Record Class EnrollmentKeygenArtifact
java.lang.Object
java.lang.Record
zeroecho.pki.server.enrollment.EnrollmentKeygenArtifact
- Record Components:
id- stable replay-derived artifact identityrevision- positive mutation revisiontemplate- exact original verified template and complete frozen policyalgorithm- selected permitted key-generation algorithmmaximumKeySizeBits- original endpoint generation boundmaximumCiphertextBytes- reserved ciphertext capacitymaximumGeneratedRequestBytes- reserved generated CSR capacitydeliveryDeadline- fixed recipient-validity-capped delivery deadlinestate- authoritative generation/delivery phaseartifact- exact attached ciphertext, absent until atomic enrollment attachmentbytesReleased- true only after durable deletion permits releasing byte capacity
public record EnrollmentKeygenArtifact(String id, long revision, EnrollmentTransaction.Intent template, String algorithm, int maximumKeySizeBits, long maximumCiphertextBytes, int maximumGeneratedRequestBytes, Instant deliveryDeadline, EnrollmentKeygenArtifact.State state, Optional<EnrollmentTransaction.ArtifactBinding> artifact, boolean bytesReleased)
extends Record
Durable server-keygen reservation and encrypted delivery lifecycle. The original
template is retained by the domain request store; no raw key or ciphertext is
embedded in this record. Descriptor count remains charged after terminal cleanup.
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic enumDurable phases distinguish an interrupted generation from an attached enrollment. -
Constructor Summary
ConstructorsConstructorDescriptionEnrollmentKeygenArtifact(String id, long revision, EnrollmentTransaction.Intent template, String algorithm, int maximumKeySizeBits, long maximumCiphertextBytes, int maximumGeneratedRequestBytes, Instant deliveryDeadline, EnrollmentKeygenArtifact.State state, Optional<EnrollmentTransaction.ArtifactBinding> artifact, boolean bytesReleased) Validates the closed persistent grammar and all immutable linkage fields. -
Method Summary
Modifier and TypeMethodDescriptionReturns the value of thealgorithmrecord component.artifact()Returns the value of theartifactrecord component.booleanReturns the value of thebytesReleasedrecord component.Returns complete revision-sensitive record commitment.Returns the value of thedeliveryDeadlinerecord component.Returns exact linked enrollment identity, whether delivery remains available or expired.final booleanIndicates whether some other object is "equal to" this one.Returns immutable reservation commitment included in the generated issuance intent.final inthashCode()Returns a hash code value for this object.id()Returns the value of theidrecord component.longReturns the value of themaximumCiphertextBytesrecord component.intReturns the value of themaximumGeneratedRequestBytesrecord component.intReturns the value of themaximumKeySizeBitsrecord component.longrevision()Returns the value of therevisionrecord component.state()Returns the value of thestaterecord component.template()Returns the value of thetemplaterecord component.toString()Returns a string representation of this record class.
-
Constructor Details
-
EnrollmentKeygenArtifact
public EnrollmentKeygenArtifact(String id, long revision, EnrollmentTransaction.Intent template, String algorithm, int maximumKeySizeBits, long maximumCiphertextBytes, int maximumGeneratedRequestBytes, Instant deliveryDeadline, EnrollmentKeygenArtifact.State state, Optional<EnrollmentTransaction.ArtifactBinding> artifact, boolean bytesReleased) Validates the closed persistent grammar and all immutable linkage fields.
-
-
Method Details
-
commitment
Returns complete revision-sensitive record commitment.- Returns:
- complete revision-sensitive record commitment
-
generationCommitment
Returns immutable reservation commitment included in the generated issuance intent.- Returns:
- immutable reservation commitment included in the generated issuance intent
-
enrollmentId
Returns exact linked enrollment identity, whether delivery remains available or expired.- Returns:
- exact linked enrollment identity, whether delivery remains available or expired
-
toString
-
hashCode
-
equals
Indicates whether some other object is "equal to" this one. The objects are equal if the other object is of the same class and if all the record components are equal. Reference components are compared withObjects::equals(Object,Object); primitive components are compared with thecomparemethod from their corresponding wrapper classes. -
id
-
revision
-
template
-
algorithm
-
maximumKeySizeBits
public int maximumKeySizeBits()Returns the value of themaximumKeySizeBitsrecord component.- Returns:
- the value of the
maximumKeySizeBitsrecord component
-
maximumCiphertextBytes
public long maximumCiphertextBytes()Returns the value of themaximumCiphertextBytesrecord component.- Returns:
- the value of the
maximumCiphertextBytesrecord component
-
maximumGeneratedRequestBytes
public int maximumGeneratedRequestBytes()Returns the value of themaximumGeneratedRequestBytesrecord component.- Returns:
- the value of the
maximumGeneratedRequestBytesrecord component
-
deliveryDeadline
Returns the value of thedeliveryDeadlinerecord component.- Returns:
- the value of the
deliveryDeadlinerecord component
-
state
-
artifact
-
bytesReleased
public boolean bytesReleased()Returns the value of thebytesReleasedrecord component.- Returns:
- the value of the
bytesReleasedrecord component
-