Uses of Class
zeroecho.pki.server.ServerControlStore
Packages that use ServerControlStore
-
Uses of ServerControlStore in zeroecho.pki.server
Constructors in zeroecho.pki.server with parameters of type ServerControlStoreModifierConstructorDescriptionApprovalService(ServerControlStore store, Clock clock, AuditSink auditSink) Creates a durable approval service over one server-control authority.BreakGlassService(ServerControlStore store, Clock clock, AuditSink auditSink) Creates a durable break-glass service.DisclosureService(RealmId realmId, ServerControlStore store, DisclosureService.Defaults defaults, Clock clock, SecureRandom random, AuditSink auditSink) Creates a durable disclosure service with an injected random source and clock.OcspResponderService(RealmId realmId, ServerControlStore control, PkiRepository repository, X509AlgorithmBindingRegistry bindings, Optional<OcspResponseService> signing, Clock clock) Binds responder control to one realm and one authoritative PKI repository.RepositoryAliasService(RealmId realmId, ServerControlStore store, PkiRepository repository, DisclosureService disclosure, Clock clock, AuditSink auditSink) Creates a repository alias authority over one realm control store.ServerControlOperationExecutor(PkiOperationExecutor pkiExecutor, RealmId realmId, AuthorityExposurePolicy exposure, ServerControlStore store, RoleTemplateCatalog roles, AuthorizationEngine authorization, ApprovalService approvals, BreakGlassService breakGlass, DisclosureService disclosure, CredentialPublicationGate credentialPublication, AuditorViews auditorViews, Optional<RepositoryAliasService> repositoryAliases, OperationSecurityDescriptors descriptors, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies) Creates the one control dispatcher over existing durable authorities.ServerOperationGateway(RealmId realmId, AuthorityExposurePolicy exposure, ServerControlStore control, RoleTemplateCatalog roles, AuthorizationEngine authorization, ApprovalService approvals, BreakGlassService breakGlass, DisclosureService disclosure, CredentialPublicationGate credentialPublication, AuditorViews auditorViews, Optional<RepositoryAliasService> repositoryAliases, OperationSecurityDescriptors descriptors, PkiOperationExecutor executor, ServerOperationGateway.SigningExecutor signingExecutor, PkiResourceScopeResolver resourceScopes, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies, Function<String, IssuanceApprovalRequirement> issuanceApprovalRequirements, Clock clock, AuditSink auditSink, Runnable openCheck) Creates one gateway whose reconciliation is driven only by periodic polling.ServerOperationGateway(RealmId realmId, AuthorityExposurePolicy exposure, ServerControlStore control, RoleTemplateCatalog roles, AuthorizationEngine authorization, ApprovalService approvals, BreakGlassService breakGlass, DisclosureService disclosure, CredentialPublicationGate credentialPublication, AuditorViews auditorViews, Optional<RepositoryAliasService> repositoryAliases, OperationSecurityDescriptors descriptors, PkiOperationExecutor executor, ServerOperationGateway.SigningExecutor signingExecutor, PkiResourceScopeResolver resourceScopes, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies, Function<String, IssuanceApprovalRequirement> issuanceApprovalRequirements, Clock clock, AuditSink auditSink, Runnable reconciliationWake, Runnable openCheck) Creates one gateway bound to one realm and one session executor. -
Uses of ServerControlStore in zeroecho.pki.server.acme
Constructors in zeroecho.pki.server.acme with parameters of type ServerControlStoreModifierConstructorDescriptionAcmeControlStore(ServerControlStore control) Binds ACME state to the lifecycle-owned realm control store. -
Uses of ServerControlStore in zeroecho.pki.server.enrollment
Methods in zeroecho.pki.server.enrollment with parameters of type ServerControlStoreModifier and TypeMethodDescriptionstatic EnrollmentRuntimeEnrollmentRuntime.open(EnrollmentRuntimeConfiguration configuration, ServerRealmConfiguration realm, PkiRepository repository, ServerControlStore control, EnrollmentEndpointRegistry endpoints, PkiSessionRuntimeDependencies dependencies, Clock clock, Optional<BackupTransferConfiguration> backup) Opens preprovisioned encrypted keyrings, validates the complete credential graph and atomically pins immutable public commitments in server control.static EnrollmentProfileEnrollmentProfileService.requireBinding(ServerControlStore control, String id, String certificateProfileId, String authorityId, boolean active) Resolves one policy without constructing another registry or scanning it.Constructors in zeroecho.pki.server.enrollment with parameters of type ServerControlStoreModifierConstructorDescriptionEnrollmentCoordinator(ServerControlStore control, ServerRealmConfiguration realm, PkiSession session, EnrollmentEndpointRegistry endpoints, EnrollmentProfileService profiles, AcmeControlStore acme, EnrollmentRuntime runtime, EnrollmentIdentityAliases aliases, Clock clock) Validates retained references and rebuilds bounded counters before readiness.EnrollmentEndpointRegistry(ServerControlStore control, EnrollmentProfileService profiles) Opens the registry and validates every persisted record and active binding.Opens and validates the realm's durable registry.