Record Class OcspResponderService.Registration

java.lang.Object
java.lang.Record
zeroecho.pki.server.OcspResponderService.Registration
Record Components:
responderId - stable responder identifier
alias - unique public responder alias
authorityId - logical authority identifier
issuerId - exact issuer generation identifier
signingMode - issuer or delegated signing mode
responderCredentialId - exact responder certificate identifier
signingKeyRef - exact signing-key reference
chainPathId - responder certificate-chain path identifier
signatureAlgorithm - signature algorithm identifier
signatureBindingId - optional explicit signature binding
signatureBindingCommitment - expected binding or registry commitment
responderIdForm - OCSP responder-identifier representation
responseValidity - positive response validity
noncePolicy - request nonce policy
maximumNonceBytes - maximum accepted nonce size in bytes
acceptedHashes - accepted certificate-identifier hash algorithms
maximumRequestBytes - maximum encoded request size in bytes
maximumEntries - maximum certificate identifiers per request
cacheLifetime - positive response-cache lifetime
requestAuthenticationMode - signed-request authentication policy
requesterTrustPolicy - requester trust policy required by signed modes
Enclosing class:
OcspResponderService

public static record OcspResponderService.Registration(String responderId, String alias, PkiId authorityId, PkiId issuerId, OcspResponderService.SigningMode signingMode, PkiId responderCredentialId, KeyRef signingKeyRef, PkiId chainPathId, String signatureAlgorithm, Optional<String> signatureBindingId, String signatureBindingCommitment, OcspResponseService.ResponderId responderIdForm, Duration responseValidity, OcspResponderService.NoncePolicy noncePolicy, int maximumNonceBytes, Set<OcspResponseService.CertIdHash> acceptedHashes, int maximumRequestBytes, int maximumEntries, Duration cacheLifetime, OcspResponderService.RequestAuthenticationMode requestAuthenticationMode, Optional<OcspResponderService.RequesterTrustPolicy> requesterTrustPolicy) extends Record
Closed administrator input without server-authoritative timestamps, state, or record commitments.