Record Class AcmeState.AccountKeyIdentity

java.lang.Object
java.lang.Record
zeroecho.pki.server.acme.AcmeState.AccountKeyIdentity
Record Components:
canonicalSha256 - mathematical public-key commitment
legacySpkiSha256 - finite supported equivalent SPKI commitments
aliases - known administrative principal exclusions at observation time
Enclosing class:
AcmeState

public static record AcmeState.AccountKeyIdentity(String canonicalSha256, Set<String> legacySpkiSha256, Set<String> aliases) extends Record
Exclusion-only evidence for one authenticated account key, retained across rollover. Neither this record nor an alias grants authentication authority.
  • Constructor Details

    • AccountKeyIdentity

      public AccountKeyIdentity(String canonicalSha256, Set<String> legacySpkiSha256, Set<String> aliases)
      Validates immutable bounded public commitments and aliases.
  • Method Details

    • fromKey

      public static AcmeState.AccountKeyIdentity fromKey(byte[] spki, Set<String> aliases)
      Derives supported canonical commitments from validated public-key material.
      Parameters:
      spki - exact public key
      aliases - exclusion-only aliases
      Returns:
      immutable key identity
    • toString

      public String toString()
      Returns a string representation of this record class. The representation contains the name of the class, followed by the name and value of each of the record components.
      Specified by:
      toString in class Record
      Returns:
      a string representation of this object
    • hashCode

      public final int hashCode()
      Returns a hash code value for this object. The value is derived from the hash code of each of the record components.
      Specified by:
      hashCode in class Record
      Returns:
      a hash code value for this object
    • equals

      public final boolean equals(Object o)
      Indicates whether some other object is "equal to" this one. The objects are equal if the other object is of the same class and if all the record components are equal. All components in this record class are compared with Objects::equals(Object,Object).
      Specified by:
      equals in class Record
      Parameters:
      o - the object with which to compare
      Returns:
      true if this object is the same as the o argument; false otherwise.
    • canonicalSha256

      public String canonicalSha256()
      Returns the value of the canonicalSha256 record component.
      Returns:
      the value of the canonicalSha256 record component
    • legacySpkiSha256

      public Set<String> legacySpkiSha256()
      Returns the value of the legacySpkiSha256 record component.
      Returns:
      the value of the legacySpkiSha256 record component
    • aliases

      public Set<String> aliases()
      Returns the value of the aliases record component.
      Returns:
      the value of the aliases record component