Record Class OcspResponderService.Responder

java.lang.Object

java.lang.Record

zeroecho.pki.server.OcspResponderService.Responder

Record Components:

responderId - stable responder identifier

alias - unique public responder alias

realmId - owning security realm

authorityId - logical authority identifier

issuerId - exact issuer generation identifier

signingMode - issuer or delegated signing mode

responderCredentialId - exact responder certificate identifier

signingKeyRef - exact signing-key reference

chainPathId - responder certificate-chain path identifier

signatureAlgorithm - signature algorithm identifier

signatureBindingId - optional explicit signature binding

signatureBindingCommitment - expected binding or registry commitment

responderIdForm - OCSP responder-identifier representation

responseValidity - positive response validity

noncePolicy - request nonce policy

maximumNonceBytes - maximum accepted nonce size in bytes

acceptedHashes - accepted certificate-identifier hash algorithms

maximumRequestBytes - maximum encoded request size in bytes

maximumEntries - maximum certificate identifiers per request

cacheLifetime - positive response-cache lifetime

requestAuthenticationMode - signed-request authentication policy

requesterTrustPolicy - requester trust policy required by signed modes

state - durable activation state

createdAt - server-authoritative creation time

configurationCommitment - SHA-256 commitment to the complete configuration

Enclosing class:

OcspResponderService

public static record OcspResponderService.Responder(String responderId, String alias, RealmId realmId, PkiId authorityId, PkiId issuerId, OcspResponderService.SigningMode signingMode, PkiId responderCredentialId, KeyRef signingKeyRef, PkiId chainPathId, String signatureAlgorithm, Optional<String> signatureBindingId, String signatureBindingCommitment, OcspResponseService.ResponderId responderIdForm, Duration responseValidity, OcspResponderService.NoncePolicy noncePolicy, int maximumNonceBytes, Set<OcspResponseService.CertIdHash> acceptedHashes, int maximumRequestBytes, int maximumEntries, Duration cacheLifetime, OcspResponderService.RequestAuthenticationMode requestAuthenticationMode, Optional<OcspResponderService.RequesterTrustPolicy> requesterTrustPolicy, OcspResponderService.State state, Instant createdAt, String configurationCommitment)
extends Record

Strict versioned responder binding.

Constructor Summary

Constructors

Constructor

Description

Responder(String responderId, String alias, RealmId realmId, PkiId authorityId, PkiId issuerId, OcspResponderService.SigningMode signingMode, PkiId responderCredentialId, KeyRef signingKeyRef, PkiId chainPathId, String signatureAlgorithm, Optional<String> signatureBindingId, String signatureBindingCommitment, OcspResponseService.ResponderId responderIdForm, Duration responseValidity, OcspResponderService.NoncePolicy noncePolicy, int maximumNonceBytes, Set<OcspResponseService.CertIdHash> acceptedHashes, int maximumRequestBytes, int maximumEntries, Duration cacheLifetime, OcspResponderService.RequestAuthenticationMode requestAuthenticationMode, Optional<OcspResponderService.RequesterTrustPolicy> requesterTrustPolicy, OcspResponderService.State state, Instant createdAt, String configurationCommitment)

Validates all finite immutable dependencies and the record commitment.

Method Summary

Modifier and Type	Method	Description
Set<OcspResponseService.CertIdHash>	acceptedHashes()	Returns the value of the acceptedHashes record component.
String	alias()	Returns the value of the alias record component.
PkiId	authorityId()	Returns the value of the authorityId record component.
Duration	cacheLifetime()	Returns the value of the cacheLifetime record component.
PkiId	chainPathId()	Returns the value of the chainPathId record component.
String	configurationCommitment()	Returns the value of the configurationCommitment record component.
Instant	createdAt()	Returns the value of the createdAt record component.
final boolean	equals(Object o)	Indicates whether some other object is "equal to" this one.
final int	hashCode()	Returns a hash code value for this object.
PkiId	issuerId()	Returns the value of the issuerId record component.
int	maximumEntries()	Returns the value of the maximumEntries record component.
int	maximumNonceBytes()	Returns the value of the maximumNonceBytes record component.
int	maximumRequestBytes()	Returns the value of the maximumRequestBytes record component.
OcspResponderService.NoncePolicy	noncePolicy()	Returns the value of the noncePolicy record component.
RealmId	realmId()	Returns the value of the realmId record component.
OcspResponderService.RequestAuthenticationMode	requestAuthenticationMode()	Returns the value of the requestAuthenticationMode record component.
Optional<OcspResponderService.RequesterTrustPolicy>	requesterTrustPolicy()	Returns the value of the requesterTrustPolicy record component.
PkiId	responderCredentialId()	Returns the value of the responderCredentialId record component.
String	responderId()	Returns the value of the responderId record component.
OcspResponseService.ResponderId	responderIdForm()	Returns the value of the responderIdForm record component.
Duration	responseValidity()	Returns the value of the responseValidity record component.
String	signatureAlgorithm()	Returns the value of the signatureAlgorithm record component.
String	signatureBindingCommitment()	Returns the value of the signatureBindingCommitment record component.
Optional<String>	signatureBindingId()	Returns the value of the signatureBindingId record component.
KeyRef	signingKeyRef()	Returns the value of the signingKeyRef record component.
OcspResponderService.SigningMode	signingMode()	Returns the value of the signingMode record component.
OcspResponderService.State	state()	Returns the value of the state record component.
final String	toString()	Returns a string representation of this record class.

Methods inherited from class Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Details

Responder

public Responder(String responderId,
 String alias,
 RealmId realmId,
 PkiId authorityId,
 PkiId issuerId,
 OcspResponderService.SigningMode signingMode,
 PkiId responderCredentialId,
 KeyRef signingKeyRef,
 PkiId chainPathId,
 String signatureAlgorithm,
 Optional<String> signatureBindingId,
 String signatureBindingCommitment,
 OcspResponseService.ResponderId responderIdForm,
 Duration responseValidity,
 OcspResponderService.NoncePolicy noncePolicy,
 int maximumNonceBytes,
 Set<OcspResponseService.CertIdHash> acceptedHashes,
 int maximumRequestBytes,
 int maximumEntries,
 Duration cacheLifetime,
 OcspResponderService.RequestAuthenticationMode requestAuthenticationMode,
 Optional<OcspResponderService.RequesterTrustPolicy> requesterTrustPolicy,
 OcspResponderService.State state,
 Instant createdAt,
 String configurationCommitment)

Validates all finite immutable dependencies and the record commitment.

Method Details

toString

public final String toString()

Returns a string representation of this record class. The representation contains the name of the class, followed by the name and value of each of the record components.

Specified by:

toString in class Record

Returns:

a string representation of this object

hashCode

public final int hashCode()

Returns a hash code value for this object. The value is derived from the hash code of each of the record components.

Specified by:

hashCode in class Record

Returns:

a hash code value for this object

equals

public final boolean equals(Object o)

Indicates whether some other object is "equal to" this one. The objects are equal if the other object is of the same class and if all the record components are equal. Reference components are compared with Objects::equals(Object,Object); primitive components are compared with the compare method from their corresponding wrapper classes.

Specified by:

equals in class Record

Parameters:

o - the object with which to compare

Returns:

true if this object is the same as the o argument; false otherwise.

responderId

public String responderId()

Returns the value of the responderId record component.

Returns:

the value of the responderId record component

alias

public String alias()

Returns the value of the alias record component.

Returns:

the value of the alias record component

realmId

public RealmId realmId()

Returns the value of the realmId record component.

Returns:

the value of the realmId record component

authorityId

public PkiId authorityId()

Returns the value of the authorityId record component.

Returns:

the value of the authorityId record component

issuerId

public PkiId issuerId()

Returns the value of the issuerId record component.

Returns:

the value of the issuerId record component

signingMode

public OcspResponderService.SigningMode signingMode()

Returns the value of the signingMode record component.

Returns:

the value of the signingMode record component

responderCredentialId

public PkiId responderCredentialId()

Returns the value of the responderCredentialId record component.

Returns:

the value of the responderCredentialId record component

signingKeyRef

public KeyRef signingKeyRef()

Returns the value of the signingKeyRef record component.

Returns:

the value of the signingKeyRef record component

chainPathId

public PkiId chainPathId()

Returns the value of the chainPathId record component.

Returns:

the value of the chainPathId record component

signatureAlgorithm

public String signatureAlgorithm()

Returns the value of the signatureAlgorithm record component.

Returns:

the value of the signatureAlgorithm record component

signatureBindingId

public Optional<String> signatureBindingId()

Returns the value of the signatureBindingId record component.

Returns:

the value of the signatureBindingId record component

signatureBindingCommitment

public String signatureBindingCommitment()

Returns the value of the signatureBindingCommitment record component.

Returns:

the value of the signatureBindingCommitment record component

responderIdForm

public OcspResponseService.ResponderId responderIdForm()

Returns the value of the responderIdForm record component.

Returns:

the value of the responderIdForm record component

responseValidity

public Duration responseValidity()

Returns the value of the responseValidity record component.

Returns:

the value of the responseValidity record component

noncePolicy

public OcspResponderService.NoncePolicy noncePolicy()

Returns the value of the noncePolicy record component.

Returns:

the value of the noncePolicy record component

maximumNonceBytes

public int maximumNonceBytes()

Returns the value of the maximumNonceBytes record component.

Returns:

the value of the maximumNonceBytes record component

acceptedHashes

public Set<OcspResponseService.CertIdHash> acceptedHashes()

Returns the value of the acceptedHashes record component.

Returns:

the value of the acceptedHashes record component

maximumRequestBytes

public int maximumRequestBytes()

Returns the value of the maximumRequestBytes record component.

Returns:

the value of the maximumRequestBytes record component

maximumEntries

public int maximumEntries()

Returns the value of the maximumEntries record component.

Returns:

the value of the maximumEntries record component

cacheLifetime

public Duration cacheLifetime()

Returns the value of the cacheLifetime record component.

Returns:

the value of the cacheLifetime record component

requestAuthenticationMode

public OcspResponderService.RequestAuthenticationMode requestAuthenticationMode()

Returns the value of the requestAuthenticationMode record component.

Returns:

the value of the requestAuthenticationMode record component

requesterTrustPolicy

public Optional<OcspResponderService.RequesterTrustPolicy> requesterTrustPolicy()

Returns the value of the requesterTrustPolicy record component.

Returns:

the value of the requesterTrustPolicy record component

state

public OcspResponderService.State state()

Returns the value of the state record component.

Returns:

the value of the state record component

createdAt

public Instant createdAt()

Returns the value of the createdAt record component.

Returns:

the value of the createdAt record component

configurationCommitment

public String configurationCommitment()

Returns the value of the configurationCommitment record component.

Returns:

the value of the configurationCommitment record component