Package zeroecho.pki.server.spi.v2
package zeroecho.pki.server.spi.v2
Stable server provider contracts for named-module and classpath extensions.
Providers are discovered through ServiceLoader and activated
only by exact configured identity. Duplicate identities across this package and
the retained legacy classpath contracts fail selection. Providers must be
thread-safe and must not expose credentials or protocol material in diagnostics.
Server implementation and persistence types are deliberately absent from these
signatures.
-
ClassDescriptionExplicit evidence-producing ACME challenge-provider SPI.Supported challenge mechanisms.Exact immutable challenge input; values are sensitive and must never be logged.Immutable canonical DNS identifier.Supported ACME identifier kinds.Finite provider result without raw network, DNS, token or response data.Secret-confining external-account-binding verification SPI.Finite EAB policy output without secret material.Exact bounded EAB verification request.Explicit provider for the external administrative-client trust policy used after a trusted proxy forwards a certificate chain.Explicit server-local boundary for lifecycle-confined JSSE key and trust material.