Package zeroecho.pki.server.enrollment
package zeroecho.pki.server.enrollment
-
ClassDescriptionImmutable CMP wire continuation, independent of signing acceptance.Durable protocol confirmation, independent of domain credential confirmation.Authenticated immutable reservation.Metadata committed atomically with every fixed response slot.Realm-owned durable enrollment admission, independent approval and exact signing continuation.Verified adapter input; this API does not authenticate wire messages.Bounded ciphertext borrower; the caller must close it on every HTTP outcome.Closed immutable protocol binding with an explicit enrollment policy.Realm-owned, thread-safe durable endpoint registry.Closed protocols sharing the durable enrollment endpoint authority.Exact persisted endpoint snapshot suitable for binding an approval request.Conservative, exclusion-only aliases derived from configured end-client credential commitments.Immutable sorted aliases bound to one realm; at most 20,000 entries permits union of one frozen and one current configuration snapshot.Durable server-keygen reservation and encrypted delivery lifecycle.Durable phases distinguish an interrupted generation from an attached enrollment.Immutable enrollment profile.Durable, thread-safe enrollment profile registry owned by one realm.Lifecycle state of an enrollment profile.Thread-safe realm owner of dedicated enrollment keyrings and immutable authority-scoped credentials.Immutable, separately versioned enrollment resource and credential configuration.Selection for newly admitted transactions; retained transactions keep their ID.Explicit transaction budgets, including terminal replay records.Immutable authority-scoped protocol credentials.Optional client-encrypted server-keygen delivery storage.Reference to existing material in a configured encrypted keyring.Dedicated, preprovisioned encrypted keyring.Explicit CMP PBM work, salt and algorithm limits.Explicitly supported PBM digest families.One CMP PBM requester, isolated to this credential set and authority.Explicitly supported PBM MAC families.Protocols requiring explicitly provisioned message credentials.Response signer with a leaf-to-anchor DER certificate chain.Immutable linear-time matcher for bounded enrollment subject constraints.Immutable durable enrollment state.Frozen client-encrypted key delivery, included in issuance and approval commitments.One verified independent administrative decision.Frozen verified original request reference and complete issuance selection.Existing enrollment operation kinds with separate replay domains.Protocol family determines admission and recovery binding semantics.Authenticated protocol actor, distinct from an administrative principal.Frozen endpoint identity.Durable states; uncertain or accepted work never silently expires.