Class EnrollmentCoordinator.KeygenGeneration

java.lang.Object

zeroecho.pki.server.enrollment.EnrollmentCoordinator.KeygenGeneration

All Implemented Interfaces:

AutoCloseable

Enclosing class:

EnrollmentCoordinator

public final class EnrollmentCoordinator.KeygenGeneration
extends Object
implements AutoCloseable

Exclusive generation claim. No raw private key is accepted by this handle; the adapter encrypts it for the frozen recipient before attachment.

Method Summary

Modifier and Type	Method	Description
EnrollmentTransaction	attach(X509EnrollmentPayload generated, byte[] ciphertext)	Stores the proved generated CSR and publishes encrypted bytes before one atomic descriptor/enrollment attachment.
void	close()	Releases generation capacity.
EnrollmentKeygenArtifact	descriptor()	Returns immutable original template, policy and resource reservation.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

descriptor

public EnrollmentKeygenArtifact descriptor()

Returns immutable original template, policy and resource reservation.

Returns:

immutable original template, policy and resource reservation

attach

public EnrollmentTransaction attach(X509EnrollmentPayload generated,
 byte[] ciphertext)

Stores the proved generated CSR and publishes encrypted bytes before one atomic descriptor/enrollment attachment. Any uncertain publication fences this coordinator. The generated request must preserve every template subject and SAN and satisfy the frozen key and proof policy.

Parameters:

generated - exact proved generated PKCS#10 request

ciphertext - already client-encrypted PKCS#8 CMS delivery bytes

Returns:

durable approval or approved enrollment

close

public void close()

Releases generation capacity. A confirmed unattached generation is terminalized before deletion; uncertain state is left for startup recovery.

Specified by:

close in interface AutoCloseable