Record Class ScepEndpoint

java.lang.Object
java.lang.Record
zeroecho.pki.server.scep.ScepEndpoint
Record Components:
label - URL-safe identifier, 1–64 characters, matching [A-Za-z0-9._-]+
authorityId - the CA authority identifier whose chain is served on this endpoint
profileId - the issuance profile identifier applied to enrollment requests
enrollmentProfileId - mandatory enrollment policy identity, distinct from the issuance profile
challengePasswordHash - SHA-256 hex digest of the challenge password (64 lower-case hex chars)
All Implemented Interfaces:
EnrollmentEndpoint
public record ScepEndpoint(String label, String authorityId, String profileId, String enrollmentProfileId, String challengePasswordHash) extends Record implements EnrollmentEndpoint
Immutable binding that maps a SCEP URL label to a CA authority, an issuance profile, and a hashed challenge password.

Endpoints are registered and de-registered via the admin API and held in the ScepService endpoint registry. The label value appears in the SCEP URL path under /scep/{label}.

The challengePasswordHash field stores a SHA-256 hex digest of the SCEP challenge password. Endpoint and control metadata contain only that digest; the exact signed CSR, including its challenge attribute, is retained in the protected PKI request store and its backups for durable enrollment recovery.

Since:
1.0

  • Field Details

    • MAX_LABEL_LENGTH

      public static final int MAX_LABEL_LENGTH
      Maximum permitted label length.
      See Also:

  • Constructor Details

    • ScepEndpoint

      public ScepEndpoint(String label, String authorityId, String profileId, String enrollmentProfileId, String challengePasswordHash)
      Validates all fields.

  • Method Details

    • toString

      public final String toString()
      Returns a string representation of this record class. The representation contains the name of the class, followed by the name and value of each of the record components.
      Specified by:
      toString in class Record
      Returns:
      a string representation of this object

    • hashCode

      public final int hashCode()
      Returns a hash code value for this object. The value is derived from the hash code of each of the record components.
      Specified by:
      hashCode in class Record
      Returns:
      a hash code value for this object

    • equals

      public final boolean equals(Object o)
      Indicates whether some other object is "equal to" this one. The objects are equal if the other object is of the same class and if all the record components are equal. All components in this record class are compared with Objects::equals(Object,Object).
      Specified by:
      equals in class Record
      Parameters:
      o - the object with which to compare
      Returns:
      true if this object is the same as the o argument; false otherwise.

    • label

      public String label()
      Returns the value of the label record component.
      Specified by:
      label in interface EnrollmentEndpoint
      Returns:
      the value of the label record component

    • authorityId

      public String authorityId()
      Returns the value of the authorityId record component.
      Specified by:
      authorityId in interface EnrollmentEndpoint
      Returns:
      the value of the authorityId record component

    • profileId

      public String profileId()
      Returns the value of the profileId record component.
      Specified by:
      profileId in interface EnrollmentEndpoint
      Returns:
      the value of the profileId record component

    • enrollmentProfileId

      public String enrollmentProfileId()
      Returns the value of the enrollmentProfileId record component.
      Specified by:
      enrollmentProfileId in interface EnrollmentEndpoint
      Returns:
      the value of the enrollmentProfileId record component

    • challengePasswordHash

      public String challengePasswordHash()
      Returns the value of the challengePasswordHash record component.
      Returns:
      the value of the challengePasswordHash record component