Package zeroecho.pki.server.acme
package zeroecho.pki.server.acme
-
ClassDescriptionTyped ACME record facade over the realm's sole transactional control authority.Immutable atomically committed order graph.One exact prior-to-next ACME compare-and-set transition.Results of one atomic ACME graph transition.Strict narrow ACME flattened-JWS verifier supporting only ES256.Resolved durable account public key with exact revision commitment.Account lookup used only after strict KID framing.Safe finite protocol failure, never carrying provider or parser details.Required protected-header account-key mode.Verified JWS data safe to pass to one closed endpoint decoder.Bounded process-local one-time ACME replay-nonce authority.Deterministic explicitly enabled ACME ServiceLoader composition.Bounded restart-local ACME rate and finalization admission authority.Transport-neutral durable ACME state machine and constrained PKI integration.Safe immutable directory-registration input.Closed durable ACME domain records.Durable protocol-scoped ACME account.Exclusion-only evidence for one authenticated account key, retained across rollover.Account lifecycle.Durable identifier authorization owned by one account order.Immutable validator evidence; no control operation may construct it.Authorization lifecycle.Durable explicitly triggered challenge attempt.Challenge lifecycle.Supported proof challenges.Immutable directory policy revision bound to one exact PKI authority.Directory lifecycle.Durable validation result.One canonical DNS identifier with an explicit wildcard bit.Supported identifier kinds.Durable ACME order frozen to one directory revision and issuance selection.Order lifecycle.Exact bounded ACME wire-size calculations shared by configuration and transport.Production HTTP-01 validator using policy-checked, IP-pinned port-80 sockets.Production DNS-01 validator using one explicit absolute-name JNDI DNS resolver.