationWorkers() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns the value of the operationWorkers record component.
operatorJustification() - Method in record class zeroecho.pki.server.Permission.Context: Returns the value of the operatorJustification record component.
OPTIONAL_ECHO - Enum constant in enum class zeroecho.pki.server.OcspResponderService.NoncePolicy: Accepts and echoes an optional nonce.
order() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Graph: Returns the value of the order record component.
order(String, String, String) - Method in class zeroecho.pki.server.acme.AcmeService: Polls an account-owned order using the exact current authentication snapshot.
order(String, String, String, CancellationSignal) - Method in class zeroecho.pki.server.acme.AcmeService: Continues an authenticated order with cancellation before durable admission.
Order(String, String, String, int, String, PkiId, CertificateProfileRef, PkiId, PkiId, String, List, Optional, Optional, AcmeState.OrderStatus, List, Optional, Optional, Optional, Instant, Instant, String) - Constructor for record class zeroecho.pki.server.acme.AcmeState.Order: Validates exact policy and object bindings.
orderDirectory(String) - Method in class zeroecho.pki.server.acme.AcmeService: Resolves the exact frozen directory for one existing order resource.
orderedCredentialIds() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Returns the value of the orderedCredentialIds record component.
orderId() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns the value of the orderId record component.
orderId() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the orderId record component.
Ordinary(PkiOperationOutcome) - Constructor for record class zeroecho.pki.server.ServerControlOperationOutcome.Ordinary: Validates the required outcome.
ORDINARY - Enum constant in enum class zeroecho.pki.server.ServerControlOperationOutcome.Classification: Replayable result containing no one-time secret.
organization() - Method in record class zeroecho.pki.server.SecurityPrincipal: Returns the value of the organization record component.
originalType() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the originalType record component.
originalWireSha256() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the originalWireSha256 record component.
outcome() - Method in record class zeroecho.pki.server.ServerControlOperationOutcome.Ordinary: Returns the value of the outcome record component.
outcome() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.ControlExecuted: Returns the value of the outcome record component.
outcome() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.Executed: Returns the value of the outcome record component.
output(long) - Method in interface zeroecho.pki.server.BackupTransferChannel: Opens the response archive stream after download admission.
OUTSIDE_AUTHORITY_SCOPE - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: The authority is not exposed by process policy.
OUTSIDE_REALM - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: The requested resource belongs to another realm.
outstanding() - Method in class zeroecho.pki.server.acme.AcmeNonceService: Returns the current bounded outstanding nonce count for diagnostics.
OWN - Enum constant in enum class zeroecho.pki.server.Permission.Relationship: Restricts the grant to objects owned by the principal.
ownedBy(SecurityPrincipal) - Method in record class zeroecho.pki.server.Permission.Resource: Tests whether the principal owns this object.
Owner(DisclosureService.Owner.OwnerType, String) - Constructor for record class zeroecho.pki.server.DisclosureService.Owner: Validates the canonical owner identity.
OWNER_ONLY - Enum constant in enum class zeroecho.pki.server.DisclosureService.Policy: Only the owner or an administrator may retrieve content.
ownerAcmeAccountId() - Method in record class zeroecho.pki.server.DisclosureService.Record: Returns the value of the ownerAcmeAccountId record component.
ownerAliases() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmIdentity: Returns the value of the ownerAliases record component.
ownerId() - Method in record class zeroecho.pki.server.DisclosureService.Owner: Returns the value of the ownerId record component.
ownerPrincipalId() - Method in record class zeroecho.pki.server.DisclosureService.Record: Returns the value of the ownerPrincipalId record component.
ownerPrincipalId() - Method in record class zeroecho.pki.server.Permission.Resource: Returns the value of the ownerPrincipalId record component.
ownerPrincipalId() - Method in record class zeroecho.pki.server.ServerControlOperation.EnrollCredentialPublication: Returns the value of the ownerPrincipalId record component.

P

page(Class, int, int) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Returns one bounded typed page without aggregating the namespace.
Page(List, int, boolean) - Constructor for record class zeroecho.pki.server.ServerControlStore.Page: Snapshots the bounded page.
parameters() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Entry: Returns the value of the parameters record component.
Parameters(String, List) - Constructor for record class zeroecho.pki.server.schema.OperationParameterSchemas.Parameters: Copies the field list.
parameterSchemas() - Method in class zeroecho.pki.server.schema.OperationDescriptorCatalog: Returns unchanged four-component parameter-record projections.
parse(byte[]) - Static method in class zeroecho.pki.server.RoleTemplateCatalog: Parses one complete strict versioned resource.
parse(byte[], int) - Static method in class zeroecho.pki.server.http.StrictJson: Parses exactly one complete strict JSON value with duplicate detection.
passTimeout() - Method in record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Returns the value of the passTimeout record component.
path() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Keyring: Returns the value of the path record component.
pathCommitment() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the pathCommitment record component.
pathCommitment() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the pathCommitment record component.
pathId() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the pathId record component.
pathId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the pathId record component.
pathId() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Returns the value of the pathId record component.
pathId() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the pathId record component.
payload() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.Verified: Returns the verified endpoint payload.
payload() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns the value of the payload record component.
payload() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolRecord: Returns the protocol payload.
pbm() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns the value of the pbm record component.
Pbm(int, int, int, int, Set, Set, List) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Validates resource limits and independent requester mappings.
PbmIdentity(String, String, EnrollmentRuntimeConfiguration.KeyReference, List) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmIdentity: Validates bounded identity and exclusion fields.
pbmSecret(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime.CredentialLease: Imports a configured PBM secret for the exact senderKID.
peerCertificates() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Returns the value of the peerCertificates record component.
PENDING - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.AuthorizationStatus: Authorization awaits challenge validation.
PENDING - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.ChallengeStatus: Challenge awaits an explicit trigger.
PENDING - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.OrderStatus: Order awaits successful identifier authorization.
PENDING - Enum constant in enum class zeroecho.pki.server.ApprovalService.State: Awaiting sufficient attributable decisions.
PENDING - Enum constant in enum class zeroecho.pki.server.BreakGlassService.State: Emergency grant awaits independent activation.
PENDING - Enum constant in enum class zeroecho.pki.server.DisclosureService.DeliveryState: Token delivery has not yet been classified.
PENDING - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Awaiting independent administrative votes.
pendingApprovalCount(Instant) - Method in class zeroecho.pki.server.ServerControlStore: Counts pending, unexpired approvals in one stable metadata scan using constant auxiliary memory.
pendingLifetime() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Returns the value of the pendingLifetime record component.
pendingOrderCount(String, int) - Method in class zeroecho.pki.server.acme.AcmeService: Counts pending nonterminal orders up to a caller-supplied finite bound.
Permission - Class in zeroecho.pki.server: Closed permission vocabulary and immutable scoped grant model.
PERMISSION_GRANT - Enum constant in enum class zeroecho.pki.server.Permission.Action: Grants or revokes permissions.
Permission.Action - Enum Class in zeroecho.pki.server: Stable permission actions; semantic separation is part of the public contract.
Permission.Condition - Enum Class in zeroecho.pki.server: Closed non-programmable grant conditions.
Permission.Context - Record Class in zeroecho.pki.server: Safe finite context used only by closed conditions.
Permission.DataView - Enum Class in zeroecho.pki.server: Explicitly separated disclosure and audit data views.
Permission.Effect - Enum Class in zeroecho.pki.server: Grant effect.
Permission.Grant - Record Class in zeroecho.pki.server: Immutable persisted permission grant.
Permission.Relationship - Enum Class in zeroecho.pki.server: Relationship between the requesting principal and the target object.
Permission.Resource - Record Class in zeroecho.pki.server: Transport-neutral target reference.
Permission.ResourceType - Enum Class in zeroecho.pki.server: Security resource types, distinct from PKI authority ownership.
Permission.Scope - Record Class in zeroecho.pki.server: Canonical resource scope supplied independently of object contents.
permissionAction() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.OperationSpec: Returns the value of the permissionAction record component.
permissionResourceType() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.OperationSpec: Returns the value of the permissionResourceType record component.
permits(Permission.DataView) - Method in enum class zeroecho.pki.server.Permission.DataView: Tests view sufficiency without merging content and PII authority.
permittedAlgorithms() - Method in record class zeroecho.pki.server.est.KeygenPolicy: Returns the value of the permittedAlgorithms record component.
pii(AuditorViews.Source, SecurityPrincipal, String, boolean, boolean) - Method in class zeroecho.pki.server.AuditorViews: Returns PII only with explicit reason-bound authorization and records access safely.
Pii(AuditorViews.FullMetadata, Optional, List) - Constructor for record class zeroecho.pki.server.AuditorViews.Pii: Defensively snapshots PII data.
PII - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Stable operation identity used for authorization and dispatch.
PII_FULL - Enum constant in enum class zeroecho.pki.server.Permission.DataView: Personal data.
Pkcs12ClientTrustProvider - Class in zeroecho.pki.server.http: External PKCS#12 trust-store provider for forwarded administrative clients.
Pkcs12ClientTrustProvider() - Constructor for class zeroecho.pki.server.http.Pkcs12ClientTrustProvider: Creates the stateless PKCS#12 client-trust provider.
Pkcs12TlsProvider - Class in zeroecho.pki.server.http: Production JSSE provider using externally protected PKCS#12 identity and trust stores.
Pkcs12TlsProvider() - Constructor for class zeroecho.pki.server.http.Pkcs12TlsProvider: Creates the stateless PKCS#12 TLS provider.
Pki(PkiOperation) - Constructor for record class zeroecho.pki.server.AdministrativeOperation.Pki: Validates the typed PKI operation.
PKI_OPERATION - Enum constant in enum class zeroecho.pki.server.OperationSecurityDescriptors.Family: Operation belongs to the core PKI application family.
PkiHttpsServer - Class in zeroecho.pki.server: Lifecycle owner for one bounded administrative mutual-TLS HTTPS server.
PkiHttpsServer.State - Enum Class in zeroecho.pki.server: Closed process lifecycle.
PkiHttpsTransport - Class in zeroecho.pki.server.http: Narrow lifecycle facade hiding the JDK HTTPS listener and bounded execution runtime.
PkiServerAuthenticationContext - Record Class in zeroecho.pki.server.spi: Bounded read-only mutual-TLS authentication input, independent of operation arguments.
PkiServerAuthenticationContext(List, String, String, String, RealmId) - Constructor for record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Creates a direct-mTLS context without forwarded identity headers.
PkiServerAuthenticationContext(List, String, String, String, RealmId, Map) - Constructor for record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Validates and snapshots the finite authentication context.
PkiServerAuthenticationResult - Interface in zeroecho.pki.server.spi: Safe closed mutual-TLS authentication result.
PkiServerAuthenticationResult.Authenticated - Record Class in zeroecho.pki.server.spi: Successfully resolved persisted principal identity.
PkiServerAuthenticationResult.Code - Enum Class in zeroecho.pki.server.spi: Safe non-disclosing rejection codes.
PkiServerAuthenticationResult.Rejected - Record Class in zeroecho.pki.server.spi: Authentication rejection containing only a stable safe code.
PkiServerAuthenticator - Interface in zeroecho.pki.server.spi: Internal transport-neutral server authentication composition boundary.
PkiServerClientTrustProvider - Interface in zeroecho.pki.server.spi: Explicit provider for the external administrative-client trust policy used after a trusted proxy forwards a certificate chain.
PkiServerClientTrustProvider - Interface in zeroecho.pki.server.spi.v2: Explicit provider for the external administrative-client trust policy used after a trusted proxy forwards a certificate chain.
PkiServerConfiguration - Record Class in zeroecho.pki.server: Strict immutable configuration for one administrative HTTPS server instance.
PkiServerConfiguration(int, String, ServerRealmConfiguration, PkiServerConfiguration.Listener, PkiServerConfiguration.Authentication, PkiServerConfiguration.Execution, PkiServerConfiguration.RuntimeCapabilities) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration: Creates a configuration with the public repository and ACME listeners disabled.
PkiServerConfiguration(int, String, ServerRealmConfiguration, PkiServerConfiguration.Listener, PkiServerConfiguration.Authentication, PkiServerConfiguration.Execution, PkiServerConfiguration.RuntimeCapabilities, Optional) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration: Creates a configuration with ACME disabled.
PkiServerConfiguration(int, String, ServerRealmConfiguration, PkiServerConfiguration.Listener, PkiServerConfiguration.Authentication, PkiServerConfiguration.Execution, PkiServerConfiguration.RuntimeCapabilities, Optional, Optional) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration: Creates a configuration with default audit projection.
PkiServerConfiguration(int, String, ServerRealmConfiguration, PkiServerConfiguration.Listener, PkiServerConfiguration.Authentication, PkiServerConfiguration.Execution, PkiServerConfiguration.RuntimeCapabilities, Optional, Optional, Optional, Optional, Optional, PkiServerConfiguration.AuditProjection) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration: Validates all security-sensitive fields before resource allocation.
PkiServerConfiguration.AcmeListener - Record Class in zeroecho.pki.server: Separately bounded ACME listener and protocol-security configuration.
PkiServerConfiguration.AcmeTransportMode - Enum Class in zeroecho.pki.server: Closed ACME listener transport topologies.
PkiServerConfiguration.AuditProjection - Record Class in zeroecho.pki.server: Bounded audit-projection policy, independently applied to revocation and each evidence family.
PkiServerConfiguration.Authentication - Record Class in zeroecho.pki.server: Strict mode-separated administrative client-certificate authentication.
PkiServerConfiguration.ClientCertificateMapping - Record Class in zeroecho.pki.server: One exact client-certificate mapping.
PkiServerConfiguration.CmpListener - Record Class in zeroecho.pki.server: Configuration for the optional CMP RFC 4210/9480 HTTPS listener.
PkiServerConfiguration.EstListener - Record Class in zeroecho.pki.server: Separately bounded EST protocol listener configuration.
PkiServerConfiguration.Execution - Record Class in zeroecho.pki.server: Bounded worker, queue, admission, deadline and shutdown policy.
PkiServerConfiguration.Listener - Record Class in zeroecho.pki.server: HTTPS listener configuration.
PkiServerConfiguration.PublicListener - Record Class in zeroecho.pki.server: Separately bounded public repository listener configuration.
PkiServerConfiguration.RuntimeCapabilities - Record Class in zeroecho.pki.server: Process-local capability references.
PkiServerConfiguration.ScepListener - Record Class in zeroecho.pki.server: Configuration for the optional SCEP RFC 8894 HTTPS listener.
PkiServerConfiguration.SigningReconciliation - Record Class in zeroecho.pki.server: Bounds for one signing-reconciliation pass executed by SigningReconciliationWorker.
PkiServerConfigurationCodec - Class in zeroecho.pki.server: Strict current-version server configuration decoder with closed field sets.
PkiServerMain - Class in zeroecho.pki.server: Production command-line entry point for the administrative HTTPS server.
PkiServerTlsProvider - Interface in zeroecho.pki.server.spi: Explicit server-local boundary for lifecycle-confined JSSE key and trust material.
PkiServerTlsProvider - Interface in zeroecho.pki.server.spi.v2: Explicit server-local boundary for lifecycle-confined JSSE key and trust material.
pkiSessionConfiguration() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the pkiSessionConfiguration record component.
placeholder() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns the value of the placeholder record component.
policy() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the policy record component.
policy() - Method in record class zeroecho.pki.server.DisclosureService.Record: Returns the value of the policy record component.
policy() - Method in record class zeroecho.pki.server.ServerControlOperation.SetDisclosure: Returns the value of the policy record component.
Policy(String, int, Set, Set, boolean, Duration, boolean) - Constructor for record class zeroecho.pki.server.ApprovalService.Policy: Validates the finite N-of-M policy.
POLICY - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Security or issuance policy.
POLICY_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads policy definitions.
POLICY_UPDATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Updates policy definitions.
policyCommitment() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the policyCommitment record component.
policyCommitment() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the policyCommitment record component.
policyCommitment() - Method in record class zeroecho.pki.server.DisclosureService.Record: Returns the value of the policyCommitment record component.
policyCommitment() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Binding: Returns the value of the policyCommitment record component.
policyCommitment() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Binding: Returns the value of the policyCommitment record component.
policyId() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns the value of the policyId record component.
port() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the port record component.
port() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns the value of the port record component.
port() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns the value of the port record component.
port() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Returns the value of the port record component.
port() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the port record component.
port() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns the value of the port record component.
PreCertificateBuilder - Class in zeroecho.pki.server.ct: Builds a CT pre-certificate from a TBSCertificate by adding the CT poison extension and signing it with the CA's key, ready for submission to CT logs.
predecessorId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns the value of the predecessorId record component.
predecessorId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the predecessorId record component.
predecessorSha256() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the predecessorSha256 record component.
presentation() - Method in record class zeroecho.pki.server.acme.AcmeState.Identifier: Returns the ACME presentation form.
presentation() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Entry: Returns the value of the presentation record component.
presentation() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Identifier: Returns the canonical wire presentation.
Presentation(String, String, String, String, OperationDescriptorCatalog.TransportSemantics) - Constructor for record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Presentation: Rejects missing presentation values.
principal() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the principal record component.
principal() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Access: Returns the value of the principal record component.
principal() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterPrincipal: Returns the value of the principal record component.
principal(String) - Static method in record class zeroecho.pki.server.DisclosureService.Owner: Creates an administrative-principal owner.
principal(String) - Method in class zeroecho.pki.server.ServerRealmContext: Resolves one persisted principal for transport authentication.
PRINCIPAL - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Security principal.
PRINCIPAL - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for principals.
PRINCIPAL_DISABLED - Enum constant in enum class zeroecho.pki.server.AuthorizationEngine.Code: The authenticated principal is disabled.
PRINCIPAL_DISABLED - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Resolved principal is disabled.
PRINCIPAL_MANAGE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Manages security principals.
principalId - Variable in class zeroecho.pki.server.jfr.AdminRequestEvent: Server principal identifier of the authenticated end-client; empty string when authentication failed or did not complete.
principalId() - Method in record class zeroecho.pki.server.AdministrativeDecisionActor: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.ApprovalService.Decision: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.CredentialPublicationGate.AuditActor: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Decision: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.OcspRequesterService.Authorized: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.OcspResponderService.PrincipalMapping: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ClientCertificateMapping: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.SecurityPrincipal: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectPrincipal: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.ServerControlOperation.SetPrincipalEnabled: Returns the value of the principalId record component.
principalId() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the principalId record component.
principalIds() - Method in record class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases.Snapshot: Returns the value of the principalIds record component.
PrincipalMapping(String, String, OcspResponderService.PrincipalMappingType, String) - Constructor for record class zeroecho.pki.server.OcspResponderService.PrincipalMapping: Validates stable mapping metadata and fixed commitment.
principalMappings() - Method in record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Returns the value of the principalMappings record component.
principals(int, int) - Method in class zeroecho.pki.server.ServerControlStore: Returns a bounded stable page of principals in metadata-key order.
prior() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Replacement: Returns the value of the prior record component.
PRIVATE_AUTHENTICATED - Enum constant in enum class zeroecho.pki.server.PublicRepositoryGateway.CacheClass: Authenticated responses must remain private.
privateKey() - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime.CredentialLease: Imports the provisioned response private key.
PROCESSING - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.ChallengeStatus: Challenge validation is in progress.
PROCESSING - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.OrderStatus: Finalization and issuance are in progress.
processMessage(CmpEndpoint, byte[]) - Method in class zeroecho.pki.server.cmp.CmpService: Processes one bounded protected request using the owned enrollment runtime.
processMessage(CmpEndpoint, byte[], CancellationSignal) - Method in class zeroecho.pki.server.cmp.CmpService: Processes a request with cooperative cancellation.
processPkiOperation(ScepEndpoint, byte[]) - Method in class zeroecho.pki.server.scep.ScepService: Processes authenticated PKCSReq or GetCertInitial with durable replay and frozen credential selection.
processPkiOperation(ScepEndpoint, byte[], CancellationSignal) - Method in class zeroecho.pki.server.scep.ScepService: Processes a request with cancellation before durable signing admission.
profile() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the profile record component.
profile() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the profile record component.
profile() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the profile record component.
profile() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the profile record component.
profile() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEnrollmentProfile: Returns the value of the profile record component.
profile() - Method in record class zeroecho.pki.server.ServerControlOperation.UpdateEnrollmentProfile: Returns the value of the profile record component.
PROFILE - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Certificate profile.
PROFILE_ACTIVATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Activates certificate profiles.
PROFILE_DEACTIVATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Deactivates certificate profiles.
PROFILE_MATCH_REQUIRED - Enum constant in enum class zeroecho.pki.server.Permission.Condition: Requires the configured profile to match.
PROFILE_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads certificate profiles.
PROFILE_REGISTER - Enum constant in enum class zeroecho.pki.server.Permission.Action: Registers certificate profiles.
PROFILE_VALIDATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Validates certificate profiles.
profileId() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.server.cmp.CmpEndpoint: Returns the value of the profileId record component.
profileId() - Method in interface zeroecho.pki.server.enrollment.EnrollmentEndpoint: Returns the certificate-content policy binding.
profileId() - Method in record class zeroecho.pki.server.est.EstEndpoint: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.server.Permission.Scope: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.server.scep.ScepEndpoint: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Returns the value of the profileId record component.
profilePrecondition() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterAcmeDirectory: Returns the value of the profilePrecondition record component.
protectionPolicy() - Method in record class zeroecho.pki.server.cmp.CmpEndpoint: Returns the value of the protectionPolicy record component.
protocol() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns the value of the protocol record component.
protocol() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.ActiveCredential: Returns the value of the protocol record component.
protocol() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns the value of the protocol record component.
protocol() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns the value of the protocol record component.
protocol() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Returns the value of the protocol record component.
protocolDeadline() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns the value of the protocolDeadline record component.
ProtocolMutation(ServerControlStore.ProtocolRecord, Optional) - Constructor for record class zeroecho.pki.server.ServerControlStore.ProtocolMutation: Validates the immutable mutation request.
protocolRecord(String, String) - Method in class zeroecho.pki.server.ServerControlStore: Reads one exact protocol record from its closed namespace.
ProtocolRecord(String, String, String, byte[]) - Constructor for record class zeroecho.pki.server.ServerControlStore.ProtocolRecord: Validates namespace, identity, commitment, and defensive payload bounds.
protocolRecords(String, int, int) - Method in class zeroecho.pki.server.ServerControlStore: Returns one bounded deterministic page of protocol records.
protocolSnapshot(String) - Method in class zeroecho.pki.server.ServerControlStore: Opens a single consistent protocol snapshot for linear-time startup accounting.
providerCallTimeout() - Method in record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Returns the value of the providerCallTimeout record component.
providerId() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the providerId record component.
providerId() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the providerId record component.
PROXY_NOT_TRUSTED - Enum constant in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Transport proxy is not trusted.
proxyTransportMappings() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the proxyTransportMappings record component.
proxyTransportMappings() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the proxyTransportMappings record component.
PUBLIC - Enum constant in enum class zeroecho.pki.server.DisclosureService.Policy: Content is publicly retrievable and may be listed.
PUBLIC - Enum constant in enum class zeroecho.pki.server.SecurityPrincipal.Type: Unauthenticated public identity.
PUBLIC_ALIAS - Enum constant in enum class zeroecho.pki.server.PublicRepositoryGateway.CacheClass: Public alias responses require revalidation.
PUBLIC_IMMUTABLE - Enum constant in enum class zeroecho.pki.server.PublicRepositoryGateway.CacheClass: Immutable public content may be cached indefinitely.
PUBLIC_READ - Enum constant in enum class zeroecho.pki.server.OperationSecurityDescriptors.Eligibility: A read-only public transport may expose the operation.
PUBLIC_UNLISTED - Enum constant in enum class zeroecho.pki.server.DisclosureService.Policy: Content is public only through a point-addressable bearer.
publicAddress() - Method in class zeroecho.pki.server.PkiHttpsServer: Returns the actual public listener address when the repository listener is enabled.
publicAliasCache() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the publicAliasCache record component.
PUBLICATION - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Publication operation or target.
PUBLICATION_PROCESS - Enum constant in enum class zeroecho.pki.server.Permission.Action: Processes pending publication.
PUBLICATION_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads publication state.
PUBLICATION_RECONCILE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reconciles publication state.
PUBLICATION_REGISTER - Enum constant in enum class zeroecho.pki.server.Permission.Action: Registers a publication target.
PUBLICATION_RETRY - Enum constant in enum class zeroecho.pki.server.Permission.Action: Retries failed publication.
publicImmutableCache() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the publicImmutableCache record component.
publicKey() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKey: Returns the value of the publicKey record component.
publicKey() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.Verified: Returns the value of the publicKey record component.
publicKeyAlgorithms() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the publicKeyAlgorithms record component.
publicKeyAlgorithms() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the publicKeyAlgorithms record component.
publicKeySpki() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the account public key.
publicListener() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the publicListener record component.
PublicListener(InetAddress, int, Optional, boolean, PkiServerConfiguration.Authentication, int, int, PkiServerConfiguration.Execution, Duration, Duration, Duration, boolean) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Validates public-listener transport policy and independent finite bounds.
publicRepository() - Method in class zeroecho.pki.server.ServerRealmContext: Returns read-only disclosed public repository gateway.
PublicRepositoryGateway - Class in zeroecho.pki.server: Transport-neutral, read-only disclosed repository gateway.
PublicRepositoryGateway.Access - Record Class in zeroecho.pki.server: Safe request identity, without certificate or bearer-token logging fields.
PublicRepositoryGateway.Authority - Record Class in zeroecho.pki.server: Safe public authority metadata.
PublicRepositoryGateway.CacheClass - Enum Class in zeroecho.pki.server: Cache policy classes with distinct privacy semantics.
PublicRepositoryGateway.Chain - Record Class in zeroecho.pki.server: Exact explicit chain path represented as ordered immutable certificate links.
PublicRepositoryGateway.Content - Record Class in zeroecho.pki.server: Lifecycle-owned binary response descriptor.
PublicRepositoryTransport - Class in zeroecho.pki.server.http: Lifecycle owner for the isolated, optionally enabled public repository listener.
publisherSecretsEnvironmentVariable() - Method in record class zeroecho.pki.server.PkiServerConfiguration.RuntimeCapabilities: Returns the value of the publisherSecretsEnvironmentVariable record component.
publisherSecretsStore() - Method in record class zeroecho.pki.server.PkiServerConfiguration.RuntimeCapabilities: Returns the value of the publisherSecretsStore record component.

Q

query() - Method in record class zeroecho.pki.server.ServerControlOperation.SearchAudit: Returns the value of the query record component.
quiesce() - Method in class zeroecho.pki.server.http.AcmeTransport: Rejects new protocol and validation work.
quiesce() - Method in class zeroecho.pki.server.http.CmpTransport: Rejects new protocol work.
quiesce() - Method in class zeroecho.pki.server.http.EstTransport: Rejects new protocol work.
quiesce() - Method in class zeroecho.pki.server.http.PkiHttpsTransport: Prevents new operation admission without closing in-flight work.
quiesce() - Method in class zeroecho.pki.server.http.PublicRepositoryTransport: Prevents new public stream admission.
quiesce() - Method in class zeroecho.pki.server.http.ScepTransport: Rejects new protocol work.
QUIESCING - Enum constant in enum class zeroecho.pki.server.PkiHttpsServer.State: Rejecting new work while owned resources drain.

R

read(Path) - Static method in record class zeroecho.pki.server.BackupTransferConfiguration: Reads an explicit bounded configuration.
read(Path) - Static method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Reads a bounded strict UTF-8 companion document.
read(Path) - Static method in class zeroecho.pki.server.PkiServerConfigurationCodec: Reads and validates one exact configuration without opening providers, stores, listeners, audit sinks, or sessions.
readOnly() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns the value of the readOnly record component.
READY - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.OrderStatus: Order is authorized and ready for finalization.
READY - Enum constant in enum class zeroecho.pki.server.PkiHttpsServer.State: Accepting requests.
realm() - Method in class zeroecho.pki.server.PkiHttpsServer: Returns the one lifecycle-owned realm context.
realm() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the realm record component.
REALM - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Security realm.
REALM - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for the realm record.
REALM_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads realm metadata.
realmId() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.CertificateIdentityEvidence: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases.Snapshot: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.Permission.Scope: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Returns the value of the realmId record component.
RealmId - Record Class in zeroecho.pki.server: Canonical identity of one PKI realm.
RealmId(String) - Constructor for record class zeroecho.pki.server.RealmId: Validates the canonical realm identifier.
RealmRecord(RealmId, String, AuthorityExposurePolicy, String, String, String, String, MetadataStoreId) - Constructor for record class zeroecho.pki.server.ServerControlStore.RealmRecord: Validates finite realm control metadata.
reason() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the reason record component.
reason() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Returns the value of the reason record component.
REASON_REQUIRED - Enum constant in enum class zeroecho.pki.server.Permission.Condition: Requires a nonblank operator reason.
reasonReference() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Returns the value of the reasonReference record component.
receipt() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns the value of the receipt record component.
recipientNonce() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns the value of the recipientNonce record component.
recommended() - Static method in record class zeroecho.pki.server.DisclosureService.Defaults: Returns the normative recommended defaults.
record() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolMutation: Returns the value of the record record component.
Record(String, String, Permission.Grant, String, String, Optional, Instant, Instant, Instant, BreakGlassService.State, String) - Constructor for record class zeroecho.pki.server.BreakGlassService.Record: Creates an activated record for existing embedded callers.
Record(String, String, Permission.Grant, String, String, Optional, Instant, Optional, Instant, BreakGlassService.State, String) - Constructor for record class zeroecho.pki.server.BreakGlassService.Record: Validates the strict time-limited scoped record.
Record(String, RealmId, PkiId, RepositoryAliasService.Type, PkiId, Optional, Optional, String, Instant, Instant, String, RepositoryAliasService.State, String) - Constructor for record class zeroecho.pki.server.RepositoryAliasService.Record: Validates exact alias identity and commitments.
Record(PkiId, DisclosureService.ObjectType, DisclosureService.Policy, Optional, String, Instant) - Constructor for record class zeroecho.pki.server.DisclosureService.Record: Creates a record with optional administrative-principal ownership.
Record(PkiId, DisclosureService.ObjectType, DisclosureService.Policy, Optional, Optional, String, Instant) - Constructor for record class zeroecho.pki.server.DisclosureService.Record: Validates the durable disclosure record.
recordAdminRequest() - Method in class zeroecho.pki.server.ServerRealmContext: Records an administrative HTTP request upon handler entry, including rejected requests.
recordCommitment() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKey: Returns the value of the recordCommitment record component.
recordCommitment() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the recordCommitment record component.
recordCount - Variable in class zeroecho.pki.server.jfr.AuditWriteEvent: Number of records written in this batch (always 1 for the server-control sink).
recordId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns the value of the recordId record component.
recordId() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolRecord: Returns the value of the recordId record component.
redacted() - Method in record class zeroecho.pki.server.AuditorViews.FullMetadata: Returns the value of the redacted record component.
redacted(AuditorViews.Source) - Method in class zeroecho.pki.server.AuditorViews: Returns a standard redacted view with no full subject, SAN, or DER.
Redacted(PkiId, Permission.ResourceType, Permission.Scope, String, Instant, String, Optional, String, boolean, int) - Constructor for record class zeroecho.pki.server.AuditorViews.Redacted: Creates an instance of a Redacted record class.
REDACTED - Static variable in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Stable operation identity used for authorization and dispatch.
ref() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns the value of the ref record component.
register(PkiId, Optional, CredentialPublicationGate.AuditActor) - Method in class zeroecho.pki.server.CredentialPublicationGate: Initializes or verifies confirmation, then registers or verifies disclosure.
register(PkiId, DisclosureService.ObjectType, DisclosureService.Policy, Optional, String, String) - Method in class zeroecho.pki.server.DisclosureService: Persists the first disclosure record without touching PKI content.
register(CmpEndpoint) - Method in class zeroecho.pki.server.cmp.CmpService: Registers a fully bound endpoint.
register(EnrollmentEndpoint) - Method in class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry: Creates or atomically replaces an endpoint after validating its active policy.
register(EnrollmentProfile) - Method in class zeroecho.pki.server.enrollment.EnrollmentProfileService: Durably creates a profile; existing identities cannot be overwritten.
register(EstEndpoint) - Method in class zeroecho.pki.server.est.EstService: Registers an EST endpoint, replacing any existing endpoint with the same label.
register(OcspResponderService.Registration) - Method in class zeroecho.pki.server.OcspResponderService: Creates authoritative metadata and durably registers one inactive responder.
register(ScepEndpoint) - Method in class zeroecho.pki.server.scep.ScepService: Registers or replaces an endpoint.
RegisterAcmeDirectory(AcmeService.DirectoryRegistration) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RegisterAcmeDirectory: Creates an unbound transport input; the gateway supplies the authoritative precondition.
RegisterAcmeDirectory(AcmeService.DirectoryRegistration, Optional) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RegisterAcmeDirectory: Validates the operation's immutable input.
RegisterCmpEndpoint(CmpEndpoint) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RegisterCmpEndpoint: Validates the operation input.
registerDirectory(AcmeService.DirectoryRegistration) - Method in class zeroecho.pki.server.acme.AcmeService: Registers directly after resolving the same exact active-profile precondition.
registerDirectory(AcmeService.DirectoryRegistration, ServerControlOperation.AcmeDirectoryProfilePrecondition) - Method in class zeroecho.pki.server.acme.AcmeService: Registers one immutable inactive directory revision from an approval-bound profile precondition.
RegisterEnrollmentProfile(EnrollmentProfile) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RegisterEnrollmentProfile: Validates the operation input.
RegisterEstEndpoint(EstEndpoint) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RegisterEstEndpoint: Validates the operation input.
registerExact(PkiId, DisclosureService.ObjectType, DisclosureService.Policy, Optional, String, String) - Method in class zeroecho.pki.server.DisclosureService: Persists or exactly replays one disclosure record with an optional typed owner.
RegisterOcspResponder(OcspResponderService.Registration) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RegisterOcspResponder: Validates the operation's immutable input.
RegisterPrincipal(SecurityPrincipal) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RegisterPrincipal: Validates the operation's immutable input.
RegisterScepEndpoint(ScepEndpoint) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RegisterScepEndpoint: Validates the operation input.
registration() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterAcmeDirectory: Returns the value of the registration record component.
registration() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterOcspResponder: Returns the value of the registration record component.
Registration(String, String, PkiId, PkiId, OcspResponderService.SigningMode, PkiId, KeyRef, PkiId, String, Optional, String, OcspResponseService.ResponderId, Duration, OcspResponderService.NoncePolicy, int, Set, int, int, Duration) - Constructor for record class zeroecho.pki.server.OcspResponderService.Registration: Creates the default public unsigned-only registration.
Registration(String, String, PkiId, PkiId, OcspResponderService.SigningMode, PkiId, KeyRef, PkiId, String, Optional, String, OcspResponseService.ResponderId, Duration, OcspResponderService.NoncePolicy, int, Set, int, int, Duration, OcspResponderService.RequestAuthenticationMode, Optional) - Constructor for record class zeroecho.pki.server.OcspResponderService.Registration: Snapshots the typed finite registration input.
REJECT - Enum constant in enum class zeroecho.pki.server.ApprovalService.Choice: Rejects execution of the exact requested operation.
REJECT - Enum constant in enum class zeroecho.pki.server.OcspResponderService.NoncePolicy: Rejects requests containing a nonce.
REJECT - Static variable in record class zeroecho.pki.server.ServerControlOperation.DecideApproval: Stable operation identity used for authorization and dispatch.
REJECT - Static variable in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Stable rejection operation identity.
Rejected(AdministrativeAuthenticationMode, Optional, Optional, PkiServerAuthenticationResult.Code) - Constructor for record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Rejected: Validates the rejection.
Rejected(PkiServerAuthenticationResult.Code) - Constructor for record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Rejected: Creates a direct-mode rejection without resolved identity metadata.
REJECTED - Enum constant in enum class zeroecho.pki.server.ApprovalService.State: An eligible approver rejected the request.
REJECTED - Enum constant in enum class zeroecho.pki.server.enrollment.CmpTransaction.Confirmation: The authenticated requester rejected the certificate.
REJECTED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: An administrator rejected the request.
relationship() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the relationship record component.
relationship() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the relationship record component.
relationship() - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Returns the value of the relationship record component.
relationship() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the relationship record component.
releaseAdmission() - Method in class zeroecho.pki.server.http.ServerRuntime: Returns a permit previously acquired by ServerRuntime.tryAdmit().
releaseFinalization() - Method in class zeroecho.pki.server.acme.AcmeRateAdmission: Releases one previously acquired finalization permit.
remove(PkiId, RepositoryAliasService.Type, String, String) - Method in class zeroecho.pki.server.RepositoryAliasService: Atomically removes an alias without deleting its target.
REMOVED - Enum constant in enum class zeroecho.pki.server.RepositoryAliasService.State: Alias has been deliberately removed.
RemoveRepositoryAlias(PkiId, RepositoryAliasService.Type, String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RemoveRepositoryAlias: Validates the operation's immutable input.
RENEW - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Operation: Renew the exact authoritative predecessor identity.
replace(List) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Atomically compare-and-replaces a finite related record set.
REPLACE - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Operation: Replace a CMP predecessor using the original signed CRMF request.
replaceApproval(ApprovalService.Request, ApprovalService.Request) - Method in class zeroecho.pki.server.ServerControlStore: Replaces one approval request through compare-and-replace.
replaceAssignment(RoleTemplateCatalog.Assignment, RoleTemplateCatalog.Assignment) - Method in class zeroecho.pki.server.ServerControlStore: Replaces one exact role assignment.
replaceBreakGlass(BreakGlassService.Record, BreakGlassService.Record) - Method in class zeroecho.pki.server.ServerControlStore: Replaces one break-glass record.
replaceCapability(DisclosureService.Capability, DisclosureService.Capability) - Method in class zeroecho.pki.server.ServerControlStore: Replaces one capability record.
replaced() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Transition: Returns the value of the replaced record component.
replaceDisclosure(DisclosureService.Record, DisclosureService.Record) - Method in class zeroecho.pki.server.ServerControlStore: Replaces one disclosure record.
replaceGrant(Permission.Grant, Permission.Grant) - Method in class zeroecho.pki.server.ServerControlStore: Replaces one direct grant.
Replacement(Object, Object) - Constructor for record class zeroecho.pki.server.acme.AcmeControlStore.Replacement: Validates stable type and identity before persistence.
replacePrincipal(SecurityPrincipal, SecurityPrincipal) - Method in class zeroecho.pki.server.ServerControlStore: Replaces one exact principal.
replaceRepositoryAlias(RepositoryAliasService.Record, RepositoryAliasService.Record, Optional) - Method in class zeroecho.pki.server.ServerControlStore: Atomically replaces an alias after exact expected-current validation.
REPOSITORY_ALIAS - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Public repository alias.
REPOSITORY_ALIAS - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for non-authoritative public repository aliases.
REPOSITORY_ALIAS_MANAGE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Manages repository aliases.
REPOSITORY_ALIAS_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads repository aliases.
repositoryAliases() - Method in class zeroecho.pki.server.ServerRealmContext: Returns durable non-authoritative public repository alias service.
repositoryAliases(int, int) - Method in class zeroecho.pki.server.ServerControlStore: Returns a bounded repository alias page.
RepositoryAliasService - Class in zeroecho.pki.server: Durable non-authoritative repository alias administration.
RepositoryAliasService(RealmId, ServerControlStore, PkiRepository, DisclosureService, Clock, AuditSink) - Constructor for class zeroecho.pki.server.RepositoryAliasService: Creates a repository alias authority over one realm control store.
RepositoryAliasService.Record - Record Class in zeroecho.pki.server: Immutable finite alias metadata; no content bytes or filesystem paths.
RepositoryAliasService.State - Enum Class in zeroecho.pki.server: Durable alias state; removal never deletes its immutable target.
RepositoryAliasService.Type - Enum Class in zeroecho.pki.server: Closed stable repository alias types.
request() - Method in record class zeroecho.pki.server.ServerControlOperation.ExecuteRestore: Returns the value of the request record component.
request(String, String, String, Permission.Scope, String, ApprovalService.Policy) - Method in class zeroecho.pki.server.ApprovalService: Creates a new pending exact-operation request.
Request(String, String, String, Permission.Scope, String, Instant, Instant, ApprovalService.Policy, String, ApprovalService.State, List, Optional) - Constructor for record class zeroecho.pki.server.ApprovalService.Request: Validates and snapshots the durable record.
Request(String, PkiId, String, String, byte[], Instant) - Constructor for record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Defensively snapshots non-secret protocol material.
Request(String, PkiId, String, String, byte[], Instant) - Constructor for record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Defensively snapshots non-secret protocol material.
Request(RealmId, String, PkiOperation, Permission.Resource, Permission.Relationship, Permission.Context, Optional, String) - Constructor for record class zeroecho.pki.server.ServerOperationGateway.Request: Wraps an existing PKI operation for source-compatible embedded callers.
Request(RealmId, String, AdministrativeAuthenticationMode, Optional, Optional, AdministrativeOperation, Permission.Resource, Permission.Relationship, Permission.Context, Optional, String) - Constructor for record class zeroecho.pki.server.ServerOperationGateway.Request: Validates the immutable request.
Request(RealmId, String, AdministrativeAuthenticationMode, Optional, AdministrativeOperation, Permission.Resource, Permission.Relationship, Permission.Context, Optional, String) - Constructor for record class zeroecho.pki.server.ServerOperationGateway.Request: Creates an embedded request with no enrollment credential evidence.
Request(RealmId, String, AdministrativeOperation, Permission.Resource, Permission.Relationship, Permission.Context, Optional, String) - Constructor for record class zeroecho.pki.server.ServerOperationGateway.Request: Creates a direct-mTLS request for existing embedded control callers.
Request(RealmId, AuthorityExposurePolicy, SecurityPrincipal, Permission.Action, Permission.Resource, Permission.Relationship, Permission.DataView, Permission.Context, List, Set) - Constructor for record class zeroecho.pki.server.AuthorizationEngine.Request: Validates and snapshots the authorization input.
REQUEST - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Certificate request.
REQUEST_APPROVE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Approves a certificate request.
REQUEST_CANCEL - Enum constant in enum class zeroecho.pki.server.Permission.Action: Cancels a certificate request.
REQUEST_READ_ANY - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads any request in scope.
REQUEST_READ_OWN - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads requests owned by the principal.
REQUEST_REJECT - Enum constant in enum class zeroecho.pki.server.Permission.Action: Rejects a certificate request.
REQUEST_SUBMIT - Enum constant in enum class zeroecho.pki.server.Permission.Action: Submits a certificate request.
RequestApproval(String, AdministrativeOperation, Permission.Resource) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RequestApproval: Validates the operation's immutable input.
requestAuthenticationMode() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the requestAuthenticationMode record component.
requestAuthenticationMode() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the requestAuthenticationMode record component.
requestBytes() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the requestBytes record component.
requester() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the requester record component.
requester() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns the value of the requester record component.
requester() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the requester record component.
Requester(IssuanceExecutionEvidence.ActorType, String, IssuanceExecutionEvidence.Authentication, Optional, Optional, Set, EnrollmentIdentityAliases.Snapshot) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Rejects mechanism confusion and incomplete credential evidence.
REQUESTER_APPROVER_SEPARATION - Enum constant in enum class zeroecho.pki.server.Permission.Condition: Requires distinct requester and approver principals.
requesterPrincipalId() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the requesterPrincipalId record component.
requesterPrincipalId() - Method in record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Returns the value of the requesterPrincipalId record component.
requesterSeparation() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns the value of the requesterSeparation record component.
requesterTrustPolicy() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the requesterTrustPolicy record component.
requesterTrustPolicy() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the requesterTrustPolicy record component.
RequesterTrustPolicy(List, List, List, OcspResponderService.RequesterRevocationPolicy, int, int) - Constructor for record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Validates and snapshots the complete closed policy.
requestHeaders() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Returns the value of the requestHeaders record component.
requestId() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the requestId record component.
requestId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the requestId record component.
requestId() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Returns the value of the requestId record component.
RequestIds - Class in zeroecho.pki.server.http: Strict opaque request-correlation identity policy.
requestKind() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the requestKind record component.
requestorName() - Method in record class zeroecho.pki.server.OcspRequesterService.SignedRequest: Returns a defensive copy of canonical requestor-name DER.
requestPolicyCommitment(OcspResponderService.Registration) - Static method in class zeroecho.pki.server.OcspResponderService: Returns a safe deterministic commitment to one request-authentication policy.
requestSha256() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the requestSha256 record component.
requestSha256() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns the value of the requestSha256 record component.
requestSha256() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the requestSha256 record component.
RequestSignatureBinding(String, String) - Constructor for record class zeroecho.pki.server.OcspResponderService.RequestSignatureBinding: Validates stable binding identity and commitment.
requestTrustAnchors() - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime.CredentialLease: Returns this authority's configured request trust anchors.
requestTrustAnchors() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns the value of the requestTrustAnchors record component.
require(String) - Method in class zeroecho.pki.server.OcspResponderService: Returns one exact responder.
require(String) - Method in class zeroecho.pki.server.OperationSecurityDescriptors: Resolves one descriptor by stable ID for strict transport decoding.
require(String) - Method in class zeroecho.pki.server.schema.OperationDescriptorCatalog: Requires a known canonical identity.
require(String, int) - Method in class zeroecho.pki.server.RoleTemplateCatalog: Resolves one exact template.
require(PkiId, RepositoryAliasService.Type) - Method in class zeroecho.pki.server.RepositoryAliasService: Returns an exact alias, including a durable removed record.
require(PkiOperation) - Method in class zeroecho.pki.server.OperationSecurityDescriptors: Resolves one PKI descriptor or fails closed.
require(AdministrativeOperation) - Method in class zeroecho.pki.server.OperationSecurityDescriptors: Resolves either operation family through the sole descriptor authority.
requireActiveAlias(String) - Method in class zeroecho.pki.server.OcspResponderService: Resolves one unique active public alias.
requireAdmissionCredential(String, String, String, String) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Checks a retained credential's current validity and exact frozen authority binding before an unclaimed request is admitted.
requireAlias(String) - Method in class zeroecho.pki.server.OcspResponderService: Resolves one unique durable alias regardless of activation state.
requireApproval() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns the value of the requireApproval record component.
requireApproval(String) - Method in class zeroecho.pki.server.ServerControlStore: Returns one approval request.
requireAssignment(String) - Method in class zeroecho.pki.server.ServerControlStore: Returns one role assignment.
requireBinding(String, String, String, boolean) - Method in class zeroecho.pki.server.enrollment.EnrollmentProfileService: Resolves a compatible enrollment binding under the shared control monitor.
requireBinding(ServerControlStore, String, String, String, boolean) - Static method in class zeroecho.pki.server.enrollment.EnrollmentProfileService: Resolves one policy without constructing another registry or scanning it.
requireBreakGlass(String) - Method in class zeroecho.pki.server.ServerControlStore: Returns one break-glass record.
requireCapability(String) - Method in class zeroecho.pki.server.ServerControlStore: Returns one capability record.
requireCmpCurrentSource(CmpTransaction) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Revalidates a reserved non-enrollment transaction before a fresh protocol effect.
requireCompatibleEnrollmentProfile(EnrollmentProfile) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Rejects a policy replacement that would strand an active directory.
requireCurrent(String) - Method in class zeroecho.pki.server.ApprovalService: Returns the current record, applying durable expiry when necessary.
requireCurrent(String) - Method in class zeroecho.pki.server.BreakGlassService: Returns a current record, durably applying expiry when observed.
requireCurrent(EnrollmentEndpoint) - Method in class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry: Revalidates the exact endpoint and current active enrollment policy at admission.
required() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Returns the value of the required record component.
REQUIRED - Enum constant in enum class zeroecho.pki.server.OcspResponderService.NoncePolicy: Requires and echoes a nonce.
requireDisclosure(PkiId) - Method in class zeroecho.pki.server.ServerControlStore: Returns one disclosure record.
requiredRoleTemplateIds() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns the value of the requiredRoleTemplateIds record component.
requiredSanDomains() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns the value of the requiredSanDomains record component.
requireGrant(String) - Method in class zeroecho.pki.server.ServerControlStore: Returns one direct grant.
requirePrincipal(String) - Method in class zeroecho.pki.server.ServerControlStore: Returns one principal or fails without revealing storage details.
requireProfileId(String) - Static method in interface zeroecho.pki.server.enrollment.EnrollmentEndpoint: Validates an enrollment-profile reference without resolving its current policy.
requireRepositoryAlias(String) - Method in class zeroecho.pki.server.ServerControlStore: Returns one exact repository alias record.
requireRetainedCredential(String) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Validates that an exact immutable credential set remains provisioned for a retained transaction.
requireRetainedCredential(String, String, String, String) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Validates the exact immutable scope of retained credential metadata without requiring current certificate validity or acquiring a private-key lease.
requireRetainedCredential(EnrollmentRuntimeConfiguration.Protocol, String, String, String, String) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Checks retained credential scope and its exact protocol capability without acquiring a lease or requiring unexpired signing material.
ReserveBackupUpload(PkiId, long, String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.ReserveBackupUpload: Validates the bounded declaration without allocating archive storage.
reserveCmp(CmpTransaction.Frozen) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Reserves one logical transaction and its full response capacity before any domain side effect.
resolve(String) - Method in interface zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKeyResolver: Resolves one exact KID or fails without revealing another account.
resolve(List) - Method in class zeroecho.pki.server.http.RequestIds: Validates a supplied correlation identifier or generates a random one.
resolveDirectoryProfilePrecondition(AcmeService.DirectoryRegistration) - Method in class zeroecho.pki.server.acme.AcmeService: Resolves the active profile precondition that must be bound into approval.
resolvedPrincipalId() - Method in interface zeroecho.pki.server.spi.PkiServerAuthenticationResult: Returns the resolved end-client principal when authentication succeeded.
resolveTls(PkiServerConfiguration, ClassLoader) - Static method in class zeroecho.pki.server.http.PkiHttpsTransport: Resolves the explicitly selected TLS provider before realm resources are opened.
resource() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns the value of the resource record component.
resource() - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Returns the value of the resource record component.
resource() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the resource record component.
Resource(Permission.ResourceType, Permission.Scope, Optional, Optional) - Constructor for record class zeroecho.pki.server.Permission.Resource: Validates the finite resource reference.
RESOURCE - Static variable in class zeroecho.pki.server.RoleTemplateCatalog: Classpath resource holding the normative role templates.
resourceType() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns the value of the resourceType record component.
resourceType() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the resourceType record component.
Responder(String, String, RealmId, PkiId, PkiId, OcspResponderService.SigningMode, PkiId, KeyRef, PkiId, String, Optional, String, OcspResponseService.ResponderId, Duration, OcspResponderService.NoncePolicy, int, Set, int, int, Duration, OcspResponderService.RequestAuthenticationMode, Optional, OcspResponderService.State, Instant, String) - Constructor for record class zeroecho.pki.server.OcspResponderService.Responder: Validates all finite immutable dependencies and the record commitment.
responderCredentialId() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the responderCredentialId record component.
responderCredentialId() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the responderCredentialId record component.
responderId() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the responderId record component.
responderId() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the responderId record component.
responderId() - Method in record class zeroecho.pki.server.Permission.Scope: Returns the value of the responderId record component.
responderId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectOcspResponder: Returns the value of the responderId record component.
responderId() - Method in record class zeroecho.pki.server.ServerControlOperation.SetOcspResponderActive: Returns the value of the responderId record component.
responderIdForm() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the responderIdForm record component.
responderIdForm() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the responderIdForm record component.
response() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction: Returns the value of the response record component.
Response(String, String, int, String, String, Optional, CmpTransaction.Confirmation, boolean) - Constructor for record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Validates bounded metadata without exposing wire bytes in diagnostics.
responseChain() - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime.CredentialLease: Returns response leaf followed by its exact authority chain.
responseSha256() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns the value of the responseSha256 record component.
responseValidity() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the responseValidity record component.
responseValidity() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the responseValidity record component.
RESTORE - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Restore operation.
RESTORE - Enum constant in enum class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand.Action: Stages a verified archive with high-risk approval.
RESTORE - Static variable in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Stage backup restoration operation identity.
RESTORE_EXECUTE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Executes a restore.
RESTRICTED - Enum constant in enum class zeroecho.pki.server.DisclosureService.Policy: Only explicitly authorized administrators may retrieve content.
result() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the result record component.
Result(boolean, String, Instant, Instant) - Constructor for record class zeroecho.pki.server.spi.AcmeChallengeProvider.Result: Validates the safe evidence draft.
Result(boolean, String, Instant, Instant) - Constructor for record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Result: Validates the safe evidence draft.
resultClassification() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the resultClassification record component.
retryAfter() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Returns the value of the retryAfter record component.
retryAfterSeconds() - Method in class zeroecho.pki.server.est.EstServerKeygenResponse: Returns the polling delay.
retryAfterSeconds() - Method in record class zeroecho.pki.server.est.EstService.EnrollmentResult: Returns the value of the retryAfterSeconds record component.
revision() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Snapshot: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns the value of the revision record component.
REVOCATION - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Revocation state.
REVOCATION_AUDIT_PROJECTION - Static variable in class zeroecho.pki.server.ServerControlStore: Stable namespace for non-authoritative revocation-audit projection state.
REVOCATION_HISTORY_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads revocation history.
revocationPolicy() - Method in record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Returns the value of the revocationPolicy record component.
revoke(String, String) - Method in class zeroecho.pki.server.BreakGlassService: Revokes an active grant.
RevokeBreakGlass(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RevokeBreakGlass: Validates the operation's immutable input.
revokeCapability(String, String) - Method in class zeroecho.pki.server.DisclosureService: Revokes a capability without revealing or recovering its raw token.
RevokeCapability(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RevokeCapability: Validates the operation's immutable input.
revokeCertificate(String, String, AcmeState.Directory, byte[], RevocationReason, String) - Method in class zeroecho.pki.server.acme.AcmeService: Revokes one certificate issued to the authenticated account through the bound directory.
revoked() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns the value of the revoked record component.
REVOKED - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.AccountStatus: Account authority was revoked.
REVOKED - Enum constant in enum class zeroecho.pki.server.BreakGlassService.State: Emergency grant was explicitly revoked.
revokedCount - Variable in class zeroecho.pki.server.jfr.CrlGenerationEvent: Number of revoked certificate entries included in the status object.
RevokeGrant(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RevokeGrant: Validates the operation's immutable input.
RevokeRoleAssignment(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.RevokeRoleAssignment: Validates the operation's immutable input.
RFC9440 - Enum constant in enum class zeroecho.pki.server.ForwardedCertificateFormat: RFC 9440 structured-field byte-sequence headers.
ROLE - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Role definition.
ROLE_MANAGE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Manages role definitions.
RoleTemplateCatalog - Class in zeroecho.pki.server: Strict deterministic loader for versioned built-in role templates.
RoleTemplateCatalog.Assignment - Record Class in zeroecho.pki.server: Persistable scoped role assignment; the template itself grants nothing.
RoleTemplateCatalog.Template - Record Class in zeroecho.pki.server: Immutable role template that has no authority until scoped assignment.
roleTemplates() - Method in class zeroecho.pki.server.ServerRealmContext: Returns immutable built-in role template catalog.
rolloverAccount(String, String, String, byte[]) - Method in class zeroecho.pki.server.acme.AcmeService: Atomically replaces one account key after exact old-record authentication.
rootCa() - Method in record class zeroecho.pki.server.DisclosureService.Defaults: Returns the value of the rootCa record component.
rsaMaximumModulusBits() - Method in record class zeroecho.pki.server.CredentialConfirmationProofPolicy: Returns the value of the rsaMaximumModulusBits record component.
runtime() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the runtime record component.
RuntimeCapabilities(Optional, Optional, Optional) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.RuntimeCapabilities: Validates external references without resolving secret values.

S

safeAttributes() - Method in record class zeroecho.pki.server.Permission.Context: Returns the value of the safeAttributes record component.
safeMetadata() - Method in record class zeroecho.pki.server.AuditorViews.FullMetadata: Returns the value of the safeMetadata record component.
safeResult() - Method in class zeroecho.pki.server.ServerControlOperationOutcome.OneTimeSensitive: Returns safe non-secret metadata.
sameCredential(CertificateIdentityEvidence) - Method in record class zeroecho.pki.server.CertificateIdentityEvidence: Compares exact certificates or mathematical keys within the same realm.
SCEP - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Protocol: Simple Certificate Enrollment Protocol.
SCEP - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Protocol: SCEP RA encryption and response signature.
SCEP - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Protocol: CMS-protected certificate enrollment.
SCEP_ENDPOINT - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: SCEP endpoint configuration.
SCEP_ENDPOINT_ADMINISTER - Enum constant in enum class zeroecho.pki.server.Permission.Action: Administers a SCEP endpoint.
SCEP_ENDPOINT_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads a SCEP endpoint.
scepAddress() - Method in class zeroecho.pki.server.PkiHttpsServer: Returns the actual SCEP listener address when enabled.
ScepEndpoint - Record Class in zeroecho.pki.server.scep: Immutable binding that maps a SCEP URL label to a CA authority, an issuance profile, and a hashed challenge password.
ScepEndpoint(String, String, String, String, String) - Constructor for record class zeroecho.pki.server.scep.ScepEndpoint: Validates all fields.
scepListener() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the scepListener record component.
ScepListener(String, InetAddress, int, ProviderConfig, PkiServerConfiguration.Execution, int, int) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Validates the SCEP listener configuration.
ScepProtocolException - Exception Class in zeroecho.pki.server.scep: Signals a SCEP protocol-level error that maps to an HTTP error response.
ScepProtocolException(int, String) - Constructor for exception class zeroecho.pki.server.scep.ScepProtocolException: Creates a SCEP protocol exception.
ScepProtocolException(int, String, Throwable) - Constructor for exception class zeroecho.pki.server.scep.ScepProtocolException: Creates a SCEP protocol exception with a cause.
ScepProtocolException(String) - Constructor for exception class zeroecho.pki.server.scep.ScepProtocolException: Creates a SCEP protocol exception with status 500.
ScepProtocolException(String, Throwable) - Constructor for exception class zeroecho.pki.server.scep.ScepProtocolException: Creates a SCEP protocol exception with status 500 and a cause.
ScepService - Class in zeroecho.pki.server.scep: SCEP enrollment adapter with provisioned authority-scoped RA custody and durable enrollment continuation.
ScepService(ServerRealmContext) - Constructor for class zeroecho.pki.server.scep.ScepService: Creates a stateless adapter.
ScepService.CaCertificateResponse - Record Class in zeroecho.pki.server.scep: Public RA advertisement with explicit media type.
ScepTransport - Class in zeroecho.pki.server.http: Lifecycle owner for the optional SCEP RFC 8894 HTTPS listener.
scope() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the scope record component.
scope() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the scope record component.
scope() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the scope record component.
scope() - Method in record class zeroecho.pki.server.Permission.Grant: Returns the value of the scope record component.
scope() - Method in record class zeroecho.pki.server.Permission.Resource: Returns the value of the scope record component.
scope() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Returns the value of the scope record component.
scope() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.TransportSemantics: Returns the value of the scope record component.
scope(EnrollmentTransaction) - Static method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Derives administrative scope solely from the retained authoritative request.
Scope(RealmId, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.server.Permission.Scope: Creates a scope without an OCSP responder dimension.
Scope(RealmId, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.server.Permission.Scope: Validates the exact finite scope.
SctVerifier - Class in zeroecho.pki.server.ct: Verifies Signed Certificate Timestamps collected from CT logs before they may be embedded in a final certificate.
SearchAudit(AuditQuery) - Constructor for record class zeroecho.pki.server.ServerControlOperation.SearchAudit: Validates the operation's immutable input.
secret() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmIdentity: Returns the value of the secret record component.
security() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Entry: Returns the value of the security record component.
SECURITY_PRINCIPAL - Enum constant in enum class zeroecho.pki.server.DisclosureService.Owner.OwnerType: Administrative security principal.
securityDescriptors() - Method in class zeroecho.pki.server.schema.OperationDescriptorCatalog: Returns unchanged security-record projections.
Security note - Section in class zeroecho.pki.server.ct.HttpCtLogClient
SecurityPrincipal - Record Class in zeroecho.pki.server: Transport-independent authenticated-identity target used by authorization.
SecurityPrincipal(String, SecurityPrincipal.Type, String, Optional, Map, boolean) - Constructor for record class zeroecho.pki.server.SecurityPrincipal: Validates and snapshots finite safe principal metadata.
SecurityPrincipal.Type - Enum Class in zeroecho.pki.server: Closed principal types.
selectCapabilities(PkiId, Optional, int, CancellationSignal) - Method in class zeroecho.pki.server.ServerControlStore: Selects capabilities for one already-authorized object in ascending capability-ID order.
senderKid() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmIdentity: Returns the value of the senderKid record component.
senderNonce() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns the value of the senderNonce record component.
sensitiveLeaf() - Method in record class zeroecho.pki.server.DisclosureService.Defaults: Returns the value of the sensitiveLeaf record component.
serialize(List) - Static method in class zeroecho.pki.server.schema.GenerateOperationSchema: Serializes an operation schema list to a UTF-8 JSON byte array.
SERVER_CONFIGURATION - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Server configuration.
SERVER_CONFIGURATION_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads server configuration.
SERVER_CONFIGURATION_UPDATE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Updates server configuration.
SERVER_CONTROL_OPERATION - Enum constant in enum class zeroecho.pki.server.OperationSecurityDescriptors.Family: Operation belongs to the server-control family.
SERVER_HEALTH_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads server health.
SERVER_KEYGEN - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Operation: Issue for an attached server-generated encrypted delivery artifact.
ServerControlOperation - Interface in zeroecho.pki.server: Closed transport-neutral server-control administration operation hierarchy.
ServerControlOperation.AcmeDirectoryProfilePrecondition - Record Class in zeroecho.pki.server: Server-resolved exact profile precondition bound into approval canonicalization.
ServerControlOperation.ActivateBreakGlass - Record Class in zeroecho.pki.server: Activation of one already-created approved emergency grant.
ServerControlOperation.ActivateEnrollmentProfile - Record Class in zeroecho.pki.server: Activates a suspended enrollment profile.
ServerControlOperation.BackupArtifactCommand - Record Class in zeroecho.pki.server: Requests an action on an owned opaque archive or restore workflow.
ServerControlOperation.BackupArtifactCommand.Action - Enum Class in zeroecho.pki.server: Closed workflow actions and their stable operation identities.
ServerControlOperation.CancelApproval - Record Class in zeroecho.pki.server: Approval cancellation.
ServerControlOperation.ConfigurationChoices - Record Class in zeroecho.pki.server: Lists safe configured metadata and one page of known key references.
ServerControlOperation.CreateBreakGlass - Record Class in zeroecho.pki.server: Independently approved emergency grant creation.
ServerControlOperation.CreateGrant - Record Class in zeroecho.pki.server: Direct grant creation.
ServerControlOperation.CreateRoleAssignment - Record Class in zeroecho.pki.server: Scoped assignment creation.
ServerControlOperation.DeactivateAcmeAccount - Record Class in zeroecho.pki.server: Durably deactivates one ACME account without deleting history.
ServerControlOperation.DecideApproval - Record Class in zeroecho.pki.server: Approval or rejection decision.
ServerControlOperation.DecideEnrollmentRequest - Record Class in zeroecho.pki.server: Independently approves or rejects the exact record reviewed by an administrator.
ServerControlOperation.DeregisterCmpEndpoint - Record Class in zeroecho.pki.server: De-registers a CMP endpoint by label.
ServerControlOperation.DeregisterEstEndpoint - Record Class in zeroecho.pki.server: De-registers an EST endpoint by label.
ServerControlOperation.DeregisterScepEndpoint - Record Class in zeroecho.pki.server: De-registers a SCEP endpoint by label.
ServerControlOperation.EnrollCredentialPublication - Record Class in zeroecho.pki.server: Explicit post-issuance enrollment into confirmation and disclosure.
ServerControlOperation.EvaluateAuthorization - Record Class in zeroecho.pki.server: Side-effect-free authorization simulation.
ServerControlOperation.ExecuteRestore - Record Class in zeroecho.pki.server: Executes a restore from a backup artifact.
ServerControlOperation.ExportBackup - Record Class in zeroecho.pki.server: Exports a backup of PKI state, excluding private keys.
ServerControlOperation.ExportBackupStream - Record Class in zeroecho.pki.server: Creates a file-backed export for a subsequent authorized download.
ServerControlOperation.InspectAcmeAccount - Record Class in zeroecho.pki.server: Inspects one protocol-scoped ACME account.
ServerControlOperation.InspectAcmeDirectory - Record Class in zeroecho.pki.server: Inspects one exact ACME directory revision.
ServerControlOperation.InspectApproval - Record Class in zeroecho.pki.server: Approval lookup.
ServerControlOperation.InspectAuditView - Record Class in zeroecho.pki.server: Existing safe auditor projection over one server-control object.
ServerControlOperation.InspectBreakGlass - Record Class in zeroecho.pki.server: Break-glass lookup.
ServerControlOperation.InspectCmpEndpoint - Record Class in zeroecho.pki.server: Inspects one registered CMP endpoint.
ServerControlOperation.InspectDisclosure - Record Class in zeroecho.pki.server: Disclosure metadata lookup.
ServerControlOperation.InspectEnrollmentProfile - Record Class in zeroecho.pki.server: Inspects one enrollment profile.
ServerControlOperation.InspectEnrollmentRequest - Record Class in zeroecho.pki.server: Inspects a durable protocol request using its authoritative persisted scope.
ServerControlOperation.InspectEstEndpoint - Record Class in zeroecho.pki.server: Inspects one registered EST endpoint.
ServerControlOperation.InspectGrant - Record Class in zeroecho.pki.server: Direct grant lookup.
ServerControlOperation.InspectOcspResponder - Record Class in zeroecho.pki.server: Inspects one exact OCSP responder binding.
ServerControlOperation.InspectPrincipal - Record Class in zeroecho.pki.server: Principal lookup.
ServerControlOperation.InspectRepositoryAlias - Record Class in zeroecho.pki.server: Exact repository alias inspection.
ServerControlOperation.InspectRoleAssignment - Record Class in zeroecho.pki.server: Scoped assignment lookup.
ServerControlOperation.InspectRoleTemplate - Record Class in zeroecho.pki.server: Immutable role-template lookup.
ServerControlOperation.InspectScepEndpoint - Record Class in zeroecho.pki.server: Inspects one registered SCEP endpoint.
ServerControlOperation.IssueCapability - Record Class in zeroecho.pki.server: One-time unlisted retrieval capability issuance.
ServerControlOperation.ListAcmeAccounts - Record Class in zeroecho.pki.server: Lists a bounded account page without contact PII.
ServerControlOperation.ListAcmeDirectories - Record Class in zeroecho.pki.server: Lists a bounded page of ACME directory revisions.
ServerControlOperation.ListApprovals - Record Class in zeroecho.pki.server: Bounded approval page.
ServerControlOperation.ListBreakGlass - Record Class in zeroecho.pki.server: Bounded break-glass page.
ServerControlOperation.ListCapabilities - Record Class in zeroecho.pki.server: Lists non-bearer capabilities for one authoritative disclosure object.
ServerControlOperation.ListCmpEndpoints - Record Class in zeroecho.pki.server: Lists registered CMP endpoints.
ServerControlOperation.ListEnrollmentProfiles - Record Class in zeroecho.pki.server: Lists enrollment profiles.
ServerControlOperation.ListEnrollmentRequests - Record Class in zeroecho.pki.server: Lists retained enrollment requests within the authorized scope.
ServerControlOperation.ListEstEndpoints - Record Class in zeroecho.pki.server: Lists registered EST endpoints.
ServerControlOperation.ListGrants - Record Class in zeroecho.pki.server: Bounded direct-grant page.
ServerControlOperation.ListOcspResponders - Record Class in zeroecho.pki.server: Lists a bounded OCSP responder page.
ServerControlOperation.ListPrincipals - Record Class in zeroecho.pki.server: Bounded principal page.
ServerControlOperation.ListRepositoryAliases - Record Class in zeroecho.pki.server: Bounded repository alias page.
ServerControlOperation.ListRoleAssignments - Record Class in zeroecho.pki.server: Bounded assignment page.
ServerControlOperation.ListRoleTemplates - Record Class in zeroecho.pki.server: Immutable role-template list.
ServerControlOperation.ListScepEndpoints - Record Class in zeroecho.pki.server: Lists registered SCEP endpoints.
ServerControlOperation.RegisterAcmeDirectory - Record Class in zeroecho.pki.server: Registers one immutable inactive ACME directory revision.
ServerControlOperation.RegisterCmpEndpoint - Record Class in zeroecho.pki.server: Registers a CMP RFC 4210/9480 endpoint.
ServerControlOperation.RegisterEnrollmentProfile - Record Class in zeroecho.pki.server: Registers a new enrollment profile.
ServerControlOperation.RegisterEstEndpoint - Record Class in zeroecho.pki.server: Registers an EST RFC 7030 endpoint.
ServerControlOperation.RegisterOcspResponder - Record Class in zeroecho.pki.server: Registers one exact inactive OCSP responder binding.
ServerControlOperation.RegisterPrincipal - Record Class in zeroecho.pki.server: Principal registration.
ServerControlOperation.RegisterScepEndpoint - Record Class in zeroecho.pki.server: Registers a SCEP RFC 8894 endpoint.
ServerControlOperation.RemoveRepositoryAlias - Record Class in zeroecho.pki.server: Durable repository alias removal without target mutation.
ServerControlOperation.RequestApproval - Record Class in zeroecho.pki.server: Exact future-operation approval request.
ServerControlOperation.ReserveBackupUpload - Record Class in zeroecho.pki.server: Reserves bounded storage for a streaming archive upload.
ServerControlOperation.RevokeBreakGlass - Record Class in zeroecho.pki.server: Break-glass revocation.
ServerControlOperation.RevokeCapability - Record Class in zeroecho.pki.server: Capability revocation by non-bearer record identity.
ServerControlOperation.RevokeGrant - Record Class in zeroecho.pki.server: Durable direct-grant revocation.
ServerControlOperation.RevokeRoleAssignment - Record Class in zeroecho.pki.server: Durable assignment revocation.
ServerControlOperation.SearchAudit - Record Class in zeroecho.pki.server: Bounded audit-log search over the packaged admin API; preserves tamper-evidence (read-only).
ServerControlOperation.SetAcmeDirectoryActive - Record Class in zeroecho.pki.server: Activates or deactivates one exact ACME directory revision.
ServerControlOperation.SetDisclosure - Record Class in zeroecho.pki.server: Disclosure-only state transition.
ServerControlOperation.SetOcspResponderActive - Record Class in zeroecho.pki.server: Activates or deactivates one exact responder.
ServerControlOperation.SetPrincipalEnabled - Record Class in zeroecho.pki.server: Principal enablement transition.
ServerControlOperation.SetRepositoryAlias - Record Class in zeroecho.pki.server: Exact CRL or chain alias publication with expected-current protection.
ServerControlOperation.SuspendEnrollmentProfile - Record Class in zeroecho.pki.server: Suspends an active enrollment profile.
ServerControlOperation.UpdateEnrollmentProfile - Record Class in zeroecho.pki.server: Updates an existing enrollment profile (replaces all mutable fields).
ServerControlOperation.VerifyAuditIntegrity - Record Class in zeroecho.pki.server: Verifies the audit-log hash chain, optionally against a trusted head anchor.
ServerControlOperation.VerifyBackup - Record Class in zeroecho.pki.server: Verifies structural integrity and completeness of a backup artifact.
ServerControlOperationExecutor - Class in zeroecho.pki.server: Sole closed dispatcher for transport-neutral server-control operations.
ServerControlOperationExecutor(PkiOperationExecutor, RealmId, AuthorityExposurePolicy, ServerControlStore, RoleTemplateCatalog, AuthorizationEngine, ApprovalService, BreakGlassService, DisclosureService, CredentialPublicationGate, AuditorViews, Optional, OperationSecurityDescriptors, Map) - Constructor for class zeroecho.pki.server.ServerControlOperationExecutor: Creates the one control dispatcher over existing durable authorities.
ServerControlOperationOutcome - Interface in zeroecho.pki.server: Closed server-control result with explicit one-time-sensitive handling.
ServerControlOperationOutcome.Classification - Enum Class in zeroecho.pki.server: Response handling classification.
ServerControlOperationOutcome.OneTimeSensitive - Class in zeroecho.pki.server: Single-consumption capability delivery result, never a PKI operation value.
ServerControlOperationOutcome.Ordinary - Record Class in zeroecho.pki.server: Ordinary safe replayable operation result.
ServerControlStore - Class in zeroecho.pki.server: Dedicated durable authority for finite server security and disclosure control metadata.
ServerControlStore(TransactionalMetadataStore) - Constructor for class zeroecho.pki.server.ServerControlStore: Creates a server-control adapter over one exclusively owned metadata store.
ServerControlStore.Page<T> - Record Class in zeroecho.pki.server: Finite page returned without materializing the complete namespace.
ServerControlStore.ProtocolCursor - Class in zeroecho.pki.server: Thread-confined, closeable iterator over one immutable protocol snapshot.
ServerControlStore.ProtocolMutation - Record Class in zeroecho.pki.server: One compare-and-set mutation participating in an atomic protocol-state change.
ServerControlStore.ProtocolRecord - Record Class in zeroecho.pki.server: Strict opaque protocol payload framed by the server-control authority.
ServerControlStore.RealmRecord - Record Class in zeroecho.pki.server: Durable realm-control identity and commitments.
serverkeygen(EstEndpoint, byte[], X509Certificate) - Method in class zeroecho.pki.server.est.EstService: Performs server-key generation through durable encrypted-artifact admission.
serverkeygen(EstEndpoint, byte[], X509Certificate, CancellationSignal) - Method in class zeroecho.pki.server.est.EstService: Freezes the authenticated original template and reserves capacity before generating a key.
serverName() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the serverName record component.
ServerOperationGateway - Class in zeroecho.pki.server: In-process transport-neutral security gateway for existing typed PKI operations.
ServerOperationGateway(RealmId, AuthorityExposurePolicy, ServerControlStore, RoleTemplateCatalog, AuthorizationEngine, ApprovalService, BreakGlassService, DisclosureService, CredentialPublicationGate, AuditorViews, Optional, OperationSecurityDescriptors, PkiOperationExecutor, ServerOperationGateway.SigningExecutor, PkiResourceScopeResolver, Map, Function, Clock, AuditSink, Runnable) - Constructor for class zeroecho.pki.server.ServerOperationGateway: Creates one gateway whose reconciliation is driven only by periodic polling.
ServerOperationGateway(RealmId, AuthorityExposurePolicy, ServerControlStore, RoleTemplateCatalog, AuthorizationEngine, ApprovalService, BreakGlassService, DisclosureService, CredentialPublicationGate, AuditorViews, Optional, OperationSecurityDescriptors, PkiOperationExecutor, ServerOperationGateway.SigningExecutor, PkiResourceScopeResolver, Map, Function, Clock, AuditSink, Runnable, Runnable) - Constructor for class zeroecho.pki.server.ServerOperationGateway: Creates one gateway bound to one realm and one session executor.
ServerOperationGateway.Outcome - Interface in zeroecho.pki.server: Closed gateway outcome preserving typed backend results.
ServerOperationGateway.Outcome.ApprovalRequired - Record Class in zeroecho.pki.server: High-risk operation requires a separately created durable approval.
ServerOperationGateway.Outcome.ControlExecuted - Record Class in zeroecho.pki.server: Successfully admitted server-control result.
ServerOperationGateway.Outcome.Denied - Record Class in zeroecho.pki.server: Safe denial without protected-object existence information.
ServerOperationGateway.Outcome.Executed - Record Class in zeroecho.pki.server: Successfully admitted operation and exact backend outcome.
ServerOperationGateway.Request - Record Class in zeroecho.pki.server: Complete transport-neutral request admission input.
ServerOperationGateway.SigningExecutor - Interface in zeroecho.pki.server: Executes one already-authorized signing operation through semantic admission.
ServerRealmConfiguration - Record Class in zeroecho.pki.server: Immutable transport-neutral configuration for one server realm.
ServerRealmConfiguration(RealmId, String, CredentialConfirmationProofPolicy, PkiSessionConfiguration, AuthorityExposurePolicy, String, String, String, String, DisclosureService.Defaults, Path, MetadataStoreId, Map) - Constructor for record class zeroecho.pki.server.ServerRealmConfiguration: Validates and snapshots the complete configuration before allocation.
ServerRealmContext - Class in zeroecho.pki.server: Lifecycle owner for one server realm, one long-lived PKI session, and one dedicated durable server-control authority.
ServerRealmContext.State - Enum Class in zeroecho.pki.server: Closed lifecycle states.
ServerRuntime - Class in zeroecho.pki.server.http: Centralized owner of all bounded server-created threads, queues and permits.
ServerRuntime.CancellableOperation<T> - Interface in zeroecho.pki.server.http: Operation executed on this runtime's bounded worker lane.
service() - Method in class zeroecho.pki.server.http.CmpTransport: Returns the CMP service for administrative endpoint management.
service() - Method in class zeroecho.pki.server.http.EstTransport: Returns the EST service for administrative endpoint management.
service() - Method in class zeroecho.pki.server.http.ScepTransport: Returns the SCEP service for administrative endpoint management.
SERVICE - Enum constant in enum class zeroecho.pki.server.SecurityPrincipal.Type: Non-human authenticated service identity.
session() - Method in class zeroecho.pki.server.ServerRealmContext: Returns the one long-lived PKI session.
SetAcmeDirectoryActive(String, boolean) - Constructor for record class zeroecho.pki.server.ServerControlOperation.SetAcmeDirectoryActive: Validates the operation's immutable input.
setActive(String, boolean) - Method in class zeroecho.pki.server.OcspResponderService: Atomically changes only responder activation after dependency revalidation.
setCurrentChain(PkiId, PkiId, PkiId, Optional, String) - Method in class zeroecho.pki.server.RepositoryAliasService: Atomically publishes one exact current public chain path.
setCurrentCrl(PkiId, PkiId, Optional, String) - Method in class zeroecho.pki.server.RepositoryAliasService: Atomically publishes a validated current-CRL alias.
setCurrentDeltaCrl(PkiId, PkiId, Optional, String) - Method in class zeroecho.pki.server.RepositoryAliasService: Atomically publishes a validated current-delta-CRL alias.
SetDisclosure(PkiId, DisclosureService.Policy) - Constructor for record class zeroecho.pki.server.ServerControlOperation.SetDisclosure: Validates the operation's immutable input.
SetOcspResponderActive(String, boolean) - Constructor for record class zeroecho.pki.server.ServerControlOperation.SetOcspResponderActive: Validates the operation's immutable input.
setPrincipalEnabled(String, boolean, String) - Method in class zeroecho.pki.server.ServerRealmContext: Changes only the enabled state of an existing principal.
SetPrincipalEnabled(String, boolean) - Constructor for record class zeroecho.pki.server.ServerControlOperation.SetPrincipalEnabled: Validates the operation's immutable input.
SetRepositoryAlias(PkiId, RepositoryAliasService.Type, PkiId, Optional, Optional) - Constructor for record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Validates the operation's immutable input.
setState(String, EnrollmentProfileState) - Method in class zeroecho.pki.server.enrollment.EnrollmentProfileService: Transitions the profile to the given state.
sha256() - Method in record class zeroecho.pki.server.ServerControlOperation.ReserveBackupUpload: Returns the value of the sha256 record component.
SHA256 - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmDigest: SHA-256.
SHA256_CERTIFICATE_COMMITMENT - Enum constant in enum class zeroecho.pki.server.OcspResponderService.PrincipalMappingType: Maps the SHA-256 commitment of the requester certificate.
SHA256_SPKI_COMMITMENT - Enum constant in enum class zeroecho.pki.server.OcspResponderService.PrincipalMappingType: Maps the SHA-256 commitment of requester subject-public-key information.
SHA384 - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmDigest: SHA-384.
SHA512 - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmDigest: SHA-512.
SHARED_SECRET_MAC - Enum constant in enum class zeroecho.pki.server.cmp.CmpProtectionPolicy: Shared-secret MAC protection (passwordBasedMac).
shutdown(Duration) - Method in class zeroecho.pki.server.http.AcmeTransport: Stops listener admission and all separately bounded ACME lanes.
shutdown(Duration) - Method in class zeroecho.pki.server.http.CmpTransport: Stops listener admission and the CMP lane executors.
shutdown(Duration) - Method in class zeroecho.pki.server.http.EstTransport: Stops listener admission and the EST lane executors.
shutdown(Duration) - Method in class zeroecho.pki.server.http.PkiHttpsTransport: Stops new exchanges, grants admitted exchanges a finite drain period and then closes all bounded executors.
shutdown(Duration) - Method in class zeroecho.pki.server.http.PublicRepositoryTransport: Stops the listener and its independent bounded resources.
shutdown(Duration) - Method in class zeroecho.pki.server.http.ScepTransport: Stops listener admission and the SCEP lane executors.
shutdownHook(Runnable) - Method in class zeroecho.pki.server.http.PkiHttpsTransport: Creates the sole process-shutdown thread through the centralized runtime.
signature() - Method in record class zeroecho.pki.server.OcspRequesterService.SignedRequest: Returns a defensive copy of the request signature.
SIGNATURE_BASED - Enum constant in enum class zeroecho.pki.server.cmp.CmpProtectionPolicy: Signature-based protection using the sender's certificate private key.
signatureAlgorithm() - Method in record class zeroecho.pki.server.OcspRequesterService.SignedRequest: Returns a defensive copy of the signature algorithm identifier DER.
signatureAlgorithm() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the signatureAlgorithm record component.
signatureAlgorithm() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the signatureAlgorithm record component.
signatureBindingCommitment() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the signatureBindingCommitment record component.
signatureBindingCommitment() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the signatureBindingCommitment record component.
signatureBindingId() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the signatureBindingId record component.
signatureBindingId() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the signatureBindingId record component.
signatureBindings() - Method in record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Returns the value of the signatureBindings record component.
SignatureKeyPossessionProofProvider - Class in zeroecho.pki.server.confirmation: Stateless thread-safe provider for the standard ZeroEcho signature key-possession proof suite.
SignatureKeyPossessionProofProvider() - Constructor for class zeroecho.pki.server.confirmation.SignatureKeyPossessionProofProvider: Creates one stateless provider.
SignedRequest(byte[], byte[], byte[], byte[], List) - Constructor for record class zeroecho.pki.server.OcspRequesterService.SignedRequest: Snapshots all security-sensitive input bytes.
signer() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns the value of the signer record component.
Signer(EnrollmentRuntimeConfiguration.KeyReference, List) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Signer: Validates the reference and bounded nonempty chain.
Signing(PkiSigningOperation) - Constructor for record class zeroecho.pki.server.AdministrativeOperation.Signing: Validates the signing input.
SIGNING_OPERATION - Enum constant in enum class zeroecho.pki.server.OperationSecurityDescriptors.Family: Operation uses semantic signing preparation and admission.
signingKeyRef() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the signingKeyRef record component.
signingKeyRef() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the signingKeyRef record component.
signingMode() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns the value of the signingMode record component.
signingMode() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the signingMode record component.
SigningOperationEvent - Class in zeroecho.pki.server.jfr: JFR event emitted for every signing operation submitted to the gateway.
SigningOperationEvent() - Constructor for class zeroecho.pki.server.jfr.SigningOperationEvent: Creates an uncommitted event with default field values; populate fields before committing.
signingOperationId() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the signingOperationId record component.
SigningReconciliation(int, int, Duration, Duration, Duration) - Constructor for record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Validates one reconciliation budget.
simpleenroll(EstEndpoint, byte[], X509Certificate) - Method in class zeroecho.pki.server.est.EstService: Performs EST simpleenroll (RFC 7030 section 4.2): verifies the client CSR, durably admits the request and returns its current approval or issuance outcome.
simpleenroll(EstEndpoint, byte[], X509Certificate, CancellationSignal) - Method in class zeroecho.pki.server.est.EstService: Admits or continues enrollment with cancellation before the durable signing claim.
simplereenroll(EstEndpoint, byte[], X509Certificate) - Method in class zeroecho.pki.server.est.EstService: Performs EST simplereenroll (RFC 7030 section 4.2.2): renews the client's certificate after proving the authoritative predecessor identity and satisfying the frozen approval and proof policy.
simplereenroll(EstEndpoint, byte[], X509Certificate, CancellationSignal) - Method in class zeroecho.pki.server.est.EstService: Admits or continues exact-identity renewal with pre-claim cancellation.
Snapshot(EnrollmentEndpoint, long, boolean, String) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Snapshot: Validates snapshot metadata.
Snapshot(RealmId, Set) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases.Snapshot: Validates and snapshots the bounded alias set in O(A log A) time and O(A) memory.
socketAddress() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the listener socket address.
socketAddress() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns the listener socket address.
socketAddress() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns the listener socket address.
socketAddress() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Returns the listener socket address without DNS resolution.
socketAddress() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the public listener socket address without DNS resolution.
socketAddress() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns the listener socket address.
source() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the source record component.
source() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the source record component.
Source(PkiId, Permission.ResourceType, Permission.Scope, String, Instant, String, Optional, String, boolean, int, Optional, List, Optional) - Constructor for record class zeroecho.pki.server.AuditorViews.Source: Validates and snapshots finite source data.
Source(EnrollmentTransaction.Protocol, String, String, long, String, String, String, Optional) - Constructor for record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Validates bounded identifiers and immutable selection commitments.
start(PkiServerConfiguration.AcmeListener, ServerRealmContext, Clock, SecureRandom, ClassLoader, BooleanSupplier) - Static method in class zeroecho.pki.server.http.AcmeTransport: Starts one ACME listener over the lifecycle-owned realm and PKI session.
start(PkiServerConfiguration.AcmeListener, ServerRealmContext, Clock, SecureRandom, ClassLoader, BooleanSupplier, Runnable) - Static method in class zeroecho.pki.server.http.AcmeTransport: Starts one ACME listener with a payload-free post-commit reconciliation wake callback.
start(PkiServerConfiguration.CmpListener, ServerRealmContext, SecureRandom, ClassLoader, BooleanSupplier) - Static method in class zeroecho.pki.server.http.CmpTransport: Starts one CMP listener over the lifecycle-owned realm and PKI session.
start(PkiServerConfiguration.EstListener, ServerRealmContext, SecureRandom, ClassLoader, BooleanSupplier) - Static method in class zeroecho.pki.server.http.EstTransport: Starts one EST listener over the lifecycle-owned realm and PKI session.
start(PkiServerConfiguration.PublicListener, ServerRealmContext, AdministrativeAuthenticator, Clock, SecureRandom, ClassLoader, BooleanSupplier) - Static method in class zeroecho.pki.server.http.PublicRepositoryTransport: Starts one separately bounded public listener over the shared realm.
start(PkiServerConfiguration.ScepListener, ServerRealmContext, SecureRandom, ClassLoader, BooleanSupplier) - Static method in class zeroecho.pki.server.http.ScepTransport: Starts one SCEP listener over the lifecycle-owned realm and PKI session.
start(PkiServerConfiguration, PkiSessionRuntimeDependencies) - Static method in class zeroecho.pki.server.PkiHttpsServer: Starts one production HTTPS server using explicitly configured capabilities.
start(PkiServerConfiguration, PkiSessionRuntimeDependencies, Optional) - Static method in class zeroecho.pki.server.PkiHttpsServer: Starts the server with optional, explicitly budgeted backup transfer.
start(PkiServerConfiguration, PkiSessionRuntimeDependencies, Optional, Optional) - Static method in class zeroecho.pki.server.PkiHttpsServer: Starts a server with explicit independent backup and enrollment capabilities.
start(PkiServerConfiguration, ServerRealmContext, PkiServerAuthenticator, Clock, SecureRandom, ClassLoader, BooleanSupplier) - Static method in class zeroecho.pki.server.http.PkiHttpsTransport: Opens and starts one strictly mutual-TLS listener.
STARTING - Enum constant in enum class zeroecho.pki.server.PkiHttpsServer.State: Initializing realm and listener resources.
startResolved(PkiServerConfiguration, ServerRealmContext, PkiServerAuthenticator, Clock, SecureRandom, SSLContext, BooleanSupplier) - Static method in class zeroecho.pki.server.http.PkiHttpsTransport: Starts a listener using a TLS context resolved before realm construction.
state() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns the value of the state record component.
state() - Method in class zeroecho.pki.server.PkiHttpsServer: Returns the current lifecycle state.
state() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Returns the value of the state record component.
state() - Method in class zeroecho.pki.server.ServerRealmContext: Returns current lifecycle state.
status() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns the value of the status record component.
status() - Method in class zeroecho.pki.server.est.EstServerKeygenResponse: Returns the protocol outcome.
status() - Method in record class zeroecho.pki.server.est.EstService.EnrollmentResult: Returns the value of the status record component.
STATUS - Enum constant in enum class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand.Action: Reads a retained restore outcome, including after archive expiry.
STATUS - Static variable in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Inspect restore workflow operation identity.
STATUS_OBJECT - Enum constant in enum class zeroecho.pki.server.DisclosureService.ObjectType: Other certificate status object.
STATUS_OBJECT - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Generated status object.
STATUS_SCHEDULE - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: Status-generation schedule configuration.
STATUS_SCHEDULE_MANAGE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Manages automatic status-generation schedules.
statusObject(PkiId, PublicRepositoryGateway.Access) - Method in class zeroecho.pki.server.PublicRepositoryGateway: Opens one exact status object after role and disclosure checks.
storeAcmeAccount(Optional, AcmeState.Account) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Creates or atomically replaces an ACME account while retaining all observed requester keys and aliases.
storeCmpResponse(CmpTransaction, byte[], CmpTransaction.Response) - Method in class zeroecho.pki.server.enrollment.EnrollmentCoordinator: Publishes protected bytes, nonce metadata and all fixed slots atomically.
storeGeneratedKeys() - Method in record class zeroecho.pki.server.est.KeygenPolicy: Returns the value of the storeGeneratedKeys record component.
StrictJson - Class in zeroecho.pki.server.http: Strict bounded UTF-8 JSON framing shared by server configuration and HTTP.
subject() - Method in record class zeroecho.pki.server.AuditorViews.Pii: Returns the value of the subject record component.
subjectAlternativeNameCount() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the subjectAlternativeNameCount record component.
subjectAlternativeNameCount() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the subjectAlternativeNameCount record component.
subjectAlternativeNames() - Method in record class zeroecho.pki.server.AuditorViews.Pii: Returns the value of the subjectAlternativeNames record component.
subjectDnPattern() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns the value of the subjectDnPattern record component.
subjectPresent() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the subjectPresent record component.
subjectPresent() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the subjectPresent record component.
subjectPublicKeyInfoSha256() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ClientCertificateMapping: Returns the value of the subjectPublicKeyInfoSha256 record component.
submissionTimeout() - Method in class zeroecho.pki.server.ct.CtIssuanceInterceptor: Returns the maximum time allowed for parallel log submission.
submit(byte[], List, Instant) - Method in interface zeroecho.pki.server.ct.CtLogClient: Submits a pre-certificate and its issuer chain to the CT log and blocks until an SCT is received or the deadline elapses.
submit(byte[], List, Instant) - Method in class zeroecho.pki.server.ct.HttpCtLogClient
submitAll(byte[], List, List, Instant) - Static method in class zeroecho.pki.server.ct.CtLogSubmitter: Submits a pre-certificate to all configured CT logs in parallel using virtual threads and returns all SCTs received before the deadline.
succeeded - Variable in class zeroecho.pki.server.jfr.AcmeChallengeEvent: Whether the challenge validation succeeded.
succeeded - Variable in class zeroecho.pki.server.jfr.CrlGenerationEvent: Whether the generation operation completed without failure.
succeeded - Variable in class zeroecho.pki.server.jfr.SigningOperationEvent: Whether the operation completed without a server-side failure.
SUITE_ID - Static variable in class zeroecho.pki.server.confirmation.SignatureKeyPossessionProofProvider: Canonical version-one signature proof-suite identity.
suiteId() - Method in class zeroecho.pki.server.confirmation.SignatureKeyPossessionProofProvider
summary() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Presentation: Returns the value of the summary record component.
SUSPENDED - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentProfileState: Profile is suspended; enrollment requests are rejected.
SuspendEnrollmentProfile(String) - Constructor for record class zeroecho.pki.server.ServerControlOperation.SuspendEnrollmentProfile: Validates the id.

T

targetCommitment() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the targetCommitment record component.
targetObjectId() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the targetObjectId record component.
targetObjectId() - Method in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Returns the value of the targetObjectId record component.
targetOperation() - Method in record class zeroecho.pki.server.ServerControlOperation.RequestApproval: Returns the value of the targetOperation record component.
targetOperationId() - Method in record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Returns the value of the targetOperationId record component.
targetResource() - Method in record class zeroecho.pki.server.ServerControlOperation.RequestApproval: Returns the value of the targetResource record component.
tbsRequest() - Method in record class zeroecho.pki.server.OcspRequesterService.SignedRequest: Returns a defensive copy of canonical to-be-signed request DER.
template() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns the value of the template record component.
Template(String, int, Set) - Constructor for record class zeroecho.pki.server.RoleTemplateCatalog.Template: Validates the stable template.
templateId() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Returns the value of the templateId record component.
templateId() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Template: Returns the value of the templateId record component.
templateId() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleTemplate: Returns the value of the templateId record component.
templates() - Method in class zeroecho.pki.server.RoleTemplateCatalog: Returns the built-in templates.
templateVersion() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Returns the value of the templateVersion record component.
terminal() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns the value of the terminal record component.
TERMINATED - Enum constant in enum class zeroecho.pki.server.PkiHttpsServer.State: Fully closed; listener addresses and realm access are unavailable.
termsAgreed() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the termsAgreed record component.
text(String, boolean) - Static method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Defines a string argument.
TEXT - Enum constant in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Plain string value.
TEXT_SET - Enum constant in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Set of plain strings.
textSet(String, boolean) - Static method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Defines a set of strings encoded as a JSON array.
Thread safety - Section in class zeroecho.pki.server.ct.CtIssuanceInterceptor
Thread safety - Section in class zeroecho.pki.server.ct.CtLogSubmitter
Thread safety - Section in class zeroecho.pki.server.ct.PreCertificateBuilder
Thread safety - Section in class zeroecho.pki.server.ct.SctVerifier
Thread safety - Section in interface zeroecho.pki.server.ct.CtLogClient
Thread safety - Section in interface zeroecho.pki.server.spi.AcmeChallengeProvider
Thread safety - Section in interface zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider
Thread safety - Section in interface zeroecho.pki.server.spi.PkiServerAuthenticationResult
Thread safety - Section in interface zeroecho.pki.server.spi.PkiServerAuthenticator
Thread safety - Section in interface zeroecho.pki.server.spi.PkiServerClientTrustProvider
Thread safety - Section in interface zeroecho.pki.server.spi.PkiServerTlsProvider
Thread safety - Section in interface zeroecho.pki.server.spi.v2.AcmeChallengeProvider
Thread safety - Section in interface zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider
Thread safety - Section in interface zeroecho.pki.server.spi.v2.PkiServerClientTrustProvider
Thread safety - Section in interface zeroecho.pki.server.spi.v2.PkiServerTlsProvider
Thread safety - Section in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext
threshold() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns the value of the threshold record component.
title() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Presentation: Returns the value of the title record component.
tlsProvider() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the tlsProvider record component.
tlsProvider() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns the value of the tlsProvider record component.
tlsProvider() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns the value of the tlsProvider record component.
tlsProvider() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Returns the value of the tlsProvider record component.
tlsProvider() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns the value of the tlsProvider record component.
tlsProvider() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns the value of the tlsProvider record component.
token() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the token record component.
token() - Method in class zeroecho.pki.server.DisclosureService.IssuedCapability: Returns and clears the raw token exactly once.
token() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns the value of the token record component.
token() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns the value of the token record component.
tokenCommitment() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns a defensive commitment copy.
toString() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Graph: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Replacement: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeControlStore.Transition: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.AccountKey: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeJwsVerifier.Verified: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeState.AccountKeyIdentity: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeState.Authorization: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeState.Identifier: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.acme.AcmeState.Order: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AdministrativeDecisionActor: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AdministrativeOperation.Control: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AdministrativeOperation.Pki: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AdministrativeOperation.Signing: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ApprovalService.Decision: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ApprovalService.Policy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ApprovalService.Request: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AuditorViews.FullContent: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AuditorViews.FullMetadata: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AuditorViews.Pii: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AuthorityExposurePolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AuthorizationEngine.Decision: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.AuthorizationEngine.Request: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.BreakGlassService.ActiveGrants: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.BreakGlassService.Record: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.CertificateIdentityEvidence: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.cmp.CmpEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.CredentialConfirmationProofPolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.CredentialPublicationGate.AuditActor: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.DisclosureService.Capability: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.DisclosureService.Defaults: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.DisclosureService.Owner: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.DisclosureService.Record: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns a redacted description.
toString() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Response: Returns a redacted description.
toString() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction: Returns a redacted description.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Snapshot: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases.Snapshot: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns a string representation of this record class.
toString() - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime.CredentialLease
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.ActiveCredential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Budgets: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.CredentialSet: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeygenArtifacts: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.KeyReference: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Keyring: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Pbm: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmIdentity: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Signer: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.ArtifactBinding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Decision: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Source: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.est.EstEndpoint: Returns a string representation of this record class.
toString() - Method in class zeroecho.pki.server.est.EstServerKeygenResponse
toString() - Method in record class zeroecho.pki.server.est.EstService.EnrollmentResult: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.est.KeygenPolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.OcspRequesterService.Authorized: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.OcspRequesterService.SignedRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.OcspResponderService.PrincipalMapping: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.OcspResponderService.Registration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.OcspResponderService.RequestSignatureBinding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.OcspResponderService.Responder: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.OcspResponderService.TrustSelector: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.OperationSecurityDescriptors.Descriptor: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.Permission.Context: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.Permission.Grant: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.Permission.Resource: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.Permission.Scope: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AuditProjection: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ClientCertificateMapping: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.CmpListener: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.EstListener: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Listener: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.PublicListener: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.RuntimeCapabilities: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.ScepListener: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration.SigningReconciliation: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Access: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Authority: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Chain: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.PublicRepositoryGateway.Content: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.RealmId: Returns the canonical identifier.
toString() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Assignment: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Template: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.scep.ScepEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.scep.ScepService.CaCertificateResponse: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Entry: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Presentation: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.TransportSemantics: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.OperationSpec: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.schema.OperationParameterSchemas.Parameters: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.SecurityPrincipal: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.AcmeDirectoryProfilePrecondition: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateBreakGlass: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ActivateEnrollmentProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.CancelApproval: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ConfigurationChoices: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateBreakGlass: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateGrant: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.CreateRoleAssignment: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.DeactivateAcmeAccount: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideApproval: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.DecideEnrollmentRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterCmpEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterEstEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.DeregisterScepEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.EnrollCredentialPublication: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.EvaluateAuthorization: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ExecuteRestore: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackup: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ExportBackupStream: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeAccount: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAcmeDirectory: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectApproval: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectBreakGlass: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectCmpEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectDisclosure: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEnrollmentRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectEstEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectGrant: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectOcspResponder: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectPrincipal: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRepositoryAlias: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleAssignment: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleTemplate: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectScepEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.IssueCapability: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeAccounts: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListAcmeDirectories: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListApprovals: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListBreakGlass: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCapabilities: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListCmpEndpoints: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentProfiles: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEnrollmentRequests: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListEstEndpoints: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListGrants: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListOcspResponders: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListPrincipals: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRepositoryAliases: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleAssignments: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListRoleTemplates: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ListScepEndpoints: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterAcmeDirectory: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterCmpEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEnrollmentProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterEstEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterOcspResponder: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterPrincipal: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RegisterScepEndpoint: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RemoveRepositoryAlias: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RequestApproval: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.ReserveBackupUpload: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeBreakGlass: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeCapability: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeGrant: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.RevokeRoleAssignment: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.SearchAudit: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.SetAcmeDirectoryActive: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.SetDisclosure: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.SetOcspResponderActive: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.SetPrincipalEnabled: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.SuspendEnrollmentProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.UpdateEnrollmentProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyAuditIntegrity: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperation.VerifyBackup: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlOperationOutcome.Ordinary: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlStore.Page: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolMutation: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlStore.ProtocolRecord: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerControlStore.RealmRecord: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.ApprovalRequired: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.ControlExecuted: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.Denied: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerOperationGateway.Outcome.Executed: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.ServerRealmConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Result: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Binding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider.Request: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationContext: Returns safe metadata only; certificate and header values are never rendered.
toString() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Rejected: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns a redacted diagnostic without challenge credentials.
toString() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Identifier: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Result: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Binding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider.Request: Returns a redacted diagnostic without account or JWS material.
trackedKeys() - Method in class zeroecho.pki.server.acme.AcmeRateAdmission: Returns the bounded live counter population.
transactionId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns the value of the transactionId record component.
transactionId() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the transactionId record component.
transactionSha256() - Method in record class zeroecho.pki.server.enrollment.CmpTransaction.Frozen: Returns the value of the transactionSha256 record component.
transferTimeout() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the value of the transferTimeout record component.
transition(List, List) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Atomically creates immutable records and replaces their related owners.
Transition(List, List) - Constructor for record class zeroecho.pki.server.acme.AcmeControlStore.Transition: Defensively snapshots transition results.
transport() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.Presentation: Returns the value of the transport record component.
transportMode() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the transportMode record component.
transportPrincipalId() - Method in record class zeroecho.pki.server.ServerOperationGateway.Request: Returns the value of the transportPrincipalId record component.
transportPrincipalId() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Authenticated: Returns the value of the transportPrincipalId record component.
transportPrincipalId() - Method in record class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Rejected: Returns the value of the transportPrincipalId record component.
transportQueueCapacity() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns the value of the transportQueueCapacity record component.
TransportSemantics(String, String, Map) - Constructor for record class zeroecho.pki.server.schema.OperationDescriptorCatalog.TransportSemantics: Validates scope and snapshots all refinements.
transportWorkers() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Execution: Returns the value of the transportWorkers record component.
TRUSTED_REVERSE_PROXY - Enum constant in enum class zeroecho.pki.server.AdministrativeAuthenticationMode: A separately authenticated proxy forwards a validated external client certificate.
TRUSTED_REVERSE_PROXY - Enum constant in enum class zeroecho.pki.server.PkiServerConfiguration.AcmeTransportMode: An authenticated trusted proxy terminates the external connection.
trustedProxyPrincipalIds() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the trustedProxyPrincipalIds record component.
trustedProxyPrincipalIds() - Method in record class zeroecho.pki.server.PkiServerConfiguration.Authentication: Returns the value of the trustedProxyPrincipalIds record component.
TrustSelector(OcspResponderService.TrustSelectorType, Set) - Constructor for record class zeroecho.pki.server.OcspResponderService.TrustSelector: Validates and snapshots finite identities.
trustSelectors() - Method in record class zeroecho.pki.server.OcspResponderService.RequesterTrustPolicy: Returns the value of the trustSelectors record component.
tryAcquireFinalization() - Method in class zeroecho.pki.server.acme.AcmeRateAdmission: Acquires one listener-wide finalization permit without waiting.
tryAdmit() - Method in class zeroecho.pki.server.http.ServerRuntime: Tries to reserve one request-admission permit without waiting.
type() - Method in exception class zeroecho.pki.server.acme.AcmeJwsVerifier.AcmeProblem: Returns the safe problem classification.
type() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.acme.AcmeState.Identifier: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.AuditorViews.Redacted: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.AuditorViews.Source: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.DisclosureService.Owner: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Requester: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.OcspResponderService.PrincipalMapping: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.OcspResponderService.TrustSelector: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.Permission.Resource: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.schema.OperationDescriptorCatalog.FieldSemantics: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.schema.OperationParameterSchema.FieldSpec: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.SecurityPrincipal: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRepositoryAlias: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.ServerControlOperation.RemoveRepositoryAlias: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.ServerControlOperation.SetRepositoryAlias: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Identifier: Returns the value of the type record component.

U

UnauthorizedException() - Constructor for exception class zeroecho.pki.server.OcspRequesterService.UnauthorizedException: Creates a redacted rejection.
UnavailableException() - Constructor for exception class zeroecho.pki.server.OcspRequesterService.UnavailableException: Creates a redacted unavailable result.
UNCERTAIN - Enum constant in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Acceptance or reconciliation requires authoritative recovery.
union(EnrollmentIdentityAliases.Snapshot) - Method in record class zeroecho.pki.server.enrollment.EnrollmentIdentityAliases.Snapshot: Retains frozen exclusions and adds current mappings without removing aliases whose mapping or enabled state changed after admission.
UNSIGNED_ONLY - Enum constant in enum class zeroecho.pki.server.OcspResponderService.RequestAuthenticationMode: Accepts only unsigned OCSP requests.
UNSIGNED_OR_AUTHORIZED_SIGNED - Enum constant in enum class zeroecho.pki.server.OcspResponderService.RequestAuthenticationMode: Accepts unsigned or successfully authorized signed requests.
update(EnrollmentProfile) - Method in class zeroecho.pki.server.enrollment.EnrollmentProfileService: Updates an existing enrollment profile.
updateAccountContacts(String, String, List) - Method in class zeroecho.pki.server.acme.AcmeService: Atomically replaces bounded account contact metadata without changing key authority.
updatedAt() - Method in record class zeroecho.pki.server.acme.AcmeState.Account: Returns the value of the updatedAt record component.
updatedAt() - Method in record class zeroecho.pki.server.acme.AcmeState.Challenge: Returns the value of the updatedAt record component.
updatedAt() - Method in record class zeroecho.pki.server.DisclosureService.Record: Returns the value of the updatedAt record component.
updatedAt() - Method in record class zeroecho.pki.server.RepositoryAliasService.Record: Returns the value of the updatedAt record component.
UpdateEnrollmentProfile(EnrollmentProfile) - Constructor for record class zeroecho.pki.server.ServerControlOperation.UpdateEnrollmentProfile: Validates the operation input.
UPLOAD - Enum constant in enum class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand.Action: Receives an archive through the binary upload route.
UPLOAD - Static variable in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Upload backup archive operation identity.
usedBreakGlass() - Method in record class zeroecho.pki.server.AuthorizationEngine.Decision: Returns the value of the usedBreakGlass record component.
USER - Enum constant in enum class zeroecho.pki.server.SecurityPrincipal.Type: Human administrative or requesting identity.

V

valid() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Result: Returns the value of the valid record component.
valid() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Result: Returns the value of the valid record component.
VALID - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.AccountStatus: Account may perform protocol operations.
VALID - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.AuthorizationStatus: Authorization has current validation evidence.
VALID - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.ChallengeStatus: Challenge validation succeeded.
VALID - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.EvidenceResult: Validator proved the authorization.
VALID - Enum constant in enum class zeroecho.pki.server.acme.AcmeState.OrderStatus: Order completed with an issued credential.
validate(AcmeChallengeProvider.Context, ProviderConfig, CancellationSignal) - Method in class zeroecho.pki.server.acme.Http01ChallengeProvider
validate(AcmeChallengeProvider.Context, ProviderConfig, CancellationSignal) - Method in class zeroecho.pki.server.acme.JndiDns01ChallengeProvider
validate(AcmeChallengeProvider.Context, ProviderConfig, CancellationSignal) - Method in interface zeroecho.pki.server.spi.AcmeChallengeProvider: Performs one bounded external validation attempt.
validate(AcmeChallengeProvider.Context, ProviderConfig, CancellationSignal) - Method in interface zeroecho.pki.server.spi.v2.AcmeChallengeProvider: Performs one bounded external validation attempt.
validateAll() - Method in class zeroecho.pki.server.OcspResponderService: Revalidates every durable binding during realm recovery.
validateAll() - Method in class zeroecho.pki.server.ServerControlStore: Strictly decodes and cross-checks every authoritative control record from stable metadata snapshots before the realm is exposed.
validateAndRecover(Clock) - Method in class zeroecho.pki.server.acme.AcmeControlStore: Strictly decodes, cross-checks, expires, and safely recovers every ACME control record without re-running validation or issuance.
validateChallenge(String, String, String, String, Instant, CancellationSignal) - Method in class zeroecho.pki.server.acme.AcmeService: Claims and performs one explicit challenge validation attempt.
validateConfiguration(PkiServerConfiguration, Optional, Optional) - Static method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Validates companion presence and lexical storage separation without opening stores.
validateCredential(KeyPossessionProofCredential) - Method in class zeroecho.pki.server.confirmation.SignatureKeyPossessionProofProvider
validatedAt() - Method in record class zeroecho.pki.server.acme.AcmeState.AuthorizationEvidence: Returns the value of the validatedAt record component.
validateEndpoint(EnrollmentEndpoint) - Method in class zeroecho.pki.server.enrollment.EnrollmentRuntime: Validates an endpoint's provisioned capability without loading keys or invoking providers.
validateForwardingPrincipal(String) - Method in class zeroecho.pki.server.ServerOperationGateway: Fails startup when a configured proxy service principal has any enabled allowing authority beyond forwarded-identity attestation.
validateReferences(RoleTemplateCatalog) - Method in class zeroecho.pki.server.ServerControlStore: Validates durable relationships against the active strict role catalog.
validateResource(PkiOperation, Permission.Resource) - Method in class zeroecho.pki.server.OperationSecurityDescriptors: Verifies that caller-supplied security scope matches operation identities.
validateResource(PkiSigningOperation, Permission.Resource) - Method in class zeroecho.pki.server.OperationSecurityDescriptors: Checks the exact resource of a signing request before preparation.
validationExecution() - Method in record class zeroecho.pki.server.PkiServerConfiguration.AcmeListener: Returns the value of the validationExecution record component.
validationTime() - Method in record class zeroecho.pki.server.spi.AcmeChallengeProvider.Context: Returns the value of the validationTime record component.
validationTime() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Context: Returns the value of the validationTime record component.
validity() - Method in record class zeroecho.pki.server.enrollment.EnrollmentCoordinator.Admission: Returns the value of the validity record component.
validity() - Method in record class zeroecho.pki.server.enrollment.EnrollmentTransaction.Intent: Returns the value of the validity record component.
VALIDITY_AND_TRUST_ONLY - Enum constant in enum class zeroecho.pki.server.OcspResponderService.RequesterRevocationPolicy: Relies on certificate validity and trust without local revocation state.
value() - Method in record class zeroecho.pki.server.acme.AcmeState.Identifier: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.server.RealmId: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Identifier: Returns the value of the value record component.
valueOf(String) - Static method in enum class zeroecho.pki.server.acme.AcmeJwsVerifier.KeyMode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.acme.AcmeState.AccountStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.acme.AcmeState.AuthorizationStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.acme.AcmeState.ChallengeStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.acme.AcmeState.ChallengeType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.acme.AcmeState.DirectoryStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.acme.AcmeState.EvidenceResult: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.acme.AcmeState.IdentifierType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.acme.AcmeState.OrderStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.AdministrativeAuthenticationMode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.ApprovalService.Choice: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.ApprovalService.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.AuthorityExposurePolicy.Mode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.AuthorizationEngine.Code: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.BreakGlassService.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.cmp.CmpProtectionPolicy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.DisclosureService.Decision: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.DisclosureService.DeliveryState: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.DisclosureService.ObjectType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.DisclosureService.Owner.OwnerType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.DisclosureService.Policy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.CmpTransaction.Confirmation: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Protocol: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentProfileState: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmDigest: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmMac: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Protocol: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Operation: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Protocol: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.ForwardedCertificateFormat: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OcspResponderService.NoncePolicy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OcspResponderService.PrincipalMappingType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OcspResponderService.RequestAuthenticationMode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OcspResponderService.RequesterRevocationPolicy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OcspResponderService.SigningMode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OcspResponderService.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OcspResponderService.TrustSelectorType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OperationSecurityDescriptors.ApprovalCategory: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OperationSecurityDescriptors.Eligibility: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.OperationSecurityDescriptors.Family: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.Permission.Action: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.Permission.Condition: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.Permission.DataView: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.Permission.Effect: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.Permission.Relationship: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.Permission.ResourceType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.PkiHttpsServer.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.PkiServerConfiguration.AcmeTransportMode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.PublicRepositoryGateway.CacheClass: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.RepositoryAliasService.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.RepositoryAliasService.Type: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.SecurityPrincipal.Type: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand.Action: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.ServerControlOperationOutcome.Classification: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.ServerRealmContext.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.ChallengeType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.IdentifierType: Returns the enum constant of this class with the specified name.
values() - Static method in enum class zeroecho.pki.server.acme.AcmeJwsVerifier.KeyMode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.acme.AcmeState.AccountStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.acme.AcmeState.AuthorizationStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.acme.AcmeState.ChallengeStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.acme.AcmeState.ChallengeType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.acme.AcmeState.DirectoryStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.acme.AcmeState.EvidenceResult: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.acme.AcmeState.IdentifierType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.acme.AcmeState.OrderStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.AdministrativeAuthenticationMode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.ApprovalService.Choice: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.ApprovalService.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.AuthorityExposurePolicy.Mode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.AuthorizationEngine.Code: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.BreakGlassService.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.cmp.CmpProtectionPolicy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.DisclosureService.Decision: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.DisclosureService.DeliveryState: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.DisclosureService.ObjectType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.DisclosureService.Owner.OwnerType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.DisclosureService.Policy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.CmpTransaction.Confirmation: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentEndpointRegistry.Protocol: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentProfileState: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmDigest: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.PbmMac: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration.Protocol: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Operation: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.Protocol: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.enrollment.EnrollmentTransaction.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.ForwardedCertificateFormat: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OcspResponderService.NoncePolicy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OcspResponderService.PrincipalMappingType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OcspResponderService.RequestAuthenticationMode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OcspResponderService.RequesterRevocationPolicy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OcspResponderService.SigningMode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OcspResponderService.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OcspResponderService.TrustSelectorType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OperationSecurityDescriptors.ApprovalCategory: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OperationSecurityDescriptors.Eligibility: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.OperationSecurityDescriptors.Family: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.Permission.Action: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.Permission.Condition: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.Permission.DataView: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.Permission.Effect: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.Permission.Relationship: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.Permission.ResourceType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.PkiHttpsServer.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.PkiServerConfiguration.AcmeTransportMode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.PublicRepositoryGateway.CacheClass: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.RepositoryAliasService.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.RepositoryAliasService.Type: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.schema.OperationParameterSchema.FieldType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.SecurityPrincipal.Type: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand.Action: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.ServerControlOperationOutcome.Classification: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Method in record class zeroecho.pki.server.ServerControlStore.Page: Returns the value of the values record component.
values() - Static method in enum class zeroecho.pki.server.ServerRealmContext.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.spi.PkiServerAuthenticationResult.Code: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.ChallengeType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.IdentifierType: Returns an array containing the constants of this enum class, in the order they are declared.
Verified(byte[], String, Optional, PublicKey) - Constructor for record class zeroecho.pki.server.acme.AcmeJwsVerifier.Verified: Defensively snapshots verified payload.
verify(byte[], int, URI, String, AcmeJwsVerifier.KeyMode, AcmeNonceService, AcmeJwsVerifier.AccountKeyResolver) - Method in class zeroecho.pki.server.acme.AcmeJwsVerifier: Verifies one complete flattened JWS against the exact configured external URL.
verify(AcmeExternalAccountBindingProvider.Request, ProviderConfig) - Method in interface zeroecho.pki.server.spi.AcmeExternalAccountBindingProvider: Verifies and, when configured, consumes one exact nested EAB JWS.
verify(AcmeExternalAccountBindingProvider.Request, ProviderConfig) - Method in interface zeroecho.pki.server.spi.v2.AcmeExternalAccountBindingProvider: Verifies and, when configured, consumes one exact nested EAB JWS.
verify(KeyPossessionProofChallengeContext, KeyPossessionProofCredential, KeyPossessionProofResponse) - Method in class zeroecho.pki.server.confirmation.SignatureKeyPossessionProofProvider
VERIFY - Enum constant in enum class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand.Action: Performs domain archive verification.
VERIFY - Static variable in record class zeroecho.pki.server.ServerControlOperation.BackupArtifactCommand: Verify uploaded archive operation identity.
verifyAll(List, Map, byte[], int) - Static method in class zeroecho.pki.server.ct.SctVerifier: Verifies all collected SCTs and returns the subset that are cryptographically valid, enforcing the minimum count required for issuance.
VerifyAuditIntegrity(Optional) - Constructor for record class zeroecho.pki.server.ServerControlOperation.VerifyAuditIntegrity: Validates the operation's immutable input.
VerifyBackup(BackupArtifact) - Constructor for record class zeroecho.pki.server.ServerControlOperation.VerifyBackup: Validates the operation's immutable input.
verifyExternalAccountBinding(AcmeState.Directory, String, Optional) - Method in class zeroecho.pki.server.acme.AcmeService: Verifies EAB inside its explicit secret-confining provider and returns only a safe commitment.
verifyKeyChange(byte[], int, URI, String, String) - Method in class zeroecho.pki.server.acme.AcmeJwsVerifier: Verifies the RFC key-change inner JWS signed by the replacement key.
version() - Method in record class zeroecho.pki.server.PkiServerConfiguration: Returns the value of the version record component.
version() - Method in record class zeroecho.pki.server.RoleTemplateCatalog.Template: Returns the value of the version record component.
version() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectRoleTemplate: Returns the value of the version record component.
VERSION - Static variable in record class zeroecho.pki.server.BackupTransferConfiguration: Version of the separate transfer configuration document.
VERSION - Static variable in record class zeroecho.pki.server.enrollment.EnrollmentRuntimeConfiguration: Current companion configuration version; independent of server schema 8.
view() - Method in record class zeroecho.pki.server.ServerControlOperation.InspectAuditView: Returns the value of the view record component.

W

wildcard() - Method in record class zeroecho.pki.server.acme.AcmeState.Identifier: Returns the value of the wildcard record component.
wildcard() - Method in record class zeroecho.pki.server.spi.v2.AcmeChallengeProvider.Identifier: Returns the value of the wildcard record component.
withState(EnrollmentProfileState) - Method in record class zeroecho.pki.server.enrollment.EnrollmentProfile: Returns a copy of this profile with the given state.
workspaceReservationBytes() - Method in record class zeroecho.pki.server.BackupTransferConfiguration: Returns the minimum reservation for one verification or restore job.
writeTo(OutputStream, CancellationSignal) - Method in class zeroecho.pki.server.est.EstServerKeygenResponse.Body: Writes one complete base64 multipart response without closing the caller's stream.

X

X509_BINDING - Enum constant in enum class zeroecho.pki.server.Permission.ResourceType: X.509 representation binding.
X509_BINDING_PROVIDER_ENABLE - Enum constant in enum class zeroecho.pki.server.Permission.Action: Enables an X.509 binding provider.
X509_BINDING_READ - Enum constant in enum class zeroecho.pki.server.Permission.Action: Reads X.509 bindings.
x509BindingPolicies() - Method in record class zeroecho.pki.server.acme.AcmeService.DirectoryRegistration: Returns the value of the x509BindingPolicies record component.
x509BindingPolicies() - Method in record class zeroecho.pki.server.acme.AcmeState.Directory: Returns the value of the x509BindingPolicies record component.

Z

zeroecho.pki.server - module zeroecho.pki.server: ZeroEcho PKI server: browser/ACME HTTPS front-end over the PKI domain.
zeroecho.pki.server - package zeroecho.pki.server
zeroecho.pki.server.acme - package zeroecho.pki.server.acme
zeroecho.pki.server.cmp - package zeroecho.pki.server.cmp
zeroecho.pki.server.confirmation - package zeroecho.pki.server.confirmation: Internal credential key-possession proof profiles.
zeroecho.pki.server.ct - package zeroecho.pki.server.ct
zeroecho.pki.server.enrollment - package zeroecho.pki.server.enrollment
zeroecho.pki.server.est - package zeroecho.pki.server.est
zeroecho.pki.server.http - package zeroecho.pki.server.http
zeroecho.pki.server.jfr - package zeroecho.pki.server.jfr
zeroecho.pki.server.scep - package zeroecho.pki.server.scep
zeroecho.pki.server.schema - package zeroecho.pki.server.schema
zeroecho.pki.server.spi - package zeroecho.pki.server.spi
zeroecho.pki.server.spi.v2 - package zeroecho.pki.server.spi.v2: Stable server provider contracts for named-module and classpath extensions.

A B C D E F G H I J K L M N O P Q R S T U V W X Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form