Class EstHttpHandler

java.lang.Object

zeroecho.pki.server.est.EstHttpHandler

All Implemented Interfaces:

HttpHandler

public final class EstHttpHandler
extends Object
implements HttpHandler

HTTP handler for the EST RFC 7030 protocol.

URL structure: /.well-known/est/{label}/{operation} where label is the registered endpoint label and operation is one of cacerts, simpleenroll, simplereenroll, csrattrs, serverkeygen.

All EST operations require mutual TLS. Requests without a valid client certificate are rejected with HTTP 401.

Since:

1.0

Constructor Summary

Constructors

Constructor	Description
EstHttpHandler(ServerRealmContext realm, EstService service, ServerRuntime runtime, RequestIds requestIds, BooleanSupplier ready, int configuredMaximumBodyBytes, Duration maximumDeadline)	Creates an EST boundary with mutual TLS and runtime admission control.

Method Summary

Modifier and Type	Method	Description
void	handle(HttpExchange exchange)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

EstHttpHandler

public EstHttpHandler(ServerRealmContext realm,
 EstService service,
 ServerRuntime runtime,
 RequestIds requestIds,
 BooleanSupplier ready,
 int configuredMaximumBodyBytes,
 Duration maximumDeadline)

Creates an EST boundary with mutual TLS and runtime admission control.

Parameters:

realm - owning realm

service - EST operations

runtime - admission controller

requestIds - request correlation policy

ready - readiness predicate

configuredMaximumBodyBytes - listener request-body bound, capped at 64 KiB

maximumDeadline - positive execution deadline, at most one hour

Method Details

handle

public void handle(HttpExchange exchange)
            throws IOException

Specified by:

handle in interface HttpHandler

Throws:

IOException