Index (ZeroEcho)

A B C D E F G H I J K L M N O P Q R S T U V W X Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

AA_COMPROMISE - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: Attribute authority is compromised.
ABANDONED_BY_RECOVERY - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: The transaction was durably issued but had no authoritative terminal outcome when recovery closed its preceding recovery epoch.
abort() - Method in interface zeroecho.pki.spi.store.ContentSink: Aborts and removes partial content.
abort() - Method in interface zeroecho.pki.spi.store.MetadataTransaction: Aborts the transaction and releases detached staging resources.
absent(String) - Static method in class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier: Creates an identifier with absent parameters.
ABSENT - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.ParameterRule: Parameters must be absent.
ABSENT - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier.ParameterForm: Parameters are omitted.
accept(PreparedSemanticSigningRequest) - Method in interface zeroecho.pki.api.SemanticSigningService: Transfers exclusive prepared-candidate custody to durable acceptance.
accept(PreparedSemanticSigningRequest) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
accept(PreparedSigningRequest) - Method in interface zeroecho.pki.api.SigningService: Transfers prepared-candidate custody to durable workflow acceptance.
accept(PreparedSigningRequest) - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService
accept(SignWorkflowStore.AcceptanceCommand, Runnable) - Method in interface zeroecho.pki.impl.core.signing.DefaultSigningService.AcceptanceOperation: Accepts under the owning reactor's shutdown gate.
AcceptanceCommand(PkiId, String, SigningProvider.ConfigurationCommitment, AccessContext, KeyRef, PkiId, String, Encoding, Instant, Instant, DurableContentReference, Optional, SignWorkflowStore.Mode, Optional) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Validates immutable command structure and current component bounds.
acceptanceCommitment() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns the value of the acceptanceCommitment record component.
acceptanceCommitment() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the acceptanceCommitment record component.
AcceptanceEnvelope(PkiId, SignWorkflowStore.AcceptanceCommitment, String, SigningProvider.ConfigurationCommitment, AccessContext, KeyRef, PkiId, String, Encoding, Instant, Instant, DurableContentReference, Optional, SignWorkflowStore.Mode, Optional) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Validates one exact immutable envelope.
ACCEPTED - Enum constant in enum class zeroecho.pki.api.signing.SigningAcceptanceDisposition: New durable intent was committed.
ACCEPTED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResult: A new envelope and initial state were committed.
acceptedSourceBytes() - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Returns the value of the acceptedSourceBytes record component.
acceptScheduled(PreparedSemanticSigningRequest, StatusScheduleState.Execution) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService: Accepts a prepared status command with its immutable scheduled authorization.
acceptScheduled(PreparedSigningRequest, StatusScheduleState.Execution) - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService: Accepts a prepared status signature under its durable schedule claim.
acceptScheduled(SignWorkflowStore.AcceptanceCommand, StatusScheduleState.Execution, Runnable) - Method in interface zeroecho.pki.impl.core.signing.DefaultSigningService.AcceptanceOperation: Accepts a scheduled signature under the same custody and shutdown boundary.
acceptScheduledSign(SignWorkflowStore.AcceptanceCommand, StatusScheduleState.Execution) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
acceptScheduledSign(SignWorkflowStore.AcceptanceCommand, StatusScheduleState.Execution) - Method in interface zeroecho.pki.spi.store.PkiStore: Co-commits a claim's receipt with ordinary signing acceptance and reservations.
acceptScheduledSign(SignWorkflowStore.AcceptanceCommand, StatusScheduleState.Execution, Runnable) - Method in class zeroecho.pki.impl.core.signing.SigningReactor: Co-commits scheduled acceptance under the existing shutdown and custody gate.
acceptSign(SignWorkflowStore.AcceptanceCommand) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
acceptSign(SignWorkflowStore.AcceptanceCommand) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Atomically accepts one sealed candidate and publishes its immutable envelope, initial SignWorkflowStore.State.INTENT, unique candidate binding and optional outer operation.
acceptSign(SignWorkflowStore.AcceptanceCommand, Runnable) - Method in class zeroecho.pki.impl.core.signing.SigningReactor: Commits acceptance under the reactor shutdown gate.
AccessAction - Enum Class in zeroecho.pki.api.audit: Action performed on an attribute for access governance.
accessContext() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns the value of the accessContext record component.
accessContext() - Method in record class zeroecho.pki.api.signing.SigningRequest: Returns the value of the accessContext record component.
accessContext() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns the value of the accessContext record component.
accessContext() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the accessContext record component.
accessContext() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the accessContext record component.
accessContext() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the accessContext record component.
AccessContext - Record Class in zeroecho.pki.api.audit: Context used for attribute ACL checks and audit correlation.
AccessContext(Principal, Purpose, Optional, Optional) - Constructor for record class zeroecho.pki.api.audit.AccessContext: Creates an access context.
AccessDecision - Enum Class in zeroecho.pki.api.audit: Decision outcome of an access control check.
accessPolicy() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns the value of the accessPolicy record component.
acknowledge(MetadataTransactionId) - Method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Acknowledges a terminal retained outcome when supported.
acknowledge(MetadataTransactionId) - Method in interface zeroecho.pki.spi.store.TransactionalMetadataStore: Acknowledges a terminal retained outcome when supported.
acme(String, String, String) - Static method in record class zeroecho.pki.application.RevocationExecutionEvidence: Creates authoritative protocol-native ACME evidence.
acme(String, String, String, String, String) - Static method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Creates authoritative protocol-native ACME issuance evidence.
ACME_ACCOUNT - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.ActorType: Protocol-native ACME account.
ACME_ACCOUNT - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.ActorType: Protocol-native ACME account.
ACME_ACCOUNT_JWS - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authentication: ACME account JSON Web Signature authentication.
ACME_ACCOUNT_JWS - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authentication: ACME account JSON Web Signature authentication.
ACME_OWNERSHIP - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authorization: ACME account ownership authorized issuance.
ACME_OWNERSHIP - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authorization: ACME account ownership authorized the operation.
action() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns the value of the action record component.
action() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns the value of the action record component.
ACTIVATED - Enum constant in enum class zeroecho.pki.api.backup.RestoreStatus.State: Replacement was opened, recovered and closed successfully before publication.
activateProfile(String, long) - Method in interface zeroecho.pki.api.ProfileService: Explicitly activates one already imported version.
activateProfile(String, long) - Method in class zeroecho.pki.impl.core.DefaultProfileService
activateProfile(String, long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
activateProfile(String, long) - Method in interface zeroecho.pki.spi.store.PkiStore: Atomically activates one imported version.
ActivateProfile(String, long) - Constructor for record class zeroecho.pki.application.PkiOperation.ActivateProfile: Validates the identity.
ACTIVE - Enum constant in enum class zeroecho.pki.api.ca.CaState: CA is active and may issue new credentials according to policy.
ACTIVE - Enum constant in enum class zeroecho.pki.api.ca.IssuerGenerationState: Available for explicitly selected issuance.
ActiveCertificateProfile - Record Class in zeroecho.pki.api.profile: Validated active profile resolution result used by end-entity issuance.
ActiveCertificateProfile(CertificateProfileRef, CertificateProfileDefinition) - Constructor for record class zeroecho.pki.api.profile.ActiveCertificateProfile: Creates an active profile result.
activeOnly() - Method in record class zeroecho.pki.api.profile.ProfileQuery: Returns the value of the activeOnly record component.
ACTOR_ID - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
ACTOR_ID - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
ACTOR_TYPE - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
ACTOR_TYPE - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
actorId() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the actorId record component.
actorId() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the actorId record component.
actorType() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the actorType record component.
actorType() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the actorType record component.
add(byte[]) - Method in interface zeroecho.pki.spi.store.TemporaryUniqueIndex: Adds one immutable bounded value.
ADMIN_PRINCIPAL - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.ActorType: Authenticated administrative principal.
ADMIN_PRINCIPAL - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.ActorType: Authenticated administrative principal.
administrative(String, String, String, IssuanceExecutionEvidence.Authentication, IssuanceExecutionEvidence.AuthorizationPath, String, String, String) - Static method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Creates authoritative administrative issuance evidence.
administrative(String, String, String, RevocationExecutionEvidence.Authentication, RevocationExecutionEvidence.AuthorizationPath, String, Optional) - Static method in record class zeroecho.pki.application.RevocationExecutionEvidence: Creates authoritative administrative evidence.
adminRequestsTotal() - Method in interface zeroecho.pki.application.DashboardLiveSource: Returns monotonic total admin API requests counted since server start.
advance(SignWorkflowStore.Workflow) - Method in class zeroecho.pki.impl.core.continuation.SigningOuterTerminalDriver
advance(SignWorkflowStore.Workflow) - Method in interface zeroecho.pki.impl.core.signing.SigningStepExecutor.OuterTerminalDriver: Advances a claimed CA-proof verification or an authoritative terminal workflow.
advance(SignWorkflowStore.Workflow, Function, CancellationSignal, Runnable) - Method in class zeroecho.pki.impl.core.signing.SigningStepExecutor: Advances the observed workflow through one claim and its eligible action.
advanceStatusSchedule(StatusScheduleState.Execution) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
advanceStatusSchedule(StatusScheduleState.Execution) - Method in interface zeroecho.pki.spi.store.PkiStore: Advances a committed occurrence without regenerating its effect.
AFFILIATION_CHANGED - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: Subject affiliation has changed.
after() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.api.publication.PublicationQuery: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.application.PkiOperation.ListAuthorities: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerGenerations: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.application.PkiOperation.ListProfiles: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.application.PkiOperation.ListPublications: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.application.PkiOperation.ListRequests: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.application.PkiOperation.ListStatus: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.application.PkiOperation.ListStatusSchedules: Returns the value of the after record component.
after() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns the value of the after record component.
afterExclusive() - Method in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Returns the value of the afterExclusive record component.
algorithm() - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.Integrity: Returns the value of the algorithm record component.
ALGORITHM_MISMATCH - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Requested algorithm does not match the selected key.
algorithmBindingPolicy() - Method in record class zeroecho.pki.api.profile.CertificateProfile: Returns the value of the algorithmBindingPolicy record component.
algorithmBindingPolicy() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the algorithmBindingPolicy record component.
algorithmBindingPolicy() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the X.509 representation selection.
algorithmBindingPolicy() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the X.509 representation selection.
algorithmBindingPolicy() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the X.509 representation selection.
algorithmBindingPolicy() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the X.509 representation selection.
algorithmBindings() - Method in interface zeroecho.pki.application.PkiSession: Returns the immutable active X.509 algorithm-binding registry.
algorithmId() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns the value of the algorithmId record component.
algorithmId() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the algorithmId record component.
algorithmId() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the algorithmId record component.
algorithmId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the algorithmId record component.
algorithmId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the algorithmId record component.
algorithmId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Returns the value of the algorithmId record component.
algorithmIdentity() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the algorithmIdentity record component.
algorithmLength() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CertificateTbsLayout: Returns the value of the algorithmLength record component.
algorithmOffset() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CertificateTbsLayout: Returns the value of the algorithmOffset record component.
algorithms() - Method in record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Returns the value of the algorithms record component.
aliases() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRuleProvider: Returns finite compatibility aliases.
all(String) - Static method in record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Returns a range containing the complete namespace.
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.async.FileBackedAsyncBusProvider
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.audit.FileAuditSinkProvider
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.audit.InMemoryAuditSinkProvider
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.audit.StdoutAuditSinkProvider
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.audit.SyslogAuditSinkProvider
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFrameworkProvider: Allocates a new Bouncy Castle backed X.509 credential framework instance.
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStoreProvider
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.publish.FilesystemPublisherProvider
allocate(ProviderConfig) - Method in class zeroecho.pki.impl.publish.HttpsPublisherProvider
allocate(ProviderConfig) - Method in interface zeroecho.pki.spi.audit.AuditSinkProvider: Opens a new AuditSink instance using the provided configuration.
allocate(ProviderConfig) - Method in interface zeroecho.pki.spi.ConfigurableProvider: Allocates a new instance using the provided configuration.
allocate(ProviderConfig) - Method in interface zeroecho.pki.spi.framework.CredentialFrameworkProvider: Allocates a credential framework instance using the provided configuration.
allocate(ProviderConfig) - Method in interface zeroecho.pki.spi.store.PkiStoreProvider: Opens a new PkiStore instance using the provided configuration.
allocate(ProviderConfig, SigningProviderRuntimeDependencies) - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory
allocate(ProviderConfig, SigningProviderRuntimeDependencies) - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory
allocate(ProviderConfig, SigningProviderRuntimeDependencies) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory: Allocates a signing provider using explicit runtime dependencies.
allocate(ProviderConfig, SigningProviderRuntimeDependencies) - Method in interface zeroecho.pki.spi.crypto.SigningProviderFactory: Allocates a provider with explicit process-local runtime dependencies.
allocate(ProviderConfig, PkiStoreRuntimeDependencies) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStoreProvider
allocate(ProviderConfig, PkiStoreRuntimeDependencies) - Method in interface zeroecho.pki.spi.store.PkiStoreProvider: Opens a store with explicit process-local runtime dependencies.
ALLOW - Enum constant in enum class zeroecho.pki.api.audit.AccessDecision: Access is allowed.
ALLOW - Enum constant in enum class zeroecho.pki.api.policy.PolicyDecisionStatus: Operation is allowed under current policy.
ALLOW_WITH_MODIFICATIONS - Enum constant in enum class zeroecho.pki.api.policy.PolicyDecisionStatus: Operation is allowed, but policy requires modifications (e.g., validity truncation).
allowDnsWildcard() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns the value of the allowDnsWildcard record component.
ALLOWED - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authorization: Administrative policy allowed issuance.
ALLOWED - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authorization: Administrative policy allowed the operation.
allowedSubjectKeyAlgorithmIds() - Method in record class zeroecho.pki.api.profile.CaCertificatePolicy: Returns the value of the allowedSubjectKeyAlgorithmIds record component.
allowedSubjectKeyAlgorithmIds() - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Returns the value of the allowedSubjectKeyAlgorithmIds record component.
allowedUriSchemes() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns the value of the allowedUriSchemes record component.
allowEmpty() - Method in record class zeroecho.pki.api.profile.SubjectPolicy: Returns the value of the allowEmpty record component.
allowIpv4() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNameRule: Returns the value of the allowIpv4 record component.
allowIpv6() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNameRule: Returns the value of the allowIpv6 record component.
allowOverwrite() - Method in record class zeroecho.pki.api.transfer.ImportPolicy: Returns the value of the allowOverwrite record component.
altKeyRef() - Method in record class zeroecho.pki.api.ca.CaCreateCommand: Returns the value of the altKeyRef record component.
altKeyRef() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.AltSignature: Returns the value of the altKeyRef record component.
AltSignature(String, String) - Constructor for record class zeroecho.pki.api.hybrid.HybridCertificateMode.AltSignature: Creates an AltSignature mode descriptor.
altSignatureAlgorithm(AlgorithmIdentifier) - Static method in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: Creates an AltSignatureAlgorithm extension from a ZeroEcho AlgorithmIdentifier.
altSignatureAlgorithmId() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.AltSignature: Returns the value of the altSignatureAlgorithmId record component.
AltSignatureExtensions - Class in zeroecho.pki.impl.hybrid: DER encoding helpers for X.509 2019 Amendment 2 alternative-signature extensions.
altSignatureValue(byte[]) - Static method in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: Creates an AltSignatureValue extension from raw signature bytes.
altSignatureValuePlaceholder(int) - Static method in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: Creates a zero-valued extension for legacy callers and diagnostic fixtures.
AltSigningCapability - Interface in zeroecho.pki.spi.crypto: Optional extension for signing providers capable of performing a direct synchronous alternative signature without the full signing infrastructure.
AMBIGUOUS_IMPLEMENTATION - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: More than one implementation remains without explicit selection.
API - Enum constant in enum class zeroecho.pki.api.attr.AttributeExportTarget: Export via a programmatic API.
API stability and integration - Section in package zeroecho.pki.api.orch
append(CtJournalEntry) - Method in class zeroecho.pki.impl.fs.ct.FsCtJournalStore
append(CtJournalEntry) - Method in interface zeroecho.pki.spi.ct.CtJournalStore: Appends one entry to the journal and fsyncs the backing store.
appendLine(String) - Method in class zeroecho.pki.util.async.impl.AppendOnlyLineStore: Appends a single line (with trailing '\n') to the store.
AppendOnlyLineStore - Class in zeroecho.pki.util.async.impl: Append-only UTF-8 line store with best-effort POSIX permissions.
AppendOnlyLineStore(Path) - Constructor for class zeroecho.pki.util.async.impl.AppendOnlyLineStore: Creates a store backed by the provided file path.
appliedOverrides() - Method in record class zeroecho.pki.api.policy.PolicyDecision: Returns the value of the appliedOverrides record component.
APPROVAL - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.AuthorizationPath: Explicit approval workflow.
APPROVAL - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.AuthorizationPath: Explicit approval workflow.
approvalPendingTotal() - Method in interface zeroecho.pki.application.DashboardLiveSource: Returns unexpired approvals currently in PENDING state across all CAs.
approvalRequirement() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the approvalRequirement record component.
Architectural boundaries - Section in package zeroecho.pki.impl.core
Architectural boundaries - Section in package zeroecho.pki.impl.framework.x509.bc
Architectural note - Section in class zeroecho.pki.impl.framework.x509.bc.OidAlgorithmMapper
Architectural role - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509FrameworkAttributeMapper
Architectural role - Section in interface zeroecho.pki.spi.framework.CredentialIssuerBackend
Architectural role - Section in package zeroecho.pki.impl.crypto.zeroecholib
artifact() - Method in record class zeroecho.pki.api.backup.RestoreRequest: Returns the value of the artifact record component.
Artifacts - Section in package zeroecho.pki.api.publication
AsyncBus<OpId, Owner, EndpointId, Result> - Interface in zeroecho.pki.util.async: Generic asynchronous operation bus.
AsyncBusProvider - Interface in zeroecho.pki.spi.async: ServiceLoader provider for the PKI asynchronous operation bus.
Async bus sweep - Section in class zeroecho.pki.PkiApplication
AsyncEndpoint<OpId,Res> - Interface in zeroecho.pki.util.async: Target endpoint that owns/executes operations and can be asked for their status.
AsyncEvent<OpId,Owner,Eid,Result> - Record Class in zeroecho.pki.util.async: Event delivered to registered handlers whenever an operation status changes.
AsyncEvent(AsyncOperationSnapshot, AsyncStatus, Optional) - Constructor for record class zeroecho.pki.util.async.AsyncEvent: Creates an event.
AsyncHandler<OpId,Owner,Eid,Result> - Interface in zeroecho.pki.util.async: Callback handler for async operation events.
AsyncOperationSnapshot<OpId, Owner, EndpointId> - Record Class in zeroecho.pki.util.async: Immutable snapshot of an operation's identity and routing metadata.
AsyncOperationSnapshot(OpId, String, Owner, EndpointId, Instant, Instant) - Constructor for record class zeroecho.pki.util.async.AsyncOperationSnapshot: Creates a snapshot and validates invariants.
AsyncRegistration - Interface in zeroecho.pki.util.async: Registration handle for a handler subscription.
AsyncState - Enum Class in zeroecho.pki.util.async: Lifecycle state of an asynchronous operation.
AsyncStatus - Record Class in zeroecho.pki.util.async: Non-sensitive status snapshot of an asynchronous operation.
AsyncStatus(AsyncState, Instant, Optional, Map) - Constructor for record class zeroecho.pki.util.async.AsyncStatus: Creates a status record and validates invariants.
ATTACHED_EXISTING - Enum constant in enum class zeroecho.pki.api.signing.SigningAcceptanceDisposition: The exact acceptance or matching semantic issuance already existed; the result names its receipt.
ATTACHED_EXISTING - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResult: The exact immutable acceptance was already committed.
ATTEMPT_NUMBER - Static variable in record class zeroecho.pki.application.PublicationExecutionEvidence: Evidence attribute vocabulary.
attemptNumber() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the attemptNumber record component.
attemptNumber() - Method in record class zeroecho.pki.api.publication.PublicationResult: Returns the value of the attemptNumber record component.
attemptNumber() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns the value of the attemptNumber record component.
attemptNumber() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns the value of the attemptNumber record component.
attemptToken() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the attemptToken record component.
attemptToken() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns the value of the attemptToken record component.
AttributeAccessController - Interface in zeroecho.pki.api.audit: Policy decision point for attribute-level access control.
AttributeAccessPolicy - Record Class in zeroecho.pki.api.attr: Governance hints controlling auditing and exportability of an attribute.
AttributeAccessPolicy(boolean, boolean, Set) - Constructor for record class zeroecho.pki.api.attr.AttributeAccessPolicy: Creates an access policy.
AttributeCatalogue - Interface in zeroecho.pki.api.attr: Registry/catalogue of attribute definitions.
AttributeDefinition - Record Class in zeroecho.pki.api.attr: Typed and governed attribute definition used across credential frameworks.
AttributeDefinition(AttributeId, String, AttributeValueType, boolean, AttributeSensitivity, AttributeStability, AttributeAccessPolicy, AttributeMeta) - Constructor for record class zeroecho.pki.api.attr.AttributeDefinition: Creates an attribute definition.
AttributeExportTarget - Enum Class in zeroecho.pki.api.attr: Named export targets used by governance and publication pipelines.
AttributeGovernanceService - Interface in zeroecho.pki.api.audit: Policy enforcement point for attribute access with mandatory auditing.
AttributeId - Record Class in zeroecho.pki.api.attr: Stable attribute identifier used by the attribute catalogue.
AttributeId(String) - Constructor for record class zeroecho.pki.api.attr.AttributeId: Creates an attribute identifier.
attributeMapper() - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework: Returns the framework-specific attribute mapper used by this framework instance.
attributeMapper() - Method in interface zeroecho.pki.spi.framework.CredentialFramework: Returns the framework attribute mapper.
AttributeMeta - Record Class in zeroecho.pki.api.attr: Structured, human-facing documentation metadata for an attribute definition.
AttributeMeta(String, List, List, List, Map) - Constructor for record class zeroecho.pki.api.attr.AttributeMeta: Creates attribute metadata.
attributes() - Method in record class zeroecho.pki.api.backup.BackupRequest: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.backup.RestoreRequest: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.ca.CaCreateCommand: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns the value of the attributes record component.
attributes() - Method in interface zeroecho.pki.api.ca.CaKeyRotationCommand: Returns immutable universal attributes.
attributes() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Intermediate: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Root: Returns the value of the attributes record component.
attributes() - Method in interface zeroecho.pki.api.ca.CaRolloverCommand: Returns immutable universal attributes.
attributes() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Intermediate: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Root: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.ca.IntermediateCreateCommand: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the attributes record component.
attributes() - Method in interface zeroecho.pki.api.revocation.RevocationCommand: Returns an immutable snapshot of safe administrative metadata.
attributes() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Hold: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.RevokePermanently: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Unhold: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.revocation.RevocationInputs: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.revocation.RevocationTransition: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.status.StatusObject: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.status.StatusObjectGenerateCommand: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.api.transfer.ImportPolicy: Returns the value of the attributes record component.
attributes() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns an immutable set containing only the closed evidence vocabulary.
attributes() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns an immutable set containing only the closed evidence vocabulary.
attributes() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns an immutable set containing only the closed evidence vocabulary.
attributes() - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Returns an immutable set containing only the closed evidence vocabulary.
attributes() - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Returns an immutable set containing only the closed evidence vocabulary.
attributes() - Method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Encodes exactly four typed scalar attributes; no payload or workflow reference is retained.
AttributeSensitivity - Enum Class in zeroecho.pki.api.attr: Data sensitivity classification for an attribute.
AttributeSet - Interface in zeroecho.pki.api.attr: Immutable set of typed attributes.
AttributeStability - Enum Class in zeroecho.pki.api.attr: Lifecycle maturity of an attribute definition.
AttributeValue - Interface in zeroecho.pki.api.attr: Typed attribute value.
AttributeValue.BooleanValue - Record Class in zeroecho.pki.api.attr: Boolean value.
AttributeValue.BytesValue - Record Class in zeroecho.pki.api.attr: Byte string value.
AttributeValue.InstantValue - Record Class in zeroecho.pki.api.attr: Instant value.
AttributeValue.IntegerValue - Record Class in zeroecho.pki.api.attr: Integer/long value.
AttributeValue.StringValue - Record Class in zeroecho.pki.api.attr: String value.
AttributeValueType - Enum Class in zeroecho.pki.api.attr: Declares the logical value type of an attribute.
audience() - Method in record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Returns the value of the audience record component.
audit() - Method in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Returns the value of the audit record component.
audit() - Method in record class zeroecho.pki.application.PkiSessionConfiguration: Returns the value of the audit record component.
AuditChainHead - Record Class in zeroecho.pki.api.audit: Immutable anchor describing the tamper-evident head of an append-only audit log: the highest assigned record sequence and the record hash that closes the hash chain at that point.
AuditChainHead(long, String) - Constructor for record class zeroecho.pki.api.audit.AuditChainHead: Validates the head anchor.
AuditEvent - Record Class in zeroecho.pki.api.audit: Auditable event emitted by the PKI core and governance layer.
AuditEvent(Instant, String, String, Principal, Purpose, Optional, Optional, Map) - Constructor for record class zeroecho.pki.api.audit.AuditEvent: Creates an audit event and validates record invariants.
AuditEvidenceFeed - Interface in zeroecho.pki.spi.store: Closeable append-ordered feed over one family's co-committed success-evidence log.
AuditEvidenceFeed.Entry - Record Class in zeroecho.pki.spi.store: One append entry.
AuditIntegrityReport - Record Class in zeroecho.pki.api.audit: Safe result of verifying the tamper-evident hash chain over an append-only audit log.
AuditIntegrityReport(AuditIntegrityReport.Status, long, Optional, AuditChainHead) - Constructor for record class zeroecho.pki.api.audit.AuditIntegrityReport: Validates the report.
AuditIntegrityReport.Status - Enum Class in zeroecho.pki.api.audit: Closed classification of an audit integrity verification.
AuditIntegrityService - Interface in zeroecho.pki.api.audit: Verifies the tamper-evidence of a hash-chained audit log.
auditOnAllow() - Method in record class zeroecho.pki.api.attr.AttributeAccessPolicy: Returns the value of the auditOnAllow record component.
auditOnDeny() - Method in record class zeroecho.pki.api.attr.AttributeAccessPolicy: Returns the value of the auditOnDeny record component.
auditOrder() - Static method in record class zeroecho.pki.api.audit.AuditEvent: Returns a deterministic comparator for audit events.
auditProjectionFailureTotal() - Method in interface zeroecho.pki.application.DashboardLiveSource: Returns sum of consecutive failure counts across all active audit projection workers.
AuditQuery - Record Class in zeroecho.pki.api.audit: Query constraints for searching audit events.
AuditQuery(Optional, Optional, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.audit.AuditQuery: Creates a query with no detail filter and the maximum bound; retained so existing six-argument callers remain source-compatible.
AuditQuery(Optional, Optional, Optional, Optional, Optional, Optional, Map, int) - Constructor for record class zeroecho.pki.api.audit.AuditQuery: Creates a bounded audit query.
AuditService - Interface in zeroecho.pki.api.audit: Records and queries audit events for PKI operations and attribute governance.
auditSink() - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns the value of the auditSink record component.
AuditSink - Interface in zeroecho.pki.spi.audit: SPI for persisting audit events.
AuditSinkProvider - Interface in zeroecho.pki.spi.audit: ServiceLoader provider for AuditSink implementations.
AUTHENTICATED - Enum constant in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: Retrieval requires an authenticated principal in the configured scope.
authentication() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the authentication record component.
authentication() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the authentication record component.
AUTHENTICATION - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
AUTHENTICATION - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
AUTHENTICATION_FAILURE - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: The caller's identity or presented authentication evidence could not be established.
AUTHENTICATION_FAILURE - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic failure to establish the caller's identity.
authorities(Optional, int) - Method in interface zeroecho.pki.application.PkiRepository: Returns a finite canonical authority page.
authority() - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework: Returns the immutable algorithm authority owned by this framework graph.
authority(PkiId) - Method in interface zeroecho.pki.application.PkiRepository: Returns an exact logical authority.
authorityFingerprint() - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Returns the value of the authorityFingerprint record component.
authorityId() - Method in record class zeroecho.pki.api.ca.IssuerChainPath: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.OcspResponder: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerGenerations: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns the value of the authorityId record component.
authorityId() - Method in class zeroecho.pki.application.PkiRepositoryContent: Returns the owning authority.
authorityId() - Method in record class zeroecho.pki.application.PkiResourceScopeResolver.CredentialScope: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the authorityId record component.
authorityId() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns the value of the authorityId record component.
authorityId(ManagedKeyProofRequest) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Returns the exact request authority for separate trusted scheduling metadata.
authorization() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the authorization record component.
authorization() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the authorization record component.
AUTHORIZATION - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
AUTHORIZATION - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
AUTHORIZATION_DENIED - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: The authenticated caller is not authorized to perform the requested operation.
AUTHORIZATION_DENIED - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic denial of an operation to an authenticated caller.
AUTHORIZATION_PATH - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
AUTHORIZATION_PATH - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
authorizationPath() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the authorizationPath record component.
authorizationPath() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the authorizationPath record component.
authorize(X509ExecutionPlan, Object, AlgorithmExecutionCapability.Direction) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Validates an execution plan immediately before invoking its executor.
authorizedOidRoots() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.BindingProviderConfiguration: Returns the value of the authorizedOidRoots record component.
available(long) - Static method in record class zeroecho.pki.application.DashboardLiveSource.Metric: Creates a measurement from a real observation, including zero.
AVAILABLE - Enum constant in enum class zeroecho.pki.application.DashboardLiveSource.State: A real measurement, including zero.
await(PkiId, CancellationSignal) - Method in interface zeroecho.pki.impl.core.signing.DefaultSigningService.ObservationWait: Waits for the authoritative bounded initial-attempt outcome.
awaitBoundedObservation(PkiId, CancellationSignal) - Method in interface zeroecho.pki.api.SigningService: Waits for the accepted bounded initial attempt and returns the current retained operation snapshot.
awaitBoundedObservation(PkiId, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService
awaitBoundedObservation(PkiId, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.SigningReactor: Waits for the durable outcome of a bounded initial attempt.

B

backendId() - Method in record class zeroecho.pki.spi.ProviderConfig: Returns the value of the backendId record component.
backup() - Method in interface zeroecho.pki.application.PkiSession: Returns the backup service when the underlying store supports backup operations.
BACKUP - Enum constant in enum class zeroecho.pki.api.attr.AttributeExportTarget: Export to backups.
BackupArtifact - Record Class in zeroecho.pki.api.backup: Opaque backup artifact produced by BackupService.
BackupArtifact(PkiId, EncodedObject) - Constructor for record class zeroecho.pki.api.backup.BackupArtifact: Creates a backup artifact.
backupId() - Method in record class zeroecho.pki.api.backup.BackupArtifact: Returns the value of the backupId record component.
backupId() - Method in interface zeroecho.pki.api.backup.BackupPreparation: Returns the identifier from the verified manifest.
backupId() - Method in interface zeroecho.pki.api.backup.BackupSource: Returns the identifier committed by the backup manifest.
BackupLimits - Record Class in zeroecho.pki.api.backup: Resource limits for the version-1 backup envelope.
BackupLimits(long, long, long, int, int, int, int, int, int) - Constructor for record class zeroecho.pki.api.backup.BackupLimits: Validates all positive limits and ZIP32 representation bounds.
BackupPreparation - Interface in zeroecho.pki.api.backup: Verified, close-owned staging for a future cold activation coordinator.
BackupRequest - Record Class in zeroecho.pki.api.backup: Requests creation of a PKI backup.
BackupRequest(String, AttributeSet) - Constructor for record class zeroecho.pki.api.backup.BackupRequest: Creates a backup request.
BackupService - Interface in zeroecho.pki.api: Backup/restore operations for PKI state.
BackupSink - Interface in zeroecho.pki.api.backup: Bounded file-backed ingestion.
BackupSource - Interface in zeroecho.pki.api.backup: Repeatable file-backed backup input with an explicit owner.
BackupVerificationReport - Record Class in zeroecho.pki.api.backup: Verification results for a backup artifact.
BackupVerificationReport(boolean, List) - Constructor for record class zeroecho.pki.api.backup.BackupVerificationReport: Creates a backup verification report.
base() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the base record component.
BASE_CRL_NUMBER - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for the base CRL number a delta CRL is computed against.
baseUrl() - Method in record class zeroecho.pki.api.ct.CtLogDescriptor: Returns the value of the baseUrl record component.
basicConstraintsCritical() - Method in record class zeroecho.pki.api.profile.CaCertificatePolicy: Returns the value of the basicConstraintsCritical record component.
basicConstraintsCritical() - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Returns the value of the basicConstraintsCritical record component.
basicConstraintsCritical() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the leaf BasicConstraints criticality.
basicConstraintsCritical() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the leaf BasicConstraints criticality.
BcX509AlgorithmAdapter - Class in zeroecho.pki.impl.framework.x509.bc: Edge adapter between the provider-neutral X.509 binding authority and the ZeroEcho PKIX library's AlgorithmIdentifier value type.
BcX509AlgorithmAdapter(X509BindingCatalog) - Constructor for class zeroecho.pki.impl.framework.x509.bc.BcX509AlgorithmAdapter: Creates an adapter for one immutable catalog snapshot.
BcX509Attributes - Class in zeroecho.pki.impl.framework.x509.bc: Internal attribute identifiers used by the Bouncy Castle backed X.509 PKI framework adapter.
BcX509CertificationRequestParser - Class in zeroecho.pki.impl.framework.x509.bc: Parser for X.509 PKCS#10 certification requests, routed through the ZeroEcho PKIX library.
BcX509CertificationRequestParser() - Constructor for class zeroecho.pki.impl.framework.x509.bc.BcX509CertificationRequestParser: Creates a stateless PKCS#10 request parser.
BcX509CredentialFramework - Class in zeroecho.pki.impl.framework.x509.bc: Bouncy Castle backed X.509 implementation of CredentialFramework.
BcX509CredentialFramework(X509AuthoritySnapshot, BcX509VerificationExecutor) - Constructor for class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework: Creates a partially wired X.509 framework instance with default components.
BcX509CredentialFrameworkProvider - Class in zeroecho.pki.impl.framework.x509.bc: ServiceLoader provider for the Bouncy Castle backed X.509 credential framework.
BcX509CredentialFrameworkProvider() - Constructor for class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFrameworkProvider: Creates a provider that supplies the Bouncy Castle X.509 framework.
BcX509FrameworkAttributeMapper - Class in zeroecho.pki.impl.framework.x509.bc: Minimal framework attribute mapper for the internal Bouncy Castle backed X.509 adapter.
BcX509FrameworkAttributeMapper() - Constructor for class zeroecho.pki.impl.framework.x509.bc.BcX509FrameworkAttributeMapper: Creates the stateless X.509 framework attribute mapper.
BcX509ProfileSupport - Class in zeroecho.pki.impl.framework.x509.bc: Exact X.509 representation and postcondition helpers for validated leaf profiles, expressed in terms of the ZeroEcho PKIX library and standard JDK certificate accessors.
BcX509ProofOfPossessionVerifier - Class in zeroecho.pki.impl.framework.x509.bc: Immutable proof verifier for exact PKCS#10 and signing-key CRMF requests.
BcX509ProofOfPossessionVerifier(X509AuthoritySnapshot, BcX509VerificationExecutor) - Constructor for class zeroecho.pki.impl.framework.x509.bc.BcX509ProofOfPossessionVerifier: Creates a verifier backed by one runtime authority and its exact executor.
BcX509PublicKeyAdapter - Class in zeroecho.pki.impl.framework.x509.bc: Adapter for binding-owned SubjectPublicKeyInfo encodings, expressed entirely in terms of canonical DER byte arrays and the ZeroEcho PKIX library.
BcX509PublicKeyAdapter(X509BindingCatalog) - Constructor for class zeroecho.pki.impl.framework.x509.bc.BcX509PublicKeyAdapter: Creates an adapter for one immutable binding catalog.
BcX509RequestPayloads - Class in zeroecho.pki.impl.framework.x509.bc: Closed extraction boundary for original X.509 enrollment transport attributes.
BcX509SignedObjectValidator - Class in zeroecho.pki.impl.framework.x509.bc: Edge inspection of a canonically validated signed X.509 object.
BcX509SignedObjectValidator(X509AuthoritySnapshot) - Constructor for class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator: Creates a validator owned by one immutable authority snapshot.
BcX509SignedObjectValidator.CertificateBindings - Record Class in zeroecho.pki.impl.framework.x509.bc: Exact role-specific identities extracted from validated original DER.
BcX509VerificationExecutor - Class in zeroecho.pki.impl.framework.x509.bc: Stateless verification executor at the X.509 adapter edge.
BcX509VerificationExecutor() - Constructor for class zeroecho.pki.impl.framework.x509.bc.BcX509VerificationExecutor: Creates a stateless X.509 verification executor.
before() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns the value of the before record component.
before() - Method in record class zeroecho.pki.api.publication.PublicationQuery: Returns the value of the before record component.
beginContent(Encoding, DurableContentReference.Lifecycle) - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
beginContent(Encoding, DurableContentReference.Lifecycle) - Method in interface zeroecho.pki.spi.store.StagedContentStore: Begins an atomic staged write.
beginEvaluation() - Method in interface zeroecho.pki.api.credential.EffectiveCredentialStatusResolver: Starts one status evaluation using one captured authoritative time.
beginEvaluation() - Method in class zeroecho.pki.impl.core.StoreBackedEffectiveCredentialStatusResolver
beginTransaction() - Method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Begins a single-use store-issued transaction.
beginTransaction() - Method in interface zeroecho.pki.spi.store.TransactionalMetadataStore: Begins a single-use store-issued transaction.
beginUniqueIndex() - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
beginUniqueIndex() - Method in interface zeroecho.pki.spi.store.StagedContentStore: Begins one file-backed uniqueness index for bounded individual values.
BINARY - Enum constant in enum class zeroecho.pki.api.Encoding: Raw binary blob without implying ASN.1 DER or PEM semantics.
BINARY_ARCHIVE - Enum constant in enum class zeroecho.pki.api.transfer.ExportFormat: Export as a binary archive (tar/zip-like).
bindExecutor(String, AlgorithmExecutionCapability.Direction, Object) - Static method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Creates one exact process-local executor binding.
binding() - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Returns the value of the binding record component.
bindingId() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the bindingId record component.
bindingId() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.BindingReference: Returns the value of the bindingId record component.
bindingId() - Method in record class zeroecho.pki.application.PkiOperation.InspectAlgorithmBinding: Returns the value of the bindingId record component.
bindingId() - Method in record class zeroecho.pki.application.PkiOperation.ValidateAlgorithmBindings: Returns the value of the bindingId record component.
bindingId(X509AlgorithmIdentifier, X509AlgorithmRole) - Method in class zeroecho.pki.impl.framework.x509.X509BindingCatalog: Returns the stable binding identifier owning an exact representation.
BindingProviderConfiguration(String, List, Optional) - Constructor for record class zeroecho.pki.application.PkiSessionConfiguration.BindingProviderConfiguration: Validates and snapshots the activation.
bindingProviders() - Method in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Returns the value of the bindingProviders record component.
bindingProviders() - Method in record class zeroecho.pki.application.PkiSessionConfiguration: Returns the value of the bindingProviders record component.
BindingReference(String, String) - Constructor for record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.BindingReference: Validates one binding reference.
bindings() - Method in interface zeroecho.pki.api.algorithm.X509AlgorithmBindingRegistry: Returns all active bindings in deterministic order.
bindings() - Method in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry
bindings() - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Returns the binding catalog snapshot.
bindings() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRule: Returns the finite safe descriptors owned by this encoding rule.
bindings() - Method in interface zeroecho.pki.spi.algorithm.X509AlgorithmBindingProvider: Returns the contributed binding descriptors.
bindingSetVersion() - Method in interface zeroecho.pki.spi.algorithm.X509AlgorithmBindingProvider: Returns the contributed binding-set version.
BIT_STRING_TAG - Static variable in class zeroecho.pki.impl.framework.x509.StreamingDerWriter: DER universal BIT STRING tag.
BOOLEAN - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: Boolean value.
BooleanValue(boolean) - Constructor for record class zeroecho.pki.api.attr.AttributeValue.BooleanValue: Creates an instance of a BooleanValue record class.
BooleanValue(boolean) - Constructor for record class zeroecho.pki.application.PkiOperationValue.BooleanValue: Creates an instance of a BooleanValue record class.
boundary() - Method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Returns the value of the boundary record component.
boundary() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot: Returns the captured log boundary.
BOUNDED_OBSERVATION - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.Mode: Raw signing with one durable initial dispatch and observation budget.
BREAK_GLASS - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.AuthorizationPath: Audited emergency break-glass path.
BREAK_GLASS - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.AuthorizationPath: Audited emergency break-glass path.
brokenAtSequences() - Method in record class zeroecho.pki.spi.ct.CtJournalVerificationResult: Returns the value of the brokenAtSequences record component.
build() - Method in class zeroecho.pki.impl.core.attr.SimpleAttributeSet.Builder: Builds a new immutable attribute set from the builder contents.
build() - Method in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet.Builder: Builds a new immutable SimpleAttributeSet from the current builder contents.
buildBundle(BundleCommand) - Method in interface zeroecho.pki.api.IssuanceService: Builds a distributable bundle for an existing credential using chain selection rules.
builder() - Static method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Creates a new mutable builder for assembling a SimpleAttributeSet.
builder() - Static method in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet: Creates a mutable builder for assembling a SimpleAttributeSet.
BUILT_IN_PROFILE_INVALID - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: A built-in profile definition is invalid.
builtIn() - Static method in class zeroecho.pki.impl.framework.x509.X509ComponentCatalog: Returns immutable built-in components.
builtIn() - Method in record class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Component: Returns the value of the builtIn record component.
builtIn(List) - Static method in class zeroecho.pki.impl.framework.x509.X509BindingCatalog: Creates the immutable built-in catalog.
BUILTIN_PREFIX - Static variable in class zeroecho.pki.impl.framework.x509.X509BindingCatalog: Prefix reserved for built-in binding identifiers.
BuiltInCertificateProfileCatalog - Class in zeroecho.pki.api.profile: Loader for the fixed built-in certificate-profile resource catalogue.
BuiltInCertificateProfileTemplate - Class in zeroecho.pki.api.profile: Immutable built-in certificate-profile provisioning template.
BUNDLE_DELIVERY - Enum constant in enum class zeroecho.pki.api.credential.CredentialUse: Leaf credential delivered in a trusted credential bundle.
BundleCommand - Record Class in zeroecho.pki.api.issuance: Command to build a distributable bundle for an existing credential.
BundleCommand(PkiId, Optional, Optional) - Constructor for record class zeroecho.pki.api.issuance.BundleCommand: Creates a bundle command.
BY_KEY - Enum constant in enum class zeroecho.pki.application.OcspResponseService.ResponderId: Identifies the responder by its public-key hash.
BY_NAME - Enum constant in enum class zeroecho.pki.application.OcspResponseService.ResponderId: Identifies the responder by its distinguished name.
BYTE_LENGTH - Static variable in class zeroecho.pki.spi.crypto.SigningProvider.ConfigurationCommitment: Required commitment length in bytes.
byteLength() - Method in record class zeroecho.pki.api.EncodedObject: Returns the exact payload length without copying or exposing the payload.
bytes() - Method in record class zeroecho.pki.api.EncodedObject: Returns a defensive copy of the encoded payload.
bytes() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.IpAddress: Returns a defensive copy of the encoded IP address.
bytes() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofResponse: Returns a defensive copy of the response.
bytes() - Method in class zeroecho.pki.spi.crypto.SigningProvider.ConfigurationCommitment: Returns an independent copy.
BYTES - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: Raw byte string.
bytesAppended() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns the value of the bytesAppended record component.
BytesValue(byte[]) - Constructor for record class zeroecho.pki.api.attr.AttributeValue.BytesValue: Creates a byte string value.

C

CA - Enum constant in enum class zeroecho.pki.api.signing.SemanticSigningKind: Root or intermediate authority lifecycle.
CA - Enum constant in enum class zeroecho.pki.spi.store.DomainContinuationStore.Kind: Root or intermediate CA command.
CA_CERTIFICATE - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: The parent's final certificate provider step is current.
CA_CERTIFICATE_READY - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: Proof verification succeeded; certificate dispatch has not started.
CA_COMPROMISE - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: CA private key is compromised.
CA_PROOF - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: The distinct subject-key proof provider step is current.
CA_PROOF_VERIFYING - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: A retained proof signature awaits local cryptographic verification.
CA_SUBJECT_KEY - Enum constant in enum class zeroecho.pki.api.signing.ManagedKeyProofPurpose: Possession of a CA subject key.
CaCertificatePolicy - Record Class in zeroecho.pki.api.profile: Immutable issuer-controlled CA certificate policy.
CaCertificatePolicy(boolean, int, boolean, Set, Set) - Constructor for record class zeroecho.pki.api.profile.CaCertificatePolicy: Validates and constructs the CA policy.
cacheKiB() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions.CredentialSearch: Returns the value of the cacheKiB record component.
CaContext(PkiId, String) - Constructor for record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.CaContext: Validates canonical bounded context without store or algorithm lookup.
CaCreateCommand - Record Class in zeroecho.pki.api.ca: Command to create a new root CA entity and issue its initial CA credential.
CaCreateCommand(FormatId, SubjectRef, String, KeyRef, Optional, AttributeSet) - Constructor for record class zeroecho.pki.api.ca.CaCreateCommand: Creates a CA create command.
CaCreateCommand(FormatId, SubjectRef, String, KeyRef, AttributeSet) - Constructor for record class zeroecho.pki.api.ca.CaCreateCommand: Creates a CA create command without an explicit alternative key reference.
caHistoryPolicy() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the caHistoryPolicy record component.
caId() - Method in interface zeroecho.pki.api.ca.CaKeyRotationCommand: Returns CA entity identifier.
caId() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Intermediate: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Root: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns the value of the caId record component.
caId() - Method in interface zeroecho.pki.api.ca.CaRolloverCommand: Returns CA entity identifier.
caId() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Intermediate: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Root: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.api.IssuerRef: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.InspectAuthority: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.InspectStatusSchedule: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.QueryAuthorityMetrics: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.QueryCertificateMetrics: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.QueryPublicationMetrics: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.QueryRevocationMetrics: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.RegisterIssuerChainPath: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiOperation.TransitionAuthority: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiSigningOperation.RolloverCaCertificate: Returns the value of the caId record component.
caId() - Method in record class zeroecho.pki.application.PkiSigningOperation.RotateCaKey: Returns the value of the caId record component.
CaImportCommand - Record Class in zeroecho.pki.api.ca: Command to import an existing root CA credential into PKI inventory.
CaImportCommand(PkiId, FormatId, SubjectRef, String, KeyRef, PkiId, DurableContentReference, AttributeSet) - Constructor for record class zeroecho.pki.api.ca.CaImportCommand: Creates a CA import command.
CaKeyRotationCommand - Interface in zeroecho.pki.api.ca: Command to rotate a CA key reference and issue new corresponding CA credentials.
CaKeyRotationCommand.Intermediate - Record Class in zeroecho.pki.api.ca: Intermediate rotation with a new managed key.
CaKeyRotationCommand.Root - Record Class in zeroecho.pki.api.ca: Root rotation with an explicitly provisioned new key.
CaKeyUsage - Enum Class in zeroecho.pki.api.profile: Closed X.509 key-usage set available to CA certificate profiles.
CaKind - Enum Class in zeroecho.pki.api.ca: Classifies CA entity type.
CallControl(Instant, CancellationSignal) - Constructor for record class zeroecho.pki.spi.crypto.SigningProvider.CallControl: Validates one call control.
CALLER_REQUESTED - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.CancellationReason: Explicit caller cancellation.
cancel(String, long, String, RemoteSigningTransport.RemoteCallControl) - Method in class zeroecho.pki.impl.crypto.remote.http.HttpsRemoteSigningTransport
cancel(String, long, String, RemoteSigningTransport.RemoteCallControl) - Method in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport: Requests cancellation of one remote operation.
cancel(PkiId) - Method in interface zeroecho.pki.api.SemanticSigningService: Requests durable signing cancellation for a semantic operation.
cancel(PkiId) - Method in interface zeroecho.pki.api.SigningService: Requests durable cancellation and returns the authoritative result.
cancel(PkiId) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
cancel(PkiId) - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService
cancel(PkiId, long, SigningProvider.CancellationReason, SigningProvider.CallControl) - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProvider
cancel(PkiId, long, SigningProvider.CancellationReason, SigningProvider.CallControl) - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider
cancel(PkiId, long, SigningProvider.CancellationReason, SigningProvider.CallControl) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
cancel(PkiId, long, SigningProvider.CancellationReason, SigningProvider.CallControl) - Method in interface zeroecho.pki.spi.crypto.SigningProvider: Requests cancellation of an already-dispatched operation.
cancel(SignWorkflowStore.Workflow, SigningProvider.CancellationReason, CancellationSignal) - Method in class zeroecho.pki.spi.crypto.SigningProviderExecutor: Cancels one durably claimed CANCELLING state.
cancellation() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCallControl: Returns the value of the cancellation record component.
cancellation() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.CallControl: Returns the value of the cancellation record component.
cancellation() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the cancellation record component.
CANCELLATION_UNCERTAIN - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.ReconciliationFailureClass: Provider cancellation outcome is uncertain.
CANCELLED - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: Processing was cancelled before a successful outcome was established.
CANCELLED - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic cooperative cancellation outcome.
CANCELLED - Enum constant in enum class zeroecho.pki.api.signing.SigningOperationState: Provider cancellation completed.
CANCELLED - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: Cooperative cancellation was observed.
CANCELLED - Enum constant in enum class zeroecho.pki.application.SigningExecutionEvidence.Outcome: The signing operation was cancelled.
CANCELLED - Enum constant in enum class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningState: The caller's cancellation was honoured.
CANCELLED - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Cancellation was confirmed.
CANCELLED - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.ObservationState: Provider confirmed cancellation.
CANCELLED - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Cooperative cancellation was requested.
CANCELLED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Provider confirmed cancellation.
CANCELLED - Enum constant in enum class zeroecho.pki.util.async.AsyncState: The operation was cancelled by a caller or operator.
CANCELLING - Enum constant in enum class zeroecho.pki.api.signing.SigningOperationState: Cancellation is durably requested.
CANCELLING - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Cancellation is durably requested but provider outcome is not final.
candidate() - Method in interface zeroecho.pki.api.signing.PreparedSigningRequest: Returns the sealed staged candidate reference.
candidate() - Method in class zeroecho.pki.impl.core.signing.DefaultPreparedSigningRequest
candidate() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the candidate record component.
candidate() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the candidate record component.
CandidateBinding(String, PkiId, long, String) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.CandidateBinding: Validates one canonical binding.
candidateEncoding() - Method in record class zeroecho.pki.api.signing.SigningRequest: Returns the value of the candidateEncoding record component.
candidateId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CandidateBinding: Returns the value of the candidateId record component.
candidates() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns both caller-owned candidates, final TBS first and optional proof second.
candidates() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DuePage: Returns the value of the candidates record component.
candidates() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Returns the value of the candidates record component.
candidates() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the exact immutable references owned by this one parent.
canonical() - Method in record class zeroecho.pki.spi.store.MetadataKey: Returns the complete versioned length-framed canonical representation.
canonicalBytes() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofPresentation: Returns a defensive copy of the canonical presentation.
canonicalForm() - Method in record class zeroecho.pki.api.content.DurableContentOwner: Returns a deterministic persistence token containing no path or payload.
canonicalForm() - Method in class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier: Returns the deterministic reverse-lookup representation.
canonicalIssuerName() - Method in class zeroecho.pki.impl.core.CrlScope: Returns canonical X.500 name under JDK principal equality.
canonicalJson() - Method in class zeroecho.pki.api.profile.BuiltInCertificateProfileTemplate: Returns a copy of the canonical ZeroEcho profile JSON.
canonicalJson() - Method in class zeroecho.pki.api.profile.ImportedCertificateProfileVersion: Returns the canonical imported document.
canonicalSha256() - Method in class zeroecho.pki.api.profile.BuiltInCertificateProfileTemplate: Returns a copy of the SHA-256 hash of the canonical JSON.
canonicalSha256() - Method in class zeroecho.pki.api.profile.CertificateProfileRef: Returns the canonical profile digest.
canonicalValue(SubjectRdnType, String) - Static method in record class zeroecho.pki.api.profile.SubjectRdnRule: Applies the type-specific canonical form and validation.
capabilities() - Method in class zeroecho.pki.impl.crypto.remote.http.HttpsRemoteSigningTransport
capabilities() - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory
capabilities() - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory: Declares the exact classic signature domain implemented by the provider.
capabilities() - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509VerificationExecutor
capabilities() - Method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Returns immutable adapter capabilities.
capabilities() - Method in record class zeroecho.pki.spi.bootstrap.PkiBootstrap.SigningComposition: Returns the value of the capabilities record component.
capabilities() - Method in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport: Returns the remote service's advertised capabilities, captured when the transport was opened.
capabilities() - Method in interface zeroecho.pki.spi.store.TransactionalMetadataStore: Returns immutable adapter capabilities.
CAPABILITY_NOT_CONFIGURED - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: The selected operation requires a capability absent from the active configuration.
Capability registration - Section in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory
CAPACITY_REJECTED - Enum constant in enum class zeroecho.pki.api.signing.SigningAcceptanceDisposition: Durable active-work capacity rejected the new intent.
CAPACITY_REJECTED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResult: No durable acceptance occurred because the active-work bound was full.
caPolicy() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the CA policy.
CaProfileBinding - Record Class in zeroecho.pki.api.credential: Exact versioned CA profile identity for a root or intermediate credential.
CaProfileBinding(CertificateProfileRef) - Constructor for record class zeroecho.pki.api.credential.CaProfileBinding: Creates a CA profile binding.
CaQuery - Record Class in zeroecho.pki.api.ca: Query constraints for listing CA entities.
CaQuery(Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.ca.CaQuery: Creates a CA query.
CaRecord - Record Class in zeroecho.pki.api.ca: Represents one logical CA authority and its explicit issuer generations.
CaRecord(PkiId, CaKind, CaState, KeyRef, SubjectRef, List, PkiId, PkiId) - Constructor for record class zeroecho.pki.api.ca.CaRecord: Creates a CA record.
CaRolloverCommand - Interface in zeroecho.pki.api.ca: Command to roll over a CA credential while keeping the same key reference.
CaRolloverCommand.Intermediate - Record Class in zeroecho.pki.api.ca: Intermediate rollover with an expected current subject key.
CaRolloverCommand.Root - Record Class in zeroecho.pki.api.ca: Root rollover using the authoritative current key.
CaService - Interface in zeroecho.pki.api: Manages Certificate Authority (CA) entities and their lifecycle.
CaSigningIntent - Class in zeroecho.pki.impl.core.continuation: Pure, domain-separated commitment to an intermediate CA signing intent.
CaState - Enum Class in zeroecho.pki.api.ca: Operational state of a CA entity.
CaSubject(PkiId, Optional, String, KeyRef) - Constructor for record class zeroecho.pki.api.signing.ManagedKeyProofRequest.CaSubject: Validates the bounded coordinates without resolving them.
CaSubjectProofBindings - Class in zeroecho.pki.impl.core.continuation: Exact immutable binding between an internal proof and its parent CA/TBS intent.
CaSubjectProofOutcome(SigningProvider.ObservationState, SigningProvider.DetailCode, Optional) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofOutcome: Requires terminal evidence and an existing provider-compatible detail.
CaSubjectProofStep(PkiId, KeyRef, String, DurableContentReference) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Validates structural bounds without reading content or resolving keys.
catalog() - Static method in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: Returns the immutable built-in standard catalog.
catalog() - Static method in class zeroecho.pki.impl.framework.x509.ZeroEchoPrivateX509Bindings: Returns the trusted private encoding-rule catalog.
catalog(X509ComponentCatalog) - Static method in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: Creates the built-in rules against an immutable component authority.
catchAll() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningTopology: Returns the value of the catchAll record component.
category() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns the value of the category record component.
category() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns the value of the category record component.
category() - Method in record class zeroecho.pki.api.content.DurableContentOwner: Returns the value of the category record component.
category() - Method in exception class zeroecho.pki.spi.store.MetadataStoreException: Returns the stable safe category.
certFingerprint() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns the value of the certFingerprint record component.
certFingerprintCopy() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns an independent copy of the certFingerprint bytes.
CertId(OcspResponseService.CertIdHash, byte[], byte[], BigInteger) - Constructor for record class zeroecho.pki.application.OcspResponseService.CertId: Defensively owns all request values.
certificate() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingPlan: Returns the value of the certificate record component.
CERTIFICATE - Enum constant in enum class zeroecho.pki.application.PkiRepositoryContent.Role: X.509 certificate DER.
CERTIFICATE - Enum constant in enum class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectKind: X.509 Certificate.
CERTIFICATE_HOLD - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: Credential is temporarily on hold.
CERTIFICATE_SIGNATURE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Role: Certificate signature.
CertificateBindings(AlgorithmIdentity, AlgorithmIdentity, StreamingDerReader.SignedObjectLayout) - Constructor for record class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator.CertificateBindings: Creates immutable binding results.
certificatePolicy() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the certificatePolicy record component.
CertificatePolicy - Interface in zeroecho.pki.api.profile: Closed certificate-specific policy variant.
CertificateProfile - Record Class in zeroecho.pki.api.profile: Defines issuance constraints and mapping hints for a class of credentials.
CertificateProfile(String, FormatId, String, Duration, SubjectPolicy, LeafCertificatePolicy) - Constructor for record class zeroecho.pki.api.profile.CertificateProfile: Creates a runtime profile that permits only standard algorithm bindings.
CertificateProfile(String, FormatId, String, Duration, SubjectPolicy, LeafCertificatePolicy, X509AlgorithmBindingPolicy) - Constructor for record class zeroecho.pki.api.profile.CertificateProfile: Creates a certificate profile.
CertificateProfileDefinition - Record Class in zeroecho.pki.api.profile: Immutable, versioned certificate-profile configuration.
CertificateProfileDefinition(CertificateProfileKind, String, long, FormatId, String, Duration, IssuanceApprovalRequirement, SubjectPolicy, CertificatePolicy, X509AlgorithmBindingPolicy, Optional) - Constructor for record class zeroecho.pki.api.profile.CertificateProfileDefinition: Creates a profile with full components except hybridMode, defaulting it to HybridCertificateMode.None.
CertificateProfileDefinition(CertificateProfileKind, String, long, FormatId, String, Duration, IssuanceApprovalRequirement, SubjectPolicy, CertificatePolicy, X509AlgorithmBindingPolicy, Optional, HybridCertificateMode) - Constructor for record class zeroecho.pki.api.profile.CertificateProfileDefinition: Creates a certificate-profile definition.
CertificateProfileDefinition(CertificateProfileKind, String, long, FormatId, String, Duration, SubjectPolicy, CertificatePolicy) - Constructor for record class zeroecho.pki.api.profile.CertificateProfileDefinition: Creates a standard-only CA profile definition without an issuance approval requirement.
CertificateProfileDefinition(CertificateProfileKind, String, long, FormatId, String, Duration, SubjectPolicy, CertificatePolicy, X509AlgorithmBindingPolicy) - Constructor for record class zeroecho.pki.api.profile.CertificateProfileDefinition: Creates a profile without a leaf confirmation policy; valid only for CA profiles.
CertificateProfileDefinition(CertificateProfileKind, String, long, FormatId, String, Duration, SubjectPolicy, CertificatePolicy, X509AlgorithmBindingPolicy, Optional) - Constructor for record class zeroecho.pki.api.profile.CertificateProfileDefinition: Creates a profile with the pre-approval-requirement component order, defaulting issuance approval to IssuanceApprovalRequirement.NONE.
CertificateProfileDocumentCodec - Class in zeroecho.pki.api.profile: Strict JSON parser and canonical writer for version 4 certificate-profile documents.
CertificateProfileKind - Enum Class in zeroecho.pki.api.profile: Closed certificate category governed by a profile definition.
CertificateProfileRef - Class in zeroecho.pki.api.profile: Exact immutable identity of one imported certificate-profile version.
CertificateProfileRef(String, long, byte[]) - Constructor for class zeroecho.pki.api.profile.CertificateProfileRef: Creates an exact profile reference.
certificateSignature() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Returns the value of the certificateSignature record component.
CertificateTbsLayout(int, int, int, int, int) - Constructor for record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CertificateTbsLayout: Validates positive lengths and overflow-safe containment of both spans.
certificateType() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the certificateType record component.
certificateType() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the required certificate kind.
certificateType() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the required certificate kind.
CertificationRequest - Record Class in zeroecho.pki.api.request: Opaque certification request container.
CertificationRequest(FormatId, EncodedObject) - Constructor for record class zeroecho.pki.api.request.CertificationRequest: Creates a certification request.
CertificationRequestParser - Interface in zeroecho.pki.spi.framework: Parses and normalizes framework-specific certification requests into the core request model.
CertificationRequestService - Interface in zeroecho.pki.api: Processes certification requests (CSR-like objects) into a normalized representation.
CESSATION_OF_OPERATION - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: Subject has ceased operation.
CHAIN_BROKEN - Enum constant in enum class zeroecho.pki.api.audit.AuditIntegrityReport.Status: A record's stored previous-hash does not link to the prior record (insertion/reorder).
chainPath(PkiId) - Method in interface zeroecho.pki.application.PkiRepository: Returns an exact immutable issuer chain path.
chainPathCommitment() - Method in record class zeroecho.pki.impl.core.ValidatedCertificateRequest.FrozenIssuance: Returns the value of the chainPathCommitment record component.
chainPathId() - Method in record class zeroecho.pki.api.IssuerRef: Returns the value of the chainPathId record component.
chainPathId() - Method in record class zeroecho.pki.impl.core.ValidatedCertificateRequest.FrozenIssuance: Returns the value of the chainPathId record component.
challenge() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Returns the value of the challenge record component.
challengeBytes() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofDescriptor: Returns the value of the challengeBytes record component.
challengeTimeToLive() - Method in record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Returns the value of the challengeTimeToLive record component.
checkedFrom() - Method in record class zeroecho.pki.spi.ct.CtJournalVerificationResult: Returns the value of the checkedFrom record component.
checkedTo() - Method in record class zeroecho.pki.spi.ct.CtJournalVerificationResult: Returns the value of the checkedTo record component.
CHECKPOINT - Enum constant in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.OptionalFeature: Adapter supports explicit checkpoints.
checkpointCaProof(PkiId, long, long, SignWorkflowStore.CaSubjectProofOutcome, Optional) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
checkpointCaProof(PkiId, long, long, SignWorkflowStore.CaSubjectProofOutcome, Optional) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Atomically records one terminal internal-proof observation.
checkpointPendingSignDispatch(PkiId, long, long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
checkpointPendingSignDispatch(PkiId, long, long) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Checkpoints a pending initial dispatch and releases its lease, making the sole bounded observation immediately claimable.
Choices(List, List, List, List, Optional, List) - Constructor for record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Snapshots the immutable non-secret metadata.
CLAIMED - Enum constant in enum class zeroecho.pki.api.schedule.StatusScheduleState.Phase: Authorization captured; signing may not yet have been accepted.
claimLease() - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Returns the value of the claimLease record component.
claimLease() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningCoordinatorLimits: Returns the value of the claimLease record component.
claimSignStep(PkiId, long, Duration) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
claimSignStep(PkiId, long, Duration) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Atomically claims the next provider step.
claimStatusSchedule(StatusScheduleState) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
claimStatusSchedule(StatusScheduleState) - Method in interface zeroecho.pki.spi.store.PkiStore: Claims a due occurrence through compare-and-replace.
CLASSIC - Enum constant in enum class zeroecho.pki.impl.secrets.PublisherSecretsProtection: PBKDF2-HMAC-SHA256 (600 000 iterations) key derivation with AES-256-GCM content encryption.
classification() - Method in record class zeroecho.pki.api.PkiFailure: Returns the value of the classification record component.
classification() - Method in enum class zeroecho.pki.api.PkiFailureCode: Returns the only classification valid for this code.
classification() - Method in enum class zeroecho.pki.api.PkiFailureReason: Returns the only classification valid for this reason.
classification() - Method in exception class zeroecho.pki.api.SigningExecutionException: Returns the execution-failure classification.
classification() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Failed: Returns the value of the classification record component.
cleanupStrategy() - Method in class zeroecho.pki.impl.fs.FsHistoryPolicy: Cleanup strategy.
CLEAR - Enum constant in enum class zeroecho.pki.api.revocation.RevocationState: Credential has no effective revocation restriction.
clock() - Method in class zeroecho.pki.spi.crypto.SigningProviderRuntimeDependencies: Returns the clock used for signing submission and recovery validation.
clock() - Method in class zeroecho.pki.spi.store.PkiStoreRuntimeDependencies: Returns the exact authoritative clock supplied by the runtime owner.
close() - Method in interface zeroecho.pki.api.backup.BackupPreparation: Deletes only this owned candidate, without following links.
close() - Method in interface zeroecho.pki.api.backup.BackupSink: Deletes incomplete storage; after successful completion it does not close or delete the transferred source.
close() - Method in interface zeroecho.pki.api.backup.BackupSource: Releases owned input and storage.
close() - Method in interface zeroecho.pki.api.publication.PublicationCursor: Closes the underlying stable metadata view idempotently.
close() - Method in interface zeroecho.pki.api.PublicationService: Rejects new operations while allowing an in-flight synchronous call to classify its result.
close() - Method in class zeroecho.pki.application.PkiRepositoryContent: Releases provider-owned lease resources.
close() - Method in interface zeroecho.pki.application.PkiSession: Closes services and backend resources in reverse construction order.
close() - Method in class zeroecho.pki.impl.audit.SyslogAuditSink
close() - Method in class zeroecho.pki.impl.core.DefaultPublicationService
close() - Method in class zeroecho.pki.impl.core.signing.SigningReactor: Closes acceptance, establishes the claim barrier, cancels active calls, and waits for all owned threads under one common deadline.
close() - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProvider
close() - Method in class zeroecho.pki.impl.crypto.remote.http.HttpsRemoteSigningTransport
close() - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider
close() - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
close() - Method in class zeroecho.pki.impl.fs.ct.FsCtJournalStore
close() - Method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Closes the store idempotently.
close() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
close() - Method in interface zeroecho.pki.spi.audit.AuditSink: Releases lifecycle-owned sink resources.
close() - Method in class zeroecho.pki.spi.audit.CompositeAuditSink: Closes each delegate in order, continuing past any individual close failure.
close() - Method in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport
close() - Method in interface zeroecho.pki.spi.crypto.SigningProvider
close() - Method in interface zeroecho.pki.spi.ct.CtJournalStore: Releases all resources held by this journal store.
close() - Method in interface zeroecho.pki.spi.framework.CrlEntrySource: Releases the stable snapshot.
close() - Method in interface zeroecho.pki.spi.framework.CrlEntrySource.Cursor
close() - Method in interface zeroecho.pki.spi.store.AuditEvidenceFeed: Closes the feed idempotently.
close() - Method in interface zeroecho.pki.spi.store.ContentSink: Aborts an incomplete sink.
close() - Method in interface zeroecho.pki.spi.store.MetadataCursor: Closes this cursor idempotently.
close() - Method in interface zeroecho.pki.spi.store.MetadataSnapshot: Closes this snapshot idempotently and invalidates its cursors.
close() - Method in interface zeroecho.pki.spi.store.MetadataTransaction: Closes the transaction idempotently, aborting an uncommitted transaction.
close() - Method in interface zeroecho.pki.spi.store.PkiStore: Closes this store and releases all lifecycle-owned resources.
close() - Method in interface zeroecho.pki.spi.store.RevocationHistory: Closes the underlying authoritative-log channel.
close() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot: Releases snapshot resources.
close() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot.Cursor: Closes the cursor.
close() - Method in interface zeroecho.pki.spi.store.RevocationTransitionFeed: Closes the feed and its file resource; repeated close is harmless.
close() - Method in interface zeroecho.pki.spi.store.RevocationView: Releases the stable view.
close() - Method in interface zeroecho.pki.spi.store.TemporaryUniqueIndex: Removes all index storage.
close() - Method in interface zeroecho.pki.spi.store.TransactionalMetadataStore: Closes the store idempotently.
close() - Method in interface zeroecho.pki.util.async.AsyncRegistration: Unregisters the handler.
closeTimeout() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningCoordinatorLimits: Returns the value of the closeTimeout record component.
cmp(String, String, String, RevocationExecutionEvidence.Authorization, String) - Static method in record class zeroecho.pki.application.RevocationExecutionEvidence: Records a verified CMP signature actor and the exact authorization used.
CMP_AUTHORIZED_RA - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authorization: Explicit authority-scoped CMP registration-agent grant.
CMP_CERTIFICATE_HOLDER - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authorization: Exact issued-certificate holder authorized CMP revocation.
CMP_PBM - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.ActorType: Explicitly provisioned CMP PBM requester identity.
CMP_PBM - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authentication: Verified authority-scoped CMP password-based MAC.
CMP_SIGNATURE - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authentication: Verified authority-scoped CMP signature protection.
CMP_SIGNATURE - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authentication: Verified CMP signature protection.
CMP_SIGNER - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.ActorType: Trusted CMP message signature identity.
CMP_SIGNER - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.ActorType: Certificate-authenticated CMP requester.
code() - Method in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: Returns the stable canonical code.
code() - Method in record class zeroecho.pki.api.PkiFailure: Returns the value of the code record component.
code() - Method in enum class zeroecho.pki.application.OcspResponseService.CertIdHash: Returns the stable persistence code.
code() - Method in enum class zeroecho.pki.application.OcspResponseService.ResponderId: Returns the stable persistence code.
code() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Failed: Returns the value of the code record component.
code() - Method in exception class zeroecho.pki.impl.ProfileLifecycleFailure: Returns the stable failure classification.
codecs() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRuleProvider: Returns trusted parameter codecs required by contributed identities.
collect(LongSupplier) - Static method in interface zeroecho.pki.application.DashboardLiveSource: Safely collects one nonnegative metric while preserving cancellation.
combinedCurrentReservedBytes() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns the value of the combinedCurrentReservedBytes record component.
combinedHighWaterReservedBytes() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns the value of the combinedHighWaterReservedBytes record component.
combinedMaximumBytes() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns the value of the combinedMaximumBytes record component.
command() - Method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Returns the value of the command record component.
command() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Returns the value of the command record component.
command() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the command record component.
command() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.OuterCommand: Returns the value of the command record component.
Command(PkiId, PkiId, PkiId, PkiId, KeyRef, List, String, Optional, OcspResponseService.ResponderId, Instant, Instant, Instant, Optional, List) - Constructor for record class zeroecho.pki.application.OcspResponseService.Command: Validates finite exact responder inputs.
commandCommitment() - Method in record class zeroecho.pki.api.issuance.IssuanceIntent: Returns the value of the commandCommitment record component.
commandCommitment() - Method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Returns the value of the commandCommitment record component.
commandCommitment() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the commandCommitment record component.
commandCommitment() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.OuterCommand: Returns the value of the commandCommitment record component.
Command-driven operations - Section in package zeroecho.pki.api.issuance
commit() - Method in interface zeroecho.pki.spi.store.MetadataTransaction: Attempts one atomic durable commit.
commitJustification(Optional) - Static method in record class zeroecho.pki.application.RevocationExecutionEvidence: Commits exact optional justification presence and UTF-8 bytes without retaining plaintext.
commitment() - Method in interface zeroecho.pki.api.algorithm.X509AlgorithmBindingRegistry: Returns the commitment to the active registry.
commitment() - Method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Returns the value of the commitment record component.
commitment() - Method in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry
commitment() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot: Returns the captured global commitment.
commitment() - Method in interface zeroecho.pki.spi.store.RevocationView: Returns the captured global commitment.
commitment() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the canonical streaming accept-sign:v3 commitment.
commitment(EncodedObject) - Static method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Returns the canonical versioned commitment for exact command bytes.
commitment(DomainCommandEncoding.Decoded, AlgorithmIdentity) - Static method in class zeroecho.pki.impl.core.continuation.CaSigningIntent: Validates and commits the nonproof portion of a prospective command.
commitment(SigningProvider.ConfigurationCommitment, Set) - Method in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Composes backend configuration with the complete effective input contract.
COMMITMENT_ATTRIBUTE - Static variable in record class zeroecho.pki.api.issuance.IssuanceIntent: Stable internal metadata attribute carrying the canonical command commitment.
commitmentFor(PkiId, PkiId, List) - Static method in record class zeroecho.pki.api.ca.IssuerChainPath: Returns the canonical commitment to authority, generation, and order.
commitmentOfCanonicalAlgorithm(DomainCommandEncoding.Decoded, String) - Static method in class zeroecho.pki.impl.core.continuation.CaSigningIntent: Recomputes accepted intent from exact stored algorithm text without resolving installed codecs.
commitRevision() - Method in interface zeroecho.pki.spi.store.MetadataSnapshot.Record: Returns the committed store revision containing this record revision.
COMMITTED - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.Outcome: Revocation transition and evidence committed atomically.
COMMITTED - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.Outcome: Every mutation was durably committed and atomically visible.
committedRevision() - Method in record class zeroecho.pki.spi.store.MetadataCommitResult: Returns the value of the committedRevision record component.
COMMON_NAME - Enum constant in enum class zeroecho.pki.api.profile.SubjectRdnType: X.520 common name.
COMPACTION - Enum constant in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.OptionalFeature: Adapter supports history compaction.
compareTo(MetadataKey) - Method in record class zeroecho.pki.spi.store.MetadataKey
compatibilityProfileId() - Method in record class zeroecho.pki.api.issuance.BundleCommand: Returns the value of the compatibilityProfileId record component.
compatibilityProfileId() - Method in record class zeroecho.pki.api.issuance.VerificationPolicy: Returns the value of the compatibilityProfileId record component.
complete() - Method in interface zeroecho.pki.api.backup.BackupSink: Forces data and atomically publishes an immutable file, then transfers its deletion ownership to the result.
complete() - Method in interface zeroecho.pki.spi.store.ContentSink: Atomically completes the content.
complete(PkiId, CancellationSignal) - Method in interface zeroecho.pki.application.LocalSigningExecutor: Advances only the selected persisted operation, preserving its original actor.
completeCaProofVerification(PkiId, long, long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
completeCaProofVerification(PkiId, long, long) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Records successful local verification and releases the claim for final-key scheduling.
completeCredentialConfirmation(CredentialConfirmationProofCas) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
completeCredentialConfirmation(CredentialConfirmationProofCas) - Method in interface zeroecho.pki.spi.store.PkiStore: Atomically completes one exact pending lifecycle after consuming its authoritative challenge.
CompleteCredentialConfirmationProof(CredentialConfirmationProofSubmission) - Constructor for record class zeroecho.pki.application.PkiOperation.CompleteCredentialConfirmationProof: Validates the submission.
Completed(PkiOperationResult) - Constructor for record class zeroecho.pki.application.PkiOperationOutcome.Completed: Validates the result.
Completed(PkiOperationResult, SigningAcceptanceReceipt) - Constructor for record class zeroecho.pki.application.LocalSigningResult.Completed: Requires both completed metadata and its receipt.
COMPLETED - Enum constant in enum class zeroecho.pki.api.signing.SemanticSigningState: Domain publication and its terminal result are durably complete.
COMPLETED - Enum constant in enum class zeroecho.pki.spi.store.DomainContinuationStore.State: Domain result was published and committed exactly once.
COMPLETED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: A provider observation returned, including a pending result, or signing terminated.
completedCredentialId() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Derives the publisher's exact credential identity from a completed CA or issuance DER result.
completedResult(SemanticSigningOperation) - Method in interface zeroecho.pki.application.PkiSigningCommands: Projects an authoritative completed semantic observation to stable safe metadata.
completedStatusObjectId(SemanticSigningOperation) - Method in interface zeroecho.pki.api.SemanticSigningService: Projects the canonical status identity from a completed full-CRL observation.
completedStatusObjectId(SemanticSigningOperation) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
completeSignObservation(PkiId, long, long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
completeSignObservation(PkiId, long, long) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Checkpoints a returned bounded observation, including a pending result, after its budget was consumed by a claim.
completeStatusObject(StatusObject, X509ExecutionPlan) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Mints the live completion of an X.509 status-object SIGN operation.
Component(String, X509ComponentCatalog.Kind, AlgorithmIdentity, String, boolean) - Constructor for record class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Component: Creates a component.
components() - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Returns the component catalog snapshot.
components() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRuleProvider: Returns component bindings used by parameterized rules.
compose(List, List, List, X509AlgorithmResolver.Policy) - Static method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Composes one runtime graph with exact process-local executor bindings.
compose(List, List, X509AlgorithmResolver.Policy) - Static method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Composes one runtime graph from explicitly selected trusted providers.
Composite() - Constructor for record class zeroecho.pki.api.hybrid.HybridCertificateMode.Composite: Creates an instance of a Composite record class.
CompositeAuditSink - Class in zeroecho.pki.spi.audit: Fan-out AuditSink that delivers each event to an ordered list of delegate sinks.
CompositeAuditSink(List) - Constructor for class zeroecho.pki.spi.audit.CompositeAuditSink: Creates a composite sink that fans out to the given delegates in order.
compressedBytes() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns the value of the compressedBytes record component.
compressionRatio() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns the value of the compressionRatio record component.
COMPROMISED - Enum constant in enum class zeroecho.pki.api.ca.CaState: CA is compromised and must not be used for issuance.
COMPROMISED - Enum constant in enum class zeroecho.pki.api.ca.IssuerGenerationState: Known or suspected compromised generation.
computeStatus(PkiId, Instant) - Method in interface zeroecho.pki.api.CredentialInventoryService: Computes credential status at a given time.
ConfigurableProvider<T> - Interface in zeroecho.pki.spi: ServiceLoader provider for configurable implementations.
configuration() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState: Returns the value of the configuration record component.
configuration() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns the value of the configuration record component.
Configuration - Section in class zeroecho.pki.impl.audit.InMemoryAuditSink
Configuration - Section in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory
Configuration - Section in interface zeroecho.pki.spi.ConfigurableProvider
configurationChoices(int, Optional, CancellationSignal) - Method in interface zeroecho.pki.application.PkiConfigurationChoicesSource: Reads configured choices and known key references in ascending key-reference order.
configurationCommitment() - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteRef: Returns the value of the configurationCommitment record component.
configurationCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationPolicy: Returns the canonical lowercase hexadecimal SHA-256 policy commitment.
configurationCommitment() - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProvider
configurationCommitment() - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider
configurationCommitment() - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
configurationCommitment() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Returns a defensive copy of the provider configuration commitment.
configurationCommitment() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the configurationCommitment record component.
configurationCommitment() - Method in interface zeroecho.pki.spi.crypto.SigningProvider: Returns the stable non-secret effective-configuration commitment.
configurationCommitment() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the configurationCommitment record component.
configurationCommitment() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the accepted provider configuration commitment.
ConfigurationCommitment(byte[]) - Constructor for class zeroecho.pki.spi.crypto.SigningProvider.ConfigurationCommitment: Creates a commitment from a borrowed exact 32-byte value.
Configuration keys - Section in class zeroecho.pki.impl.async.FileBackedAsyncBusProvider
Configuration keys - Section in class zeroecho.pki.impl.audit.SyslogAuditSinkProvider
Configuration keys - Section in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory
Configuration model - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFrameworkProvider
Confinement - Section in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport
CONFIRMATION_REVOCATION_CONFLICT - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: The pending confirmation is not in a revocable state.
CONFIRMATION_REVOCATION_RECOVERY_REQUIRED - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A pending-confirmation revocation cleanup outcome is unknown and requires recovery.
ConfirmationDisclosurePolicy - Enum Class in zeroecho.pki.api.confirmation: Closed credential-disclosure policies with stable persistence-independent codes.
confirmationPolicy() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the confirmationPolicy record component.
confirmationPolicyCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the confirmationPolicyCommitment record component.
ConfirmationProofSuiteBinding - Record Class in zeroecho.pki.api.confirmation: Immutable portable proof-suite coordinates frozen into a confirmation challenge.
ConfirmationProofSuiteBinding(ConfirmationProofSuiteRef, int) - Constructor for record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteBinding: Validates the exact suite reference and inclusive modulus-size bound.
ConfirmationProofSuiteRef - Record Class in zeroecho.pki.api.confirmation: Immutable reference to one exact credential-confirmation proof-suite profile.
ConfirmationProofSuiteRef(String, String) - Constructor for record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteRef: Validates the canonical suite identity and exact configuration commitment.
ConfirmationRealmBinding - Record Class in zeroecho.pki.api.confirmation: Portable canonical identity of the realm bound into a credential-confirmation challenge.
ConfirmationRealmBinding(String) - Constructor for record class zeroecho.pki.api.confirmation.ConfirmationRealmBinding: Validates the exact portable realm identity.
confirmationRequired() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Returns the value of the confirmationRequired record component.
confirmationRequired() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the confirmationRequired record component.
confirmationReviewAt() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Returns the value of the confirmationReviewAt record component.
confirmationReviewAt() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the confirmationReviewAt record component.
confirmationReviewAt() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Returns the value of the confirmationReviewAt record component.
confirmations() - Method in interface zeroecho.pki.application.PkiSession: Returns the credential-confirmation facade owned by this session.
confirmationWindow() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationPolicy: Returns the value of the confirmationWindow record component.
CONFIRMED - Enum constant in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.State: Credential confirmation was committed.
CONFIRMED - Enum constant in enum class zeroecho.pki.api.confirmation.CredentialConfirmationProofResult: The authoritative lifecycle is confirmed.
CONFIRMED_REVISION - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Terminal confirmed revision.
confirmedAt() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the confirmedAt record component.
CONFLICT - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: The request conflicts with the current authoritative state or another committed operation.
CONFLICT - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic conflict with authoritative state.
CONFLICT - Enum constant in enum class zeroecho.pki.api.signing.SigningAcceptanceDisposition: The identifier or candidate conflicts with retained input.
CONFLICT - Enum constant in enum class zeroecho.pki.api.signing.SigningAcceptanceResolution: The operation exists with different immutable input.
CONFLICT - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: The requested state conflicts with committed state.
CONFLICT - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Create or expected-revision precondition failed.
CONFLICT - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResolution: The operation identifier names different immutable input.
CONFLICT - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResult: The operation or candidate is committed to different immutable input.
Consistency and Atomicity Guarantees - Section in class zeroecho.pki.impl.fs.FilesystemPkiStore
consumedChallengeRecordCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the consumedChallengeRecordCommitment record component.
consumeResult(OpId) - Method in interface zeroecho.pki.util.async.AsyncBus: Consumes the stored result if present and removes it from the bus.
consumeResult(OpId) - Method in class zeroecho.pki.util.async.impl.DurableAsyncBus: Returns and removes a previously stored successful result.
Contained responsibilities - Section in package zeroecho.pki.impl.core
Contained responsibilities - Section in package zeroecho.pki.impl.framework.x509.bc
contains(byte[]) - Method in interface zeroecho.pki.spi.store.TemporaryUniqueIndex: Tests whether an exact bounded value is present.
contains(MetadataKey) - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Tests whether a key belongs to this range.
content() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the content record component.
content() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the content record component.
content() - Method in record class zeroecho.pki.api.status.StatusObject: Returns the value of the content record component.
content() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns the value of the content record component.
content() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns a defensive copy of the raw message or prehash bytes.
content() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the content record component.
CONTENT_COMMITMENT - Enum constant in enum class zeroecho.pki.api.profile.LeafKeyUsage: nonRepudiation/contentCommitment.
CONTENT_INTEGRITY_FAILURE - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Candidate content did not match its commitment.
CONTENT_INVALID - Enum constant in enum class zeroecho.pki.api.publication.PublicationFailure: The exact immutable source content could not be validated.
contentCommitment() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the contentCommitment record component.
ContentCommitment(String, long, String) - Constructor for record class zeroecho.pki.spi.crypto.SigningProvider.ContentCommitment: Validates a canonical content commitment.
contentId() - Method in interface zeroecho.pki.api.content.DurableContentReference: Returns the opaque canonical content identity issued by the store.
contentLength() - Method in interface zeroecho.pki.api.backup.BackupSource: Returns the complete archive length.
contentLength() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the contentLength record component.
contentLengthModel() - Method in record class zeroecho.pki.spi.store.MetadataStoreCapabilities: Returns the value of the contentLengthModel record component.
contentOwners(DurableContentReference) - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
contentOwners(DurableContentReference) - Method in interface zeroecho.pki.spi.store.StagedContentStore: Returns the immutable exact owner set for sealed content.
contentSha256() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the contentSha256 record component.
ContentSink - Interface in zeroecho.pki.spi.store: Atomic sequential sink for staged operation content.
contentStoreId() - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
contentStoreId() - Method in interface zeroecho.pki.spi.store.StagedContentStore: Returns the stable logical store identifier.
context() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Returns the value of the context record component.
coordinator() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningTopology: Returns the value of the coordinator record component.
copy(InputStream, OutputStream, CancellationSignal) - Static method in class zeroecho.pki.impl.framework.x509.StreamingDerWriter: Copies content incrementally and returns the exact byte count.
CorrelatedEndEntityIssuanceRequest - Record Class in zeroecho.pki.api.issuance: Immutable, thread-safe exact issuance input and its frozen orchestration intent.
CorrelatedEndEntityIssuanceRequest(EndEntityIssuanceRequest, IssuanceIntent) - Constructor for record class zeroecho.pki.api.issuance.CorrelatedEndEntityIssuanceRequest: Validates bounded coordinates without copying the already immutable request.
CorrelatedEndEntityRenewalRequest - Record Class in zeroecho.pki.api.issuance: Immutable, thread-safe correlated renewal input.
CorrelatedEndEntityRenewalRequest(PkiId, EndEntityRenewalRequest, String, IssuanceIntent) - Constructor for record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Creates a reconstruction-only renewal for callers without a protocol request.
CorrelatedEndEntityRenewalRequest(PkiId, EndEntityRenewalRequest, String, IssuanceIntent, Optional) - Constructor for record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Validates all required coordinates without accessing a store.
CorrelatedEndEntityReplacementRequest - Record Class in zeroecho.pki.api.issuance: Immutable correlated replacement input.
CorrelatedEndEntityReplacementRequest(PkiId, EndEntityReplacementRequest, String, IssuanceIntent) - Constructor for record class zeroecho.pki.api.issuance.CorrelatedEndEntityReplacementRequest: Validates bounded coordinates without accessing persistent state.
CorrelatedIssuanceIdentity - Record Class in zeroecho.pki.impl.core: Pure identity derivation shared by issuance lookup and domain preparation.
CorrelatedIssuanceIdentity(String, String) - Constructor for record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Creates an instance of a CorrelatedIssuanceIdentity record class.
CorrelatedIssuancePreparation - Interface in zeroecho.pki.api.issuance: Closed result of correlated end-entity preparation.
CorrelatedIssuancePreparation.Existing - Record Class in zeroecho.pki.api.issuance: Immutable snapshot of exactly matching retained work, including failed, cancelled or expired work.
CorrelatedIssuancePreparation.Prepared - Record Class in zeroecho.pki.api.issuance: Immutable carrier of one unused preparation.
correlatedTemplate(DomainContinuationStore.Kind, String, String, String...) - Static method in class zeroecho.pki.impl.core.continuation.DomainCommandEncoding: Encodes a command carrying an exact restart idempotency identity.
correlation(PkiId) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofBindings: Derives the private correlation bound to an exact submission identity.
correlationId() - Method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Returns the value of the correlationId record component.
correlationId() - Method in record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Returns the value of the correlationId record component.
correlationId() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the correlationId record component.
correlationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.OuterCommand: Returns the value of the correlationId record component.
correlationId(PkiId, String) - Static method in record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Derives the existing correlation key from validated authority and external identity.
count() - Method in interface zeroecho.pki.spi.framework.CrlEntrySource: Returns the entry count when cheaply known.
count() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot: Returns the current-state count when the store can provide it without materialization.
COUNTRY_NAME - Enum constant in enum class zeroecho.pki.api.profile.SubjectRdnType: X.520 country name.
create(long, Instant, byte[], BigInteger, String, byte[]) - Static method in record class zeroecho.pki.spi.ct.CtJournalEntry: Creates a new journal entry with automatically computed leafHash and entryHash.
create(String, Instant, SecureRandom) - Static method in record class zeroecho.pki.api.orch.SigningSubmissionId: Creates a new identifier using a cryptographically strong random source.
create(Path, PkiId, BackupLimits) - Static method in interface zeroecho.pki.api.backup.BackupSink: Creates owned storage under a caller-controlled directory.
create(Path, PublisherSecretsProtection, Map, char[], PublicKey) - Static method in class zeroecho.pki.impl.secrets.PublisherSecretsStore: Creates or replaces the secrets store at the given path.
create(Path, MetadataStoreId) - Static method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Creates a new append-only store without an adapter-specific record limit.
create(Path, MetadataStoreId, OptionalLong) - Static method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Creates a new append-only store.
create(List) - Static method in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry: Constructs and validates one deterministic registry snapshot.
create(ConfirmationRealmBinding, String, CredentialConfirmationLifecycle, ConfirmationProofSuiteBinding, byte[], Instant, Instant) - Static method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Creates the canonical challenge record from exact frozen inputs.
create(PkiId, String, SigningProvider.ConfigurationCommitment, long, AccessContext, KeyRef, String, SigningProvider.ContentCommitment, RepeatableContent, Optional, Optional) - Static method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Creates a request with its canonical semantic fingerprint.
create(PkiId, PkiId, List) - Static method in record class zeroecho.pki.api.ca.IssuerChainPath: Creates a canonical path from its exact ordered credential identities.
create(DomainContinuationStore.Kind, EncodedObject) - Static method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Creates a template with its canonical SHA-256 commitment.
create(MetadataKey, RepeatableContent, CancellationSignal) - Method in interface zeroecho.pki.spi.store.MetadataTransaction: Adds a create-if-absent mutation.
CREATE - Static variable in class zeroecho.pki.impl.core.continuation.IntermediateSigningCommand: Creates a new intermediate authority.
CREATE_INTERMEDIATE - Enum constant in enum class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.Operation: Creates an intermediate CA's initial credential.
CREATE_ROOT - Enum constant in enum class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.Operation: Creates a self-signed root credential.
CreateAuthority(FormatId, SubjectRef, String, KeyRef) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority: Validates the closed authority-creation input.
createBackup(BackupRequest) - Method in interface zeroecho.pki.api.BackupService: Creates a backup of PKI state.
createBackup(BackupRequest) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Creates a versioned logical backup through the bounded legacy adapter.
createBackup(BackupRequest) - Method in interface zeroecho.pki.spi.store.PkiStore: Creates a backup of PKI state, excluding private keys.
createBackupSource(BackupRequest) - Method in interface zeroecho.pki.api.BackupService: Creates a bounded file-backed backup.
createBackupSource(BackupRequest) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Creates a bounded file-backed backup.
createBackupSource(BackupRequest) - Method in interface zeroecho.pki.spi.store.PkiStore: Creates a bounded file-backed backup.
createChallenge(KeyPossessionProofChallengeContext) - Method in interface zeroecho.pki.spi.confirmation.KeyPossessionProofProvider: Creates one bounded canonical public challenge presentation without retaining the context.
createCorrelated(DomainContinuationStore.Kind, String, EncodedObject) - Static method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Creates a template with an O(1) restart correlation identity.
createdAfter() - Method in record class zeroecho.pki.api.request.RequestQuery: Returns the value of the createdAfter record component.
createdAfter() - Method in record class zeroecho.pki.api.status.StatusObjectQuery: Returns the value of the createdAfter record component.
createdAt() - Method in record class zeroecho.pki.api.orch.SigningSubmissionId: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the createdAt record component.
createdAt() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the accepted identifier creation time.
createdAt() - Method in record class zeroecho.pki.util.async.AsyncOperationSnapshot: Returns the value of the createdAt record component.
createdBefore() - Method in record class zeroecho.pki.api.request.RequestQuery: Returns the value of the createdBefore record component.
createdBefore() - Method in record class zeroecho.pki.api.status.StatusObjectQuery: Returns the value of the createdBefore record component.
createIntermediate(IntermediateCreateCommand) - Method in interface zeroecho.pki.api.CaService: Creates a new intermediate CA entity and issues its initial intermediate CA credential.
createIntermediate(IntermediateCreateCommand, CancellationSignal) - Method in interface zeroecho.pki.api.CaService: Creates an intermediate while carrying originating cancellation.
CreateIntermediate(FormatId, PkiId, SubjectRef, String, Optional) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Validates the closed intermediate-creation input.
createPublicationRecord(PublicationRecord) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
createPublicationRecord(PublicationRecord) - Method in interface zeroecho.pki.spi.store.PkiStore: Creates one publication operation if absent.
createRoot(CaCreateCommand) - Method in interface zeroecho.pki.api.CaService: Creates a new root CA entity and issues its initial CA credential.
createRoot(CaCreateCommand, CancellationSignal) - Method in interface zeroecho.pki.api.CaService: Creates a root while carrying the originating cancellation signal.
credential() - Method in record class zeroecho.pki.api.credential.CredentialBundle: Returns the value of the credential record component.
credential(PkiId) - Method in interface zeroecho.pki.application.PkiRepository: Returns an exact credential metadata record.
credential(PkiId, BigInteger) - Method in interface zeroecho.pki.application.PkiRepository: Returns an exact credential through the issuer-generation/serial index.
Credential - Record Class in zeroecho.pki.api.credential: Issued credential with mandatory core metadata and universal attributes.
Credential(PkiId, FormatId, IssuerRef, SubjectRef, Validity, String, PkiId, CredentialProfileBinding, CredentialStatus, DurableContentReference, AttributeSet) - Constructor for record class zeroecho.pki.api.credential.Credential: Creates a credential record.
CREDENTIAL - Enum constant in enum class zeroecho.pki.api.publication.PublicationSourceType: An immutable committed credential.
CREDENTIAL_NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A referenced end-entity credential does not exist.
CREDENTIAL_RECORD - Enum constant in enum class zeroecho.pki.api.content.DurableContentOwner.Category: Persisted credential record; integration is deferred.
CredentialBundle - Record Class in zeroecho.pki.api.credential: Bundle of a primary credential and supporting objects.
CredentialBundle(Credential, List) - Constructor for record class zeroecho.pki.api.credential.CredentialBundle: Creates a bundle.
CredentialConfirmationChallenge - Record Class in zeroecho.pki.api.confirmation: Immutable portable challenge record for one pending credential confirmation.
CredentialConfirmationChallenge(ConfirmationRealmBinding, String, PkiId, long, String, ConfirmationDisclosurePolicy, String, ConfirmationProofSuiteBinding, byte[], Instant, Instant, String) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Validates every frozen coordinate, defensively copies the challenge, and verifies the exact canonical record commitment.
CredentialConfirmationChallengeIssuance - Record Class in zeroecho.pki.api.confirmation: Immutable transient command for issuing one credential-confirmation challenge.
CredentialConfirmationChallengeIssuance(ConfirmationRealmBinding, String, PkiId, long, String, ConfirmationProofSuiteBinding, byte[], Duration) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Validates the exact lifecycle expectation, bounded lifetime, and immutable nonce ownership.
CredentialConfirmationInitialization - Record Class in zeroecho.pki.api.confirmation: Immutable frozen inputs for the initial credential-confirmation lifecycle record.
CredentialConfirmationInitialization(PkiId, ConfirmationDisclosurePolicy, String, boolean, Instant, ConfirmationProofSuiteRef) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Validates the exact immutable initialization inputs.
CredentialConfirmationLifecycle - Record Class in zeroecho.pki.api.confirmation: Immutable committed credential-confirmation lifecycle record.
CredentialConfirmationLifecycle(PkiId, long, ConfirmationDisclosurePolicy, String, boolean, Instant, ConfirmationProofSuiteRef, Optional, Optional, String) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Validates the lifecycle state and verifies its exact canonical commitment.
CredentialConfirmationLifecycle.State - Enum Class in zeroecho.pki.api.confirmation: Derived closed lifecycle states.
CredentialConfirmationLifecycle.Timeliness - Enum Class in zeroecho.pki.api.confirmation: Derived confirmation timeliness classifications.
CredentialConfirmationPolicy - Record Class in zeroecho.pki.api.confirmation: Immutable issuance-profile policy for credential confirmation.
CredentialConfirmationPolicy(ConfirmationDisclosurePolicy, Duration, ConfirmationProofSuiteRef) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationPolicy: Validates the complete immutable policy.
CredentialConfirmationProofAudience - Record Class in zeroecho.pki.application: Exact public audience of credential-confirmation proof transcripts.
CredentialConfirmationProofAudience(String) - Constructor for record class zeroecho.pki.application.CredentialConfirmationProofAudience: Validates the exact canonical audience without normalization.
CredentialConfirmationProofCas - Record Class in zeroecho.pki.api.confirmation: Immutable compare-and-set input binding completion to one pending lifecycle and challenge.
CredentialConfirmationProofCas(PkiId, long, String, String) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationProofCas: Validates both exact pending-record expectations.
CredentialConfirmationProofChallenge - Record Class in zeroecho.pki.api.confirmation: Immutable safe presentation of one issued credential-confirmation proof challenge.
CredentialConfirmationProofChallenge(CredentialConfirmationProofCas, ConfirmationProofSuiteBinding, Instant, int, byte[]) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallenge: Validates exact public coordinates and defensively owns presentation bytes.
CredentialConfirmationProofChallengeRequest - Record Class in zeroecho.pki.api.confirmation: Minimal caller expectation for issuing a credential-confirmation proof challenge.
CredentialConfirmationProofChallengeRequest(PkiId, long, String) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallengeRequest: Validates the exact pending lifecycle expectation.
credentialConfirmationProofPolicy() - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns the value of the credentialConfirmationProofPolicy record component.
CredentialConfirmationProofResult - Enum Class in zeroecho.pki.api.confirmation: Closed data-free result of one credential-confirmation proof submission.
CredentialConfirmationProofRuntimePolicy - Record Class in zeroecho.pki.application: Immutable server-controlled runtime policy for credential key-possession challenges.
CredentialConfirmationProofRuntimePolicy(ConfirmationRealmBinding, CredentialConfirmationProofAudience, Duration, ConfirmationProofSuiteBinding) - Constructor for record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Validates exact realm, audience, lifetime, and suite coordinates.
CredentialConfirmationProofSubmission - Record Class in zeroecho.pki.api.confirmation: Immutable bounded submission of one key-possession proof response.
CredentialConfirmationProofSubmission(CredentialConfirmationProofCas, byte[]) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationProofSubmission: Validates the exact proof coordinates and defensively owns the response.
CredentialConfirmationReview - Record Class in zeroecho.pki.api.confirmation: Reduced immutable administrative view of one pending credential confirmation.
CredentialConfirmationReview(PkiId, PkiId, String, Instant, ConfirmationDisclosurePolicy) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Validates the bounded reduced view.
CredentialConfirmationReviewCursor - Record Class in zeroecho.pki.api.confirmation: Opaque store-issued exclusive cursor for pending confirmation reviews.
CredentialConfirmationReviewCursor(String) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewCursor: Validates the bounded opaque representation.
CredentialConfirmationReviewPage - Record Class in zeroecho.pki.api.confirmation: Immutable bounded page of reduced pending-confirmation reviews.
CredentialConfirmationReviewPage(List, Optional) - Constructor for record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewPage: Copies and validates the page.
CredentialConfirmationService - Interface in zeroecho.pki.api.confirmation: Session-owned application facade for authoritative credential confirmation.
CredentialFramework - Interface in zeroecho.pki.spi.framework: Pluggable credential framework implementation.
CredentialFrameworkProvider - Interface in zeroecho.pki.spi.framework: Service provider for CredentialFramework instances.
credentialId() - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofCas: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallengeRequest: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.issuance.BundleCommand: Returns the value of the credentialId record component.
credentialId() - Method in interface zeroecho.pki.api.revocation.RevocationCommand: Returns the target credential.
credentialId() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Hold: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.RevokePermanently: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Unhold: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.revocation.RevocationInputs: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.api.revocation.RevocationRecord: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiOperation.HoldCredential: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiOperation.InspectCredential: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiOperation.InspectRevocation: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiOperation.IssueCredentialConfirmationChallenge: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiOperation.ReadRevocationHistory: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiOperation.RevokeCredential: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiOperation.RevokePendingCredentialConfirmation: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiOperation.UnholdCredential: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReissueCredential: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.application.PkiSigningOperation.RenewCredential: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Returns the value of the credentialId record component.
credentialId() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofCredential: Returns the value of the credentialId record component.
credentialId() - Method in interface zeroecho.pki.spi.store.RevocationHistory: Returns the credential selected for this history.
CredentialInventoryService - Interface in zeroecho.pki.api: Inventory and reporting service for issued credentials.
CredentialIssuerBackend - Interface in zeroecho.pki.spi.framework: SPI contract for framework-specific credential issuance backends.
CredentialLineage - Class in zeroecho.pki.api.credential: Durable, auditable supersession lineage between a superseding credential and the predecessor it replaces.
CredentialProfileBinding - Interface in zeroecho.pki.api.credential: Closed immutable identity of the policy governing an issued credential.
CredentialQuery - Record Class in zeroecho.pki.api.credential: Query constraints for searching credentials in inventory.
CredentialQuery(Optional, Optional, Optional, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.credential.CredentialQuery: Creates a credential query.
credentialRecord(PkiId) - Static method in record class zeroecho.pki.api.content.DurableContentOwner: Creates the canonical owner for one persisted credential record.
credentialScope(PkiId) - Method in interface zeroecho.pki.application.PkiResourceScopeResolver: Returns the exact logical authority and frozen profile of one committed credential.
CredentialScope(PkiId, String) - Constructor for record class zeroecho.pki.application.PkiResourceScopeResolver.CredentialScope: Validates the immutable authority and profile coordinates.
credentialSearch() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the credentialSearch record component.
CredentialSearch(int, int, int) - Constructor for record class zeroecho.pki.impl.fs.FsPkiStoreOptions.CredentialSearch: Validates all explicitly selected resource bounds.
credentialSearchAvailable() - Method in interface zeroecho.pki.application.PkiSelectionExecutor: Reports an explicitly activated, currently usable credential search index.
credentialSearchAvailable() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
credentialSearchAvailable() - Method in interface zeroecho.pki.spi.store.PkiStore: Reports whether the explicitly configured derived credential search index is ready.
CredentialSearchQuery - Record Class in zeroecho.pki.api.credential: Immutable filters for indexed credential inventory search.
CredentialSearchQuery(PkiId, Optional, Optional, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.credential.CredentialSearchQuery: Creates a query without interpreting SQL or wildcard characters.
CredentialStatus - Enum Class in zeroecho.pki.api.credential: Status of a credential as tracked by PKI inventory.
credentialStatuses() - Method in interface zeroecho.pki.application.PkiSession: Returns the session's authoritative inventory, revocation and time resolver.
CredentialUse - Enum Class in zeroecho.pki.api.credential: Closed categories of currently reachable credential trust decisions.
criticalWithNonemptySubject() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns the value of the criticalWithNonemptySubject record component.
CRL - Enum constant in enum class zeroecho.pki.api.status.StatusObjectType: Certificate Revocation List.
CRL - Enum constant in enum class zeroecho.pki.application.PkiRepositoryContent.Role: X.509 certificate-revocation-list DER.
CRL - Enum constant in enum class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectKind: X.509 CertificateList (CRL).
CRL_NUMBER - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for the monotonic CRL number assigned to a generated (full or delta) CRL.
CRL_SIGN - Enum constant in enum class zeroecho.pki.api.profile.CaKeyUsage: cRLSign.
CRL_SIGNATURE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Role: Certificate-revocation-list signature.
CrlEntry - Record Class in zeroecho.pki.spi.framework: Immutable structured input for one certificate-revocation-list entry.
CrlEntry(BigInteger, Instant, RevocationReason) - Constructor for record class zeroecho.pki.spi.framework.CrlEntry: Validates one structured CRL entry.
CrlEntrySource - Interface in zeroecho.pki.spi.framework: Stable restartable source of CRL entries.
CrlEntrySource.Cursor - Interface in zeroecho.pki.spi.framework: One-pass entry cursor.
crlNumber() - Method in record class zeroecho.pki.impl.core.DeltaCrlBase: Returns the value of the crlNumber record component.
crlNumber() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the crlNumber record component.
crlNumber() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CrlSemanticLayout: Returns the value of the crlNumber record component.
CrlScope - Class in zeroecho.pki.impl.core: Immutable internal identity of an X.509 CRL issuer: canonical X.500 name and exact canonical DER SubjectPublicKeyInfo.
CrlSemanticLayout(StreamingDerReader.SignedObjectLayout, BigInteger, Optional) - Constructor for record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CrlSemanticLayout: Validates the immutable bounded projection.
crlSignature() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Returns the value of the crlSignature record component.
CRMF - Enum constant in enum class zeroecho.pki.api.request.X509EnrollmentPayload.Kind: RFC 4211 CertReqMsg with signing-key proof.
CRMF_DER - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Original canonical CRMF CertReqMsg bytes; mutually exclusive with BcX509Attributes.CSR_DER.
CROSS_PROCESS_COORDINATION - Enum constant in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.OptionalFeature: Store authority coordinates cooperating processes.
CRYPTO_FAILURE - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Cryptographic execution failed.
CSR_DER - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for a DER-encoded PKCS#10 certification request.
CSR_MALFORMED - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionReason: The certification request could not be parsed or is structurally invalid.
CSR_PAYLOAD_MISSING - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionReason: The certification-request payload required for verification was missing.
CSR_SIGNATURE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Role: PKCS#10 self-signature or CRMF signing-key proof signature.
csrDer() - Method in record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Returns the immutable request payload as a caller-owned snapshot.
csrDer() - Method in record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Returns the original PKCS#10 request.
csrSignature() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Returns the value of the csrSignature record component.
CtJournalEntry - Record Class in zeroecho.pki.spi.ct: Immutable Merkle-chained entry in the CT audit journal.
CtJournalEntry(long, Instant, byte[], BigInteger, String, byte[], byte[], byte[]) - Constructor for record class zeroecho.pki.spi.ct.CtJournalEntry: Validates fields and defensively copies all byte arrays.
CtJournalException - Exception Class in zeroecho.pki.spi.ct: Checked exception thrown by CtJournalStore operations.
CtJournalException(String) - Constructor for exception class zeroecho.pki.spi.ct.CtJournalException: Creates an exception with a descriptive message.
CtJournalException(String, Throwable) - Constructor for exception class zeroecho.pki.spi.ct.CtJournalException: Creates an exception wrapping a lower-level cause.
CtJournalStore - Interface in zeroecho.pki.spi.ct: Append-only, Merkle-chained CT audit journal.
CtJournalVerificationResult - Record Class in zeroecho.pki.spi.ct: Result of a CtJournalStore.verify(long, long) integrity check.
CtJournalVerificationResult(long, long, boolean, List) - Constructor for record class zeroecho.pki.spi.ct.CtJournalVerificationResult: Validates the result state.
CtLogDescriptor - Record Class in zeroecho.pki.api.ct: Describes a Certificate Transparency log endpoint used for Mode B SCT collection.
CtLogDescriptor(String, String, byte[], boolean, String) - Constructor for record class zeroecho.pki.api.ct.CtLogDescriptor: Validates and defensively copies mutable fields.
current() - Method in interface zeroecho.pki.spi.framework.CrlEntrySource.Cursor: Returns the current entry.
current() - Method in interface zeroecho.pki.spi.store.AuditEvidenceFeed: Returns the current entry.
current() - Method in interface zeroecho.pki.spi.store.RevocationHistory: Returns the current transition.
current() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot.Cursor: Returns the current state.
current() - Method in interface zeroecho.pki.spi.store.RevocationTransitionFeed: Returns the current append entry.
CURRENT_VERSION - Static variable in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Standalone configuration document version; this does not version stored PKI data.
CURRENT_VERSION - Static variable in record class zeroecho.pki.application.PkiSessionConfiguration: Current and only accepted configuration schema version.
currentGlobalRevision() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot.Cursor: Returns the authoritative global transition revision of the current state.
currentHead() - Method in class zeroecho.pki.impl.audit.FileAuditSink: Recovers and returns the current chain head, seeding it from disk if needed.
currentIssuanceIssuerId() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns the value of the currentIssuanceIssuerId record component.
cursor() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.PageCandidate: Returns the value of the cursor record component.
CUSTOM - Enum constant in enum class zeroecho.pki.api.publication.PublicationTargetType: Custom target type implemented by a publisher plugin.
cutoffInclusive() - Method in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Returns the value of the cutoffInclusive record component.

D

dashboardLiveSource() - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns the value of the dashboardLiveSource record component.
DashboardLiveSource - Interface in zeroecho.pki.application: Server-layer live counters injected into dashboard metric computation.
DashboardLiveSource.Metric - Record Class in zeroecho.pki.application: Immutable measurement without exception or provider details.
DashboardLiveSource.State - Enum Class in zeroecho.pki.application: Availability of one independently collected measurement.
DATA_ENCIPHERMENT - Enum constant in enum class zeroecho.pki.api.profile.LeafKeyUsage: dataEncipherment.
DC_HSM_KEYSTORE_OPEN_FAILED - Static variable in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory: Stable failure code when the HSM KeyStore cannot be opened.
DC_KEYRING_OPEN_FAILED - Static variable in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory: Stable failure code for an I/O failure while opening the keyring.
DC_KEYRING_UNLOCK_PROVIDER_FAILED - Static variable in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory: Stable failure code for an unlock-provider acquisition failure.
DC_KEYRING_UNLOCK_PROVIDER_REQUIRED - Static variable in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory: Stable failure code for a missing explicit keyring unlock provider.
DC_PIN_ENV_NOT_SET - Static variable in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory: Stable failure code when the HSM PIN environment variable is absent or empty.
DC_PKCS11_PROVIDER_LOAD_FAILED - Static variable in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory: Stable failure code when the PKCS#11 provider cannot be loaded.
DC_REMOTE_TRANSPORT_UNCONFIGURED - Static variable in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory: Stable failure code when no concrete transport is configured for the endpoint.
deadline() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCallControl: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.CallControl: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the deadline record component.
deadline() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the absolute accepted signing deadline.
DEADLINE_EXCEEDED - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: The operation did not establish a successful outcome before its deadline.
DEADLINE_EXCEEDED - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic failure to establish success before the operation deadline.
DEADLINE_EXPIRED - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.CancellationReason: Authoritative signing deadline elapsed.
DEADLINE_EXPIRED - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: The call or request deadline elapsed before completion.
decide(AttributeDefinition, AccessAction, AccessContext) - Method in interface zeroecho.pki.api.audit.AttributeAccessController: Evaluates an access request.
DECIPHER_ONLY - Enum constant in enum class zeroecho.pki.api.profile.LeafKeyUsage: decipherOnly.
decisionId() - Method in record class zeroecho.pki.api.policy.PolicyDecision: Returns the value of the decisionId record component.
decisionId() - Method in record class zeroecho.pki.api.policy.PolicyTrace: Returns the value of the decisionId record component.
decode(byte[]) - Static method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Decodes a feed payload containing UTF-8 canonical unpadded base64url attributes.
decode(byte[]) - Static method in record class zeroecho.pki.application.PublicationExecutionEvidence: Decodes a feed payload containing UTF-8 canonical unpadded base64url attributes.
decode(byte[]) - Static method in record class zeroecho.pki.application.SigningExecutionEvidence: Decodes a feed payload containing UTF-8 canonical unpadded base64url attributes.
decode(byte[]) - Static method in record class zeroecho.pki.application.StatusGenerationEvidence: Decodes a feed payload containing UTF-8 canonical unpadded base64url attributes.
decode(byte[]) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge: Decodes exact framing and reconstructs all 14 command commitments.
decode(String) - Static method in class zeroecho.pki.impl.core.continuation.DomainAttributeEncoding: Decodes and validates one exact canonical base64url attribute set.
decode(String) - Method in interface zeroecho.pki.util.async.codec.IdCodec: Decodes a previously encoded token.
decode(String) - Method in interface zeroecho.pki.util.async.codec.ResultCodec: Decodes a previously encoded result token.
decode(AttributeSet) - Static method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Strictly decodes the closed version-one evidence vocabulary.
decode(AttributeSet) - Static method in record class zeroecho.pki.application.PublicationExecutionEvidence: Strictly decodes the closed version-one evidence vocabulary.
decode(AttributeSet) - Static method in record class zeroecho.pki.application.RevocationExecutionEvidence: Strictly decodes the closed version-one evidence vocabulary.
decode(AttributeSet) - Static method in record class zeroecho.pki.application.SigningExecutionEvidence: Strictly decodes the closed version-one evidence vocabulary.
decode(AttributeSet) - Static method in record class zeroecho.pki.application.StatusGenerationEvidence: Strictly decodes the closed version-one evidence vocabulary.
decode(AttributeSet) - Static method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Decodes exactly one correctly typed value for each provenance attribute.
decode(EncodedObject) - Static method in class zeroecho.pki.impl.core.continuation.DomainCommandEncoding: Strictly decodes one bounded command into its discriminator and fields.
decode(X509AlgorithmIdentifier) - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRule: Reverse-resolves an exact X.509 representation.
decode(AlgorithmIdentifier, X509AlgorithmRole) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509AlgorithmAdapter: Converts and reverse-resolves a PKIX library algorithm identifier.
Decoded(String, List) - Constructor for record class zeroecho.pki.impl.core.continuation.DomainCommandEncoding.Decoded: Snapshots decoded values.
Decoded(PkiId, Instant, Optional, byte[], DomainCommandEncoding.Decoded, byte[]) - Constructor for record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Snapshots decoded values; construct through ManagedKeyProofChallenge.decode(byte[]) for validation.
decodeOptional(String) - Method in interface zeroecho.pki.util.async.codec.ResultCodec: Convenience: optional decode wrapper.
decodePrefix(DomainCommandEncoding.Decoded) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Validates only fields 0 through 5 and the proof discriminator.
DefaultAttributeGovernanceService - Class in zeroecho.pki.impl.audit: Default enforcement implementation of AttributeGovernanceService.
DefaultAttributeGovernanceService(AttributeAccessController, AuditService, Clock) - Constructor for class zeroecho.pki.impl.audit.DefaultAttributeGovernanceService: Creates a governance service.
DefaultCertificationRequestService - Class in zeroecho.pki.impl.core: Default implementation of CertificationRequestService.
DefaultCertificationRequestService(PkiStore, BcX509CredentialFramework, X509AlgorithmBindingRegistry) - Constructor for class zeroecho.pki.impl.core.DefaultCertificationRequestService: Creates a request service with the same explicit binding registry used by session issuance.
DefaultCertificationRequestService(PkiStore, CredentialFramework) - Constructor for class zeroecho.pki.impl.core.DefaultCertificationRequestService: Creates a certification request service bound to the supplied persistence and framework collaborators.
DefaultCredentialConfirmationService - Class in zeroecho.pki.impl.core: Default store-backed confirmation facade with session lifecycle enforcement.
DefaultCredentialConfirmationService(PkiStore, Runnable, Map, Optional, SecureRandom, Optional, Clock) - Constructor for class zeroecho.pki.impl.core.DefaultCredentialConfirmationService: Creates a facade over one session-owned store.
DefaultPreparedSemanticSigningRequest - Class in zeroecho.pki.impl.core.signing: Opaque semantic view over the existing signing preparation's sole custody state.
DefaultPreparedSigningRequest - Class in zeroecho.pki.impl.core.signing: Module-private implementation of the externally opaque prepared carrier.
DefaultProfileService - Class in zeroecho.pki.impl.core: Store-backed implementation of the certificate-profile lifecycle.
DefaultProfileService(PkiStore, Clock, AuditSink) - Constructor for class zeroecho.pki.impl.core.DefaultProfileService: Creates a profile service using one authoritative clock.
DefaultProfileService(PkiStore, Clock, AuditSink, X509AlgorithmBindingRegistry) - Constructor for class zeroecho.pki.impl.core.DefaultProfileService: Creates a profile service bound to one immutable algorithm registry.
DefaultProfileService(PkiStore, Clock, AuditSink, X509AlgorithmBindingRegistry, boolean, Optional, Optional, Optional) - Constructor for class zeroecho.pki.impl.core.DefaultProfileService: Creates a profile service with the session's explicit signing bindings.
DefaultPublicationService - Class in zeroecho.pki.impl.core: Durable explicit post-commit publication lifecycle.
DefaultPublicationService(PkiStore, Clock, Collection) - Constructor for class zeroecho.pki.impl.core.DefaultPublicationService: Opens a publication lifecycle over one store and immutable publisher registry.
DefaultRevocationService - Class in zeroecho.pki.impl.core: Store-backed authoritative revocation transition service.
DefaultRevocationService(PkiStore, Clock, AuditSink) - Constructor for class zeroecho.pki.impl.core.DefaultRevocationService: Creates the service with one authoritative clock.
defaults() - Static method in record class zeroecho.pki.api.backup.BackupLimits: Conservative defaults: 1 GiB archive, 4 GiB expanded, 512 MiB per entry, 60000 entries, 1024-byte paths, 16 MiB manifest and record decode buffers, ratio 1000, and 2 MiB legacy.
defaults() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRuleProvider: Returns additive explicitly versioned defaults.
defaults() - Static method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns default options (history enabled with 90 days retention).
DefaultSemanticSigningService - Class in zeroecho.pki.impl.core.signing: Stateless, thread-safe semantic facade over the session's signing service.
DefaultSemanticSigningService(PkiStore, DefaultSigningService, EndEntitySigningPreparation) - Constructor for class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService: Binds a semantic facade to the exact store used by a session signing service.
DefaultSemanticSigningService(PkiStore, DefaultSigningService, EndEntitySigningPreparation, long) - Constructor for class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService: Binds preparation to the session's resolved pure-EdDSA admission bound.
DefaultSemanticSigningService(PkiStore, DefaultSigningService, EndEntitySigningPreparation, long, Optional) - Constructor for class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService: Binds the public semantic operations to session-owned preparation.
DefaultSemanticSigningService(PkiStore, DefaultSigningService, EndEntitySigningPreparation, long, Optional, Optional) - Constructor for class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService: Binds semantic operations to exact session-owned preparation dependencies.
DefaultSemanticSigningService(PkiStore, DefaultSigningService, EndEntitySigningPreparation, long, Optional, Optional, Optional) - Constructor for class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService: Binds all currently supported semantic preparers to the same session graph.
DefaultSemanticSigningService(PkiStore, DefaultSigningService, EndEntitySigningPreparation, long, Optional, Optional, Optional, Optional) - Constructor for class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService: Binds root and intermediate creation to the existing session signing graph.
DefaultSigningService - Class in zeroecho.pki.impl.core.signing: Stateless thread-safe implementation over the authoritative signing store.
DefaultSigningService(PkiStore, SigningProvider, AlgorithmIdentity, Duration, SecureRandom, Runnable, DefaultSigningService.AcceptanceOperation, Runnable, DefaultSigningService.ObservationWait) - Constructor for class zeroecho.pki.impl.core.signing.DefaultSigningService: Creates a service bound to one exact store/provider configuration.
DefaultSigningService.AcceptanceOperation - Interface in zeroecho.pki.impl.core.signing: Reactor-owned acceptance operation and custody-transfer boundary.
DefaultSigningService.ObservationWait - Interface in zeroecho.pki.impl.core.signing: Borrowed wait callback implemented by the service's existing reactor.
deferSignReconciliation(PkiId, long, long, SignWorkflowStore.ReconciliationFailureClass) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
deferSignReconciliation(PkiId, long, long, SignWorkflowStore.ReconciliationFailureClass) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Defers reconciliation with store-authoritative exponential backoff.
definition() - Method in record class zeroecho.pki.api.profile.ActiveCertificateProfile: Returns the value of the definition record component.
definition() - Method in class zeroecho.pki.api.profile.BuiltInCertificateProfileTemplate: Returns the validated immutable profile definition.
definition() - Method in class zeroecho.pki.api.profile.ImportedCertificateProfileVersion: Returns the imported profile definition.
delete(MetadataKey, long) - Method in interface zeroecho.pki.spi.store.MetadataTransaction: Adds a compare-and-delete mutation.
deleteWorkflowState(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
deleteWorkflowState(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Deletes workflow continuation state for a given operation.
DELTA_CRL - Enum constant in enum class zeroecho.pki.api.status.StatusObjectType: Delta CRL (incremental updates).
DELTA_OPERATION - Static variable in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Delta-CRL schema discriminator with an immutable five-field base suffix.
DeltaCrlBase - Record Class in zeroecho.pki.impl.core: Frozen, resource-free identity of the validated full CRL used by a delta.
DeltaCrlBase(PkiId, BigInteger, FullCrlSnapshotProvenance) - Constructor for record class zeroecho.pki.impl.core.DeltaCrlBase: Rejects identifiers and numbers outside the canonical CRL domain.
DeltaCrlRequest - Record Class in zeroecho.pki.api.status: Requests a delta X.509 CRL for an explicit issuer generation.
DeltaCrlRequest(PkiId, Duration) - Constructor for record class zeroecho.pki.api.status.DeltaCrlRequest: Validates the request coordinates without store access.
deltaIndicator() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CrlSemanticLayout: Returns the value of the deltaIndicator record component.
DENIED - Enum constant in enum class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningState: The signature was refused by policy or an operator.
DENIED - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Provider policy denied the request.
DENY - Enum constant in enum class zeroecho.pki.api.audit.AccessDecision: Access is denied.
DENY - Enum constant in enum class zeroecho.pki.api.policy.PolicyDecisionStatus: Operation is denied under current policy.
Dependency boundary - Section in interface zeroecho.pki.spi.framework.CredentialFrameworkProvider
DEPLOYER_ECOSYSTEM - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Interoperability: One explicitly configured deployment ecosystem.
DEPLOYER_PRIVATE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Origin: Explicitly enabled deployment-owned assignment.
DeploymentResourcePolicy - Record Class in zeroecho.pki.api.content: Immutable deployment-owned resource policy for streaming PKI operations.
DeploymentResourcePolicy(ResourceLimit, ResourceLimit, ResourceLimit, ResourceLimit, ResourceLimit, ResourceLimit, ResourceLimit) - Constructor for record class zeroecho.pki.api.content.DeploymentResourcePolicy: Creates a deployment resource policy.
DEPRECATED - Enum constant in enum class zeroecho.pki.api.attr.AttributeStability: Attribute is deprecated and should not be used for new profiles.
der() - Method in record class zeroecho.pki.api.request.X509EnrollmentPayload: Returns an independently owned original payload.
der() - Method in record class zeroecho.pki.application.OcspResponseService.Response: Returns the response DER without exposing internal state.
DER - Enum constant in enum class zeroecho.pki.api.Encoding: ASN.1 Distinguished Encoding Rules (DER).
DER - Enum constant in enum class zeroecho.pki.api.transfer.ExportFormat: Export as DER artifacts where applicable.
DER_NULL - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.ParameterRule: Parameters must be canonical DER NULL.
DER_NULL - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier.ParameterForm: Parameters are canonical DER NULL.
derive(AttributeCatalogue, AttributeSet, AttributeId, AccessContext) - Method in interface zeroecho.pki.api.audit.AttributeGovernanceService: Derives an attribute value from other inputs after applying access control.
derive(AttributeCatalogue, AttributeSet, AttributeId, AccessContext) - Method in class zeroecho.pki.impl.audit.DefaultAttributeGovernanceService
derive(CorrelatedEndEntityIssuanceRequest) - Static method in record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Hashes length-framed fields without constructing an aggregate command.
derive(CorrelatedEndEntityRenewalRequest) - Static method in record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Derives a domain-separated renewal identity without store reads.
derive(CorrelatedEndEntityReplacementRequest) - Static method in record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Derives an exact replacement commitment without store reads or authorization.
DERIVE - Enum constant in enum class zeroecho.pki.api.audit.AccessAction: Derive/computed attribute value from other sources.
deriveConfirmed(CredentialConfirmationProofCas, Instant) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Derives a confirmed lifecycle value without mutating this pending record.
derNull(String) - Static method in class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier: Creates an identifier with canonical DER NULL parameters.
description() - Method in record class zeroecho.pki.api.attr.AttributeMeta: Returns the value of the description record component.
description() - Method in record class zeroecho.pki.api.ct.CtLogDescriptor: Returns the value of the description record component.
descriptor(int) - Method in interface zeroecho.pki.spi.confirmation.KeyPossessionProofProvider: Returns the exact immutable descriptor for one approved RSA modulus ceiling.
descriptors() - Static method in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: Returns deterministic safe descriptors for every sealed standard binding.
descriptors() - Static method in class zeroecho.pki.impl.framework.x509.ZeroEchoPrivateX509Bindings: Returns the frozen private binding descriptors.
Design goals - Section in package zeroecho.pki.impl.core.attr
Design principles - Section in package zeroecho.pki.api
Design principles - Section in package zeroecho.pki.impl.fs
Design principles - Section in package zeroecho.pki.util
DETAIL_CODE - Static variable in record class zeroecho.pki.application.SigningExecutionEvidence: Evidence attribute vocabulary.
detailCode() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns the value of the detailCode record component.
detailCode() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the detailCode record component.
detailCode() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns the value of the detailCode record component.
detailCode() - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Returns the value of the detailCode record component.
detailCode() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Returns the value of the detailCode record component.
detailCode() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the detailCode record component.
detailCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofOutcome: Returns the value of the detailCode record component.
detailCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the detailCode record component.
detailCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the optional finite safe status detail.
detailCode() - Method in record class zeroecho.pki.util.async.AsyncStatus: Returns the value of the detailCode record component.
details() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns the value of the details record component.
details() - Method in record class zeroecho.pki.api.request.ProofOfPossessionResult: Returns the value of the details record component.
details() - Method in record class zeroecho.pki.util.async.AsyncStatus: Returns the value of the details record component.
Determinism - Section in class zeroecho.pki.impl.audit.StdoutAuditSink
Determinism - Section in package zeroecho.pki.impl.audit
Determinism and ordering - Section in record class zeroecho.pki.api.audit.AuditEvent
DIAGNOSTICS - Enum constant in enum class zeroecho.pki.api.attr.AttributeExportTarget: Export to diagnostics/debugging channels (typically heavily redacted).
digest() - Method in class zeroecho.pki.impl.core.CrlScope: Returns lowercase SHA-256 index locator, never an ownership proof.
DIGEST - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Kind: Digest AlgorithmIdentifier component.
digestId() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the digestId record component.
digestLength(AlgorithmIdentity) - Static method in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Resolves the output size of a supported prehash digest.
DIGITAL_SIGNATURE - Enum constant in enum class zeroecho.pki.api.profile.LeafKeyUsage: digitalSignature.
DIRECT_MTLS - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authentication: Direct mutual-TLS client authentication.
DIRECT_MTLS - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authentication: Direct mutual-TLS client authentication.
DIRECT_RESPONSE - Enum constant in enum class zeroecho.pki.api.publication.PublicationEvidence: The publisher returned a definitive result from direct dispatch.
direction() - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Returns the value of the direction record component.
directory() - Method in interface zeroecho.pki.api.backup.BackupPreparation: Returns the private frozen candidate root, never a live store.
disabled() - Static method in class zeroecho.pki.impl.fs.FsHistoryPolicy: Disables history tracking.
DISABLED - Enum constant in enum class zeroecho.pki.api.ca.CaState: CA is administratively disabled.
DISABLED - Enum constant in enum class zeroecho.pki.api.ca.IssuerGenerationState: Administratively disabled generation.
discard(PreparedSemanticSigningRequest) - Method in interface zeroecho.pki.api.SemanticSigningService: Releases an unused prepared candidate without accepting the operation.
discard(PreparedSemanticSigningRequest) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
discard(PreparedSigningRequest) - Method in interface zeroecho.pki.api.SigningService: Releases a prepared candidate that will not be accepted.
discard(PreparedSigningRequest) - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService
discardUnpublishedRestore(PkiId, Optional, String) - Method in interface zeroecho.pki.api.BackupService: Discards an unpublished restore attempt after cold coordinator recovery.
discardUnpublishedRestore(PkiId, Optional, String) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Discards an unpublished restore attempt after cold coordinator recovery.
discardUnpublishedRestore(PkiId, Optional, String) - Method in interface zeroecho.pki.spi.store.PkiStore: Discards an unpublished restore attempt after cold coordinator recovery.
disclosurePolicy() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationPolicy: Returns the value of the disclosurePolicy record component.
dispatch(SigningProvider.SignRequest, SigningProvider.CallControl) - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProvider
dispatch(SigningProvider.SignRequest, SigningProvider.CallControl) - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider: Dispatches a stateless signing request using the configured transport.
dispatch(SigningProvider.SignRequest, SigningProvider.CallControl) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
dispatch(SigningProvider.SignRequest, SigningProvider.CallControl) - Method in interface zeroecho.pki.spi.crypto.SigningProvider: Executes or submits the exact already-claimed signing request once.
dispatch(SignWorkflowStore.Workflow, RepeatableContent, CancellationSignal) - Method in class zeroecho.pki.spi.crypto.SigningProviderExecutor: Dispatches one durably claimed DISPATCHED state.
DISPATCH_OWED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: The initial dispatch has not yet returned a durable pending checkpoint.
DISPATCH_PREPARED - Enum constant in enum class zeroecho.pki.api.publication.PublicationStatus: One exact attempt is durably prepared but has no classified outcome.
DISPATCHED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Provider submission has a stable downstream operation identifier.
displayName() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns the value of the displayName record component.
displayName() - Method in record class zeroecho.pki.api.profile.CertificateProfile: Returns the value of the displayName record component.
displayName() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the displayName record component.
disposition() - Method in record class zeroecho.pki.api.signing.SigningAcceptanceResult: Returns the value of the disposition record component.
disposition() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofOutcome: Returns the value of the disposition record component.
DN - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: Distinguished Name representation (string form with normalization rules defined by profile/policy).
DNS_NAME - Enum constant in enum class zeroecho.pki.api.profile.SubjectAlternativeNameType: DNS service name.
DnsName(String) - Constructor for record class zeroecho.pki.api.request.SubjectAlternativeName.DnsName: Canonicalizes and validates the DNS name.
DO_NOT_STORE - Enum constant in enum class zeroecho.pki.api.request.RequestStorePolicy: Do not persist parsed requests.
document() - Method in record class zeroecho.pki.application.PkiOperation.RegisterProfile: Returns a defensive document copy.
document() - Method in record class zeroecho.pki.application.PkiOperation.ValidateProfile: Returns a defensive document copy.
DomainAttributeEncoding - Class in zeroecho.pki.impl.core.continuation: Strict bounded encoding of the closed public attribute-value hierarchy.
DomainCommandEncoding - Class in zeroecho.pki.impl.core.continuation: Strict length-framed encoding for frozen outer-operation command fields.
DomainCommandEncoding.Decoded - Record Class in zeroecho.pki.impl.core.continuation: Immutable decoded command.
DomainContinuationStore - Interface in zeroecho.pki.spi.store: Domain-owned durable continuation paired with one signing operation.
DomainContinuationStore.Kind - Enum Class in zeroecho.pki.spi.store: Domain operation reconstructed after signing completes.
DomainContinuationStore.Record - Record Class in zeroecho.pki.spi.store: Complete versioned durable outer continuation.
DomainContinuationStore.State - Enum Class in zeroecho.pki.spi.store: Durable outer lifecycle.
DomainContinuationTemplate - Record Class in zeroecho.pki.impl.core.continuation: Immutable bounded domain input attached atomically to a signing intent.
DomainContinuationTemplate(DomainContinuationStore.Kind, Optional, EncodedObject, String) - Constructor for record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Validates and defensively snapshots the exact command.
DomainContinuationValidation - Class in zeroecho.pki.impl.core.continuation: Central fail-closed validation for recovered durable domain continuations.
DomainSigningRequest - Record Class in zeroecho.pki.impl.core.continuation: Exact bounded inputs for one signing operation with durable domain ownership.
DomainSigningRequest(PkiId, AccessContext, KeyRef, String, Encoding, DurableContentReference, Duration, DomainContinuationTemplate, Optional) - Constructor for record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Validates mandatory immutable inputs.
domainTemplate() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns the value of the domainTemplate record component.
downstreamOperationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the downstreamOperationId record component.
downstreamOperationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the optional current provider-side operation identity.
due() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns the value of the due record component.
DueCandidate(PkiId, SignWorkflowStore.SchedulingCoordinates, boolean) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.DueCandidate: Validates one immutable due candidate.
DuePage(List, Optional, int, boolean, Optional) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.DuePage: Validates and snapshots one lightweight due page.
DUPLICATE_SEQUENCE - Enum constant in enum class zeroecho.pki.api.audit.AuditIntegrityReport.Status: The same sequence appears more than once (a record was duplicated).
Durability model - Section in package zeroecho.pki.util.async
durabilityPolicy() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns the value of the durabilityPolicy record component.
Durability semantics - Section in class zeroecho.pki.util.async.impl.DurableAsyncBus
DURABLE_ENCRYPTED_STATE - Enum constant in enum class zeroecho.pki.api.orch.OrchestrationDurabilityPolicy: Durable operation with encrypted continuation state.
DURABLE_MIN_STATE - Enum constant in enum class zeroecho.pki.api.orch.OrchestrationDurabilityPolicy: Durable operation using minimal non-sensitive state.
DurableAsyncBus<OpId, Owner, EndpointId, Result> - Class in zeroecho.pki.util.async.impl: Generic durable implementation of AsyncBus.
DurableAsyncBus(IdCodec, IdCodec, IdCodec, ResultCodec, AppendOnlyLineStore) - Constructor for class zeroecho.pki.util.async.impl.DurableAsyncBus: Creates the durable async bus and immediately replays persisted state from the append-only store.
DurableContentOwner - Record Class in zeroecho.pki.api.content: Typed immutable identity of a durable business owner of staged content.
DurableContentOwner(DurableContentOwner.Category, String) - Constructor for record class zeroecho.pki.api.content.DurableContentOwner: Creates and validates one typed owner identity.
DurableContentOwner.Category - Enum Class in zeroecho.pki.api.content: Closed durable-owner categories reserved by the Phase A lifecycle.
DurableContentReference - Interface in zeroecho.pki.api.content: Stable, payload-free reference to immutable staged content.
DurableContentReference.Lifecycle - Enum Class in zeroecho.pki.api.content: Durable ownership classification.
DurableTransactionalMetadataStore - Class in zeroecho.pki.impl.fs: Durable exclusive-writer implementation of the transactional metadata-store SPI.

E

EC_POINT - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.PublicKeyEncoding: SEC1 elliptic-curve point.
EC_POINT - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.PublicKeyEncoding: SEC1 encoded elliptic-curve point.
ECDSA_DER - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.SignatureEncoding: Canonical DER sequence of positive ECDSA integers.
ECDSA_DER - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.SignatureEncoding: ASN.1 DER SEQUENCE { r, s }.
EFFECT_COMMITTED - Enum constant in enum class zeroecho.pki.api.schedule.StatusScheduleState.Phase: Canonical status object and execution result committed atomically.
effectiveCommitment() - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Returns the value of the effectiveCommitment record component.
effectiveCommitment() - Method in record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Returns the value of the effectiveCommitment record component.
effectiveCommitment() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Returns deterministic client-effective configuration commitment.
EffectiveCredentialStatus - Enum Class in zeroecho.pki.api.credential: Runtime status used when deciding whether a credential may participate in a security-sensitive operation.
EffectiveCredentialStatusResolver - Interface in zeroecho.pki.api.credential: Resolves authoritative runtime credential status for trust decisions.
EffectiveCredentialStatusResolver.Evaluation - Interface in zeroecho.pki.api.credential: One immutable-time effective-status evaluation.
effectiveInputs() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Returns capabilities after applying the client's finite raw wire ceiling.
EGOTHOR_PEN - Static variable in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry: Egothor Private Enterprise Number root.
EMAIL_ADDRESS - Enum constant in enum class zeroecho.pki.api.profile.SubjectRdnType: PKCS #9 email address.
emittedEntryCount() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the emittedEntryCount record component.
empty() - Static method in record class zeroecho.pki.api.audit.AuditChainHead: Returns the head of an empty audit log.
EMPTY - Static variable in interface zeroecho.pki.api.content.ResourceLimit: Smallest valid observed aggregate value.
enabled() - Method in record class zeroecho.pki.api.ct.CtLogDescriptor: Returns the value of the enabled record component.
enabled() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the enabled record component.
enabled() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Returns the value of the enabled record component.
enabled() - Method in class zeroecho.pki.impl.fs.FsHistoryPolicy: Whether history is enabled.
ENCIPHER_ONLY - Enum constant in enum class zeroecho.pki.api.profile.LeafKeyUsage: encipherOnly.
encode(R) - Method in interface zeroecho.pki.util.async.codec.ResultCodec: Encodes a result to a single-line string.
encode(T) - Method in interface zeroecho.pki.util.async.codec.IdCodec: Encodes a value as a stable, filesystem-safe string token.
encode(AlgorithmIdentity) - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRule: Resolves an exact identity to its canonical X.509 representation.
encode(AlgorithmIdentity, X509AlgorithmRole) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509AlgorithmAdapter: Resolves an exact identity and converts it to the PKIX library value type.
encode(AttributeSet) - Static method in class zeroecho.pki.impl.core.continuation.DomainAttributeEncoding: Encodes an exact immutable attribute set as canonical base64url.
encode(PkiId, Instant, Optional, List, byte[], byte[]) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge: Encodes one exact challenge after all framing and aggregate bounds checks.
encoded() - Method in record class zeroecho.pki.api.request.CertificationRequest: Returns the value of the encoded record component.
encoded() - Method in record class zeroecho.pki.application.PkiOperation.ImportRequest: Returns the value of the encoded record component.
encoded() - Method in class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommitment: Returns the versioned persistence representation.
encodedCommitment() - Method in class zeroecho.pki.api.signing.SigningAcceptanceReceipt: Returns the canonical acceptance commitment.
encodedLength() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CertificateTbsLayout: Returns the value of the encodedLength record component.
encodedLength(long) - Static method in class zeroecho.pki.impl.framework.x509.StreamingDerWriter: Returns the encoded size of one tag-length-value object.
encodedLength(StreamingX509CrlTbsWriter.Measurement, BigInteger) - Method in class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter: Computes the exact complete TBS size for the subsequently reserved number.
EncodedObject - Record Class in zeroecho.pki.api: Immutable container for an encoded artifact.
EncodedObject(Encoding, byte[]) - Constructor for record class zeroecho.pki.api.EncodedObject: Creates an encoded object.
encodedRequest(ParsedCertificationRequest) - Method in interface zeroecho.pki.api.CertificationRequestService: Restores the exact bounded X.509 CSR DER snapshot retained in a parsed request.
encodedRequest(ParsedCertificationRequest) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Returns a bounded, fingerprint-checked copy of the retained X.509 CSR.
encodedSize(AttributeSet) - Static method in class zeroecho.pki.impl.core.continuation.DomainAttributeEncoding: Computes and bounds the exact binary encoding size before aggregate allocation.
encodedX509Request(ParsedCertificationRequest) - Method in interface zeroecho.pki.api.CertificationRequestService: Restores the exact typed X.509 enrollment payload from a stored parse result.
encodedX509Request(ParsedCertificationRequest) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Restores the exact typed X.509 enrollment payload from a stored parse result.
encodeProof(EncodedObject) - Static method in class zeroecho.pki.impl.core.continuation.IntermediateSigningCommand: Encodes a frozen proof command without changing its exact binary bytes.
encoding() - Method in interface zeroecho.pki.api.content.DurableContentReference: Returns the semantic transport encoding.
encoding() - Method in record class zeroecho.pki.api.EncodedObject: Returns the value of the encoding record component.
encoding() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns the value of the encoding record component.
Encoding - Section in class zeroecho.pki.impl.audit.FileAuditSink
Encoding - Enum Class in zeroecho.pki.api: Specifies the encoding of a binary artifact payload.
encodingVersion() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the encodingVersion record component.
END_ENTITY - Enum constant in enum class zeroecho.pki.api.profile.CertificateProfileKind: End-entity certificate.
END_ENTITY_ISSUER - Enum constant in enum class zeroecho.pki.api.credential.CredentialUse: Issuer credential used for end-entity issuance.
EndEntityIssuanceRequest - Record Class in zeroecho.pki.api.issuance: Immutable input for end-entity issuance from an explicitly typed X.509 request.
EndEntityIssuanceRequest(PkiId, byte[], String, Optional) - Constructor for record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Constructs a PKCS#10 issuance request using the established convenience API.
EndEntityIssuanceRequest(PkiId, X509EnrollmentPayload, String, Optional) - Constructor for record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Validates references and reuses the already immutable payload in constant time and memory.
EndEntityProfileBinding - Record Class in zeroecho.pki.api.credential: Exact imported and activated profile identity for an end-entity credential.
EndEntityProfileBinding(CertificateProfileRef) - Constructor for record class zeroecho.pki.api.credential.EndEntityProfileBinding: Creates an end-entity binding.
EndEntityReissueRequest - Record Class in zeroecho.pki.api.issuance: Immutable, thread-safe reissue input.
EndEntityReissueRequest(PkiId) - Constructor for record class zeroecho.pki.api.issuance.EndEntityReissueRequest: Validates the immutable input in constant time and auxiliary memory.
EndEntityRenewalRequest - Record Class in zeroecho.pki.api.issuance: Immutable, thread-safe renewal input.
EndEntityRenewalRequest(PkiId, Optional) - Constructor for record class zeroecho.pki.api.issuance.EndEntityRenewalRequest: Validates the immutable input in constant time and auxiliary memory.
EndEntityReplacementRequest - Record Class in zeroecho.pki.api.issuance: Immutable, thread-safe replacement input with a fresh, explicitly typed request.
EndEntityReplacementRequest(PkiId, byte[], String) - Constructor for record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Creates a replacement from a bounded PKCS#10 request, defensively copied.
EndEntityReplacementRequest(PkiId, X509EnrollmentPayload, String) - Constructor for record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Validates coordinates and retains the immutable payload in constant time and memory.
EndEntitySigningPreparation - Class in zeroecho.pki.impl.core: Session-owned leaf TBS construction and staging boundary.
EndEntitySigningPreparation(PkiStore, Clock, X509AuthoritySnapshot, BcX509VerificationExecutor, X509AlgorithmBindingRegistry, String) - Constructor for class zeroecho.pki.impl.core.EndEntitySigningPreparation: Creates preparation using the session's exact verification and binding graph.
endpointId() - Method in record class zeroecho.pki.util.async.AsyncOperationSnapshot: Returns the value of the endpointId record component.
endReached() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DuePage: Returns the value of the endReached record component.
endReached() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Returns the value of the endReached record component.
enrollment(IssuanceExecutionEvidence.ActorType, String, String, String, IssuanceExecutionEvidence.Authentication, boolean, String, String, String) - Static method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Creates evidence for a verified protocol requester admitted through an exact durable enrollment policy and, when required, independent approval.
ENROLLMENT_POLICY - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authorization: Exact durable enrollment policy admitted this protocol request.
ENROLLMENT_POLICY - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.AuthorizationPath: Enrollment policy explicitly permits issuance without administrative approval.
entries() - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Returns the value of the entries record component.
Entry(long, PkiId, Instant, byte[]) - Constructor for record class zeroecho.pki.spi.store.AuditEvidenceFeed.Entry: Validates and defensively copies one entry.
Entry(AttributeId, List) - Constructor for record class zeroecho.pki.impl.core.attr.SimpleAttributeSet.Entry: Creates an immutable attribute entry.
Entry(MetadataStoreId, long, String, RevocationTransitionFeed.Position, RevocationRecord) - Constructor for record class zeroecho.pki.spi.store.RevocationTransitionFeed.Entry: Validates and snapshots one entry.
entryBytes() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns the value of the entryBytes record component.
entryBytes() - Method in record class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter.Measurement: Returns the value of the entryBytes record component.
entryCount() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns the value of the entryCount record component.
entryCount() - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Returns the value of the entryCount record component.
entryCount() - Method in record class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter.Measurement: Returns the value of the entryCount record component.
entryHash() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns the value of the entryHash record component.
entryHashCopy() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns an independent copy of the entryHash bytes.
envelope() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the value of the envelope record component.
equals(Object) - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.attr.AttributeAccessPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.attr.AttributeId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.attr.AttributeMeta: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.attr.AttributeValue.BooleanValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.attr.AttributeValue.BytesValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.attr.AttributeValue.InstantValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.attr.AttributeValue.IntegerValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.attr.AttributeValue.StringValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.audit.AccessContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.audit.AuditChainHead: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.audit.AuditEvent: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.audit.AuditIntegrityReport: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.audit.AuditQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.audit.Principal: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.audit.Purpose: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.backup.BackupArtifact: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.backup.BackupLimits: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.backup.BackupRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.backup.BackupVerificationReport: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.backup.RestoreIdentity: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.backup.RestoreReport: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.backup.RestoreRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.backup.RestoreStatus: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.CaCreateCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.CaImportCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Intermediate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Root: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.CaQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.CaRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Intermediate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Root: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.IntermediateCreateCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.IssuerChainPath: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteRef: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.ConfirmationRealmBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Compares challenge bytes by content while preserving normal record component semantics.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Compares nonce bytes by content while preserving normal record component semantics.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofCas: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallenge: Compares presentation bytes by content.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallengeRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofSubmission: Compares response bytes by content.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewCursor: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewPage: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.content.DurableContentOwner: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.content.ResourceLimit.LimitedTo: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.content.ResourceLimit.UnrestrictedByDeployment: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.credential.CaProfileBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.credential.Credential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.credential.CredentialBundle: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.credential.CredentialQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.credential.EndEntityProfileBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.ct.CtLogDescriptor: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.EncodedObject: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.FormatId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.AltSignature: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.Composite: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.None: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.TwinCertificate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.BundleCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityIssuanceRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityReplacementRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Existing: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Prepared: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.EndEntityReissueRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.EndEntityRenewalRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.IssuanceInputs: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.IssuanceIntent: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.ReissueCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.RenewCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.ReplaceCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.issuance.VerificationPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.IssuerRef: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.KeyRef: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.orch.SigningSubmissionId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.PkiFailure: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.PkiId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.policy.PolicyDecision: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.policy.PolicyTrace: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.policy.PolicyTraceStep: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.ActiveCertificateProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class zeroecho.pki.api.profile.BuiltInCertificateProfileTemplate
equals(Object) - Method in record class zeroecho.pki.api.profile.CaCertificatePolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.CertificateProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class zeroecho.pki.api.profile.CertificateProfileRef
equals(Object) - Method in record class zeroecho.pki.api.profile.ExtendedKeyUsageId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class zeroecho.pki.api.profile.ImportedCertificateProfileVersion
equals(Object) - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.ProfileQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNameRule: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.SubjectPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.SubjectRdnRule: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.BindingReference: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.publication.PublicationQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.publication.PublicationRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.publication.PublicationRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.publication.PublicationResult: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.publication.PublicationTarget: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.CertificationRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.ProofOfPossessionResult: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.RequestQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.DnsName: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.IpAddress: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.Rfc822Name: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.UriName: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.SubjectRdn: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.request.X509EnrollmentPayload: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Hold: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.revocation.RevocationCommand.RevokePermanently: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Unhold: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.revocation.RevocationInputs: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.revocation.RevocationQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.revocation.RevocationRecord: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.revocation.RevocationTransition: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.schedule.StatusScheduleState: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.CaSubject: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.OcspResponder: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.signing.ManagedKeyProofScope: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class zeroecho.pki.api.signing.SigningAcceptanceReceipt
equals(Object) - Method in record class zeroecho.pki.api.signing.SigningAcceptanceResult: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.signing.SigningOperation: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.signing.SigningRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.status.DeltaCrlRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.status.FullCrlRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.status.StatusObject: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.status.StatusObjectGenerateCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.status.StatusObjectQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.SubjectRef: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.transfer.ExportArtifact: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.transfer.ExportQuery: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.transfer.ImportPolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.api.Validity: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.CredentialConfirmationProofAudience: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.DashboardLiveSource.Metric: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.LocalSigningResult.Completed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.LocalSigningResult.Failed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.OcspResponseService.CertId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.OcspResponseService.Command: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.OcspResponseService.Response: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ActivateProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.CompleteCredentialConfirmationProof: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.HoldCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ImportRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectAlgorithmBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectAuthority: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerChainPath: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerGeneration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectPublication: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectRevocation: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectStatus: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.InspectStatusSchedule: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.IssueCredentialConfirmationChallenge: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListAuthorities: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerChainPaths: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerGenerations: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListProfiles: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListProfileVersions: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListPublications: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListRequests: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListStatus: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ListStatusSchedules: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ProcessPublication: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.QueryAuthorityMetrics: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.QueryCertificateMetrics: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.QueryPublicationMetrics: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.QueryRevocationMetrics: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.QueryServerMetrics: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ReadRevocationHistory: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ReconcilePublication: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.RegisterIssuerChainPath: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.RegisterProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.RegisterPublication: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.RetryPublication: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.RevokeCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.RevokePendingCredentialConfirmation: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.SnapshotRevocations: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.TransitionAuthority: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.UnholdCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ValidateAlgorithmBindings: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ValidateConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.ValidateProfile: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperation.VerifyRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperationOutcome.Completed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperationOutcome.Failed: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperationOutcome.Pending: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperationResult: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperationValue.BooleanValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperationValue.IntegerValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperationValue.ListValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperationValue.ObjectValue: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiOperationValue.Text: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiResourceScopeResolver.CredentialScope: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSessionConfiguration.BindingProviderConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSessionConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningCoordinatorLimits: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningKeyGroup: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningLanePool: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningTopology: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.GenerateStatus: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.ReissueCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.RenewCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.ReplaceCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.RolloverCaCertificate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PkiSigningOperation.RotateCaKey: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet.Entry: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.continuation.DomainCommandEncoding.Decoded: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.CaContext: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class zeroecho.pki.impl.core.CrlScope
equals(Object) - Method in record class zeroecho.pki.impl.core.DeltaCrlBase: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.FrozenPublication: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.core.ValidatedCertificateRequest.FrozenIssuance: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator.CertificateBindings: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CertificateTbsLayout: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CrlSemanticLayout: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter.Measurement: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier
equals(Object) - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Component: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions.CredentialSearch: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.bootstrap.PkiBootstrap.SigningComposition: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Compares nonce bytes by content.
equals(Object) - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofCredential: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofDescriptor: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofPresentation: Compares canonical presentation bytes by content.
equals(Object) - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofResponse: Compares proof response bytes by content.
equals(Object) - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCallControl: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningStatus: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.crypto.SigningProvider.CallControl: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class zeroecho.pki.spi.crypto.SigningProvider.ConfigurationCommitment
equals(Object) - Method in record class zeroecho.pki.spi.crypto.SigningProvider.ContentCommitment: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.ct.CtJournalVerificationResult: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.framework.CrlEntry: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.ProviderConfig: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.AuditEvidenceFeed.Entry: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.MetadataCommitResult: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.MetadataKey: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.Integrity: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.MetadataStoreCapabilities: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.MetadataStoreId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.MetadataTransactionId: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.PkiStore.RequestSelection: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Entry: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.HighWatermark: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Position: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommitment
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CandidateBinding: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofOutcome: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DueCandidate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DuePage: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.OuterCommand: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.PageCandidate: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingCoordinates: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingPlan: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.util.async.AsyncEvent: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.util.async.AsyncOperationSnapshot: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class zeroecho.pki.util.async.AsyncStatus: Indicates whether some other object is "equal to" this one.
Error handling - Section in interface zeroecho.pki.spi.store.PkiStore
errors() - Method in record class zeroecho.pki.api.backup.RestoreReport: Returns the value of the errors record component.
EST_CLIENT - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.ActorType: Authenticated EST certificate holder.
EST_MTLS - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authentication: EST protocol client certificate authentication.
evaluateIssuance(IssuanceInputs) - Method in interface zeroecho.pki.api.PolicyService: Evaluates an issuance request against policy and profile constraints.
evaluateRevocation(RevocationInputs) - Method in interface zeroecho.pki.api.PolicyService: Evaluates a revocation request against policy constraints.
evaluationTime() - Method in interface zeroecho.pki.api.credential.EffectiveCredentialStatusResolver.Evaluation: Returns the authoritative instant captured for this evaluation.
evaluationTime() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the evaluationTime record component.
evidence() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the evidence record component.
evidence() - Method in record class zeroecho.pki.spi.store.AuditEvidenceFeed.Entry: Returns the encoded evidence payload.
exact(String, byte[]) - Static method in class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier: Creates an identifier with exact canonical structured parameters.
EXACT_DER - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier.ParameterForm: Parameters are exact canonical structured DER.
exactGroups() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningTopology: Returns the value of the exactGroups record component.
exactPublicKey() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns a defensive copy of the proof-bound public key.
exactPublicKey() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the exact proof-bound public key.
exactPublicKey() - Method in class zeroecho.pki.impl.core.VerifiedIssuanceCandidate: Returns a defensive copy of the exact verified subject public key.
exactPublicKey() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns a defensive copy of the proof-bound public key.
exactPublicKey() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the exact proof-bound public key.
examined() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Returns the value of the examined record component.
examples() - Method in record class zeroecho.pki.api.attr.AttributeMeta: Returns the value of the examples record component.
Examples - Section in enum class zeroecho.pki.api.orch.OrchestrationDurabilityPolicy
EXCLUSIVE_WRITER - Enum constant in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.WriterModel: At most one writer transaction may be active.
execute(PkiOperation, CancellationSignal) - Method in interface zeroecho.pki.application.PkiOperationExecutor: Executes one typed operation synchronously.
execute(PkiOperation, AttributeSet, CancellationSignal) - Method in interface zeroecho.pki.application.PkiOperationExecutor: Executes one typed operation synchronously, co-committing server-derived issuance evidence into the durable record of issuance-family operations.
execute(PkiSigningOperation, CancellationSignal) - Method in interface zeroecho.pki.application.LocalSigningExecutor: Prepares, accepts once, and executes an explicitly approved local command.
executeHold(PkiOperation.HoldCredential, RevocationExecutionEvidence, CancellationSignal) - Method in interface zeroecho.pki.application.RevocationEvidenceExecutor: Executes a temporary hold with atomically retained server-derived evidence.
executePendingConfirmationRevocation(PkiOperation.RevokePendingCredentialConfirmation, RevocationExecutionEvidence, CancellationSignal) - Method in interface zeroecho.pki.application.RevocationEvidenceExecutor: Executes an overdue pending-confirmation revocation with server-derived evidence.
executeRevocation(PkiOperation.RevokeCredential, RevocationExecutionEvidence, CancellationSignal) - Method in interface zeroecho.pki.application.RevocationEvidenceExecutor: Executes a revocation and atomically supplies its server-derived evidence.
executeSelection(PkiOperation, Predicate, CancellationSignal) - Method in interface zeroecho.pki.application.PkiSelectionExecutor: Executes one selection operation, authorizing metadata before limiting and computing continuation.
executeUnhold(PkiOperation.UnholdCredential, RevocationExecutionEvidence, CancellationSignal) - Method in interface zeroecho.pki.application.RevocationEvidenceExecutor: Executes release of an existing hold with atomically retained server-derived evidence.
execution() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState: Returns the value of the execution record component.
Execution(String, StatusSchedule, Instant, long, StatusScheduleState.Phase, Optional, String, Optional, String) - Constructor for record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Validates finite identity and stage invariants.
executionEvidence() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns evidence co-committed with the credential.
executionId() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns the value of the executionId record component.
Execution model - Section in package zeroecho.pki.impl.crypto.zeroecholib
executor() - Method in class zeroecho.pki.impl.framework.x509.X509ExecutionPlan: Returns the exact runtime executor bound by the authority.
Existing(SemanticSigningOperation) - Constructor for record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Existing: Creates a snapshot result.
existingCaCredential() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns the value of the existingCaCredential record component.
existingCredentialId() - Method in record class zeroecho.pki.api.issuance.EndEntityReissueRequest: Returns the value of the existingCredentialId record component.
existingCredentialId() - Method in record class zeroecho.pki.api.issuance.EndEntityRenewalRequest: Returns the value of the existingCredentialId record component.
existingCredentialId() - Method in record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Returns the value of the existingCredentialId record component.
existingCredentialId() - Method in record class zeroecho.pki.api.issuance.RenewCommand: Returns the value of the existingCredentialId record component.
existingCredentialId() - Method in record class zeroecho.pki.api.issuance.ReplaceCommand: Returns the value of the existingCredentialId record component.
existingCredentialId() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReplaceCredential: Returns the value of the existingCredentialId record component.
expandedBytes() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns the value of the expandedBytes record component.
expectedBindingSetVersion() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.BindingProviderConfiguration: Returns the value of the expectedBindingSetVersion record component.
expectedChainPathCommitment() - Method in record class zeroecho.pki.api.issuance.IssuanceIntent: Returns the value of the expectedChainPathCommitment record component.
expectedChainPathCommitment() - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Returns the value of the expectedChainPathCommitment record component.
expectedChainPathId() - Method in record class zeroecho.pki.api.issuance.IssuanceIntent: Returns the value of the expectedChainPathId record component.
expectedChainPathId() - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Returns the value of the expectedChainPathId record component.
expectedChallengeRecordCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofCas: Returns the value of the expectedChallengeRecordCommitment record component.
expectedCommitment() - Method in record class zeroecho.pki.application.PkiOperation.ValidateAlgorithmBindings: Returns the value of the expectedCommitment record component.
expectedIssuerId() - Method in record class zeroecho.pki.api.issuance.IssuanceIntent: Returns the value of the expectedIssuerId record component.
expectedIssuerId() - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Returns the value of the expectedIssuerId record component.
expectedLifecycleRecordCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the expectedLifecycleRecordCommitment record component.
expectedLifecycleRecordCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns the value of the expectedLifecycleRecordCommitment record component.
expectedLifecycleRecordCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofCas: Returns the value of the expectedLifecycleRecordCommitment record component.
expectedLifecycleRecordCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallengeRequest: Returns the value of the expectedLifecycleRecordCommitment record component.
expectedLifecycleRevision() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the expectedLifecycleRevision record component.
expectedLifecycleRevision() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns the value of the expectedLifecycleRevision record component.
expectedLifecycleRevision() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofCas: Returns the value of the expectedLifecycleRevision record component.
expectedLifecycleRevision() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallengeRequest: Returns the value of the expectedLifecycleRevision record component.
expectedProfile() - Method in record class zeroecho.pki.api.issuance.IssuanceIntent: Returns the value of the expectedProfile record component.
expectedProfile() - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Returns the value of the expectedProfile record component.
EXPERIMENTAL - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Interoperability: Experimental representation without general interoperability.
EXPERIMENTAL - Enum constant in enum class zeroecho.pki.api.attr.AttributeStability: Attribute is experimental and may change under a controlled evolution process.
EXPIRED - Enum constant in enum class zeroecho.pki.api.credential.CredentialStatus: Credential validity interval has ended.
EXPIRED - Enum constant in enum class zeroecho.pki.api.credential.EffectiveCredentialStatus: The credential is expired by metadata or evaluation time.
EXPIRED - Enum constant in enum class zeroecho.pki.api.signing.SemanticSigningState: The operation expired before trustworthy completion.
EXPIRED - Enum constant in enum class zeroecho.pki.api.signing.SigningOperationState: The authoritative deadline elapsed.
EXPIRED - Enum constant in enum class zeroecho.pki.application.SigningExecutionEvidence.Outcome: The signing operation expired before completion.
EXPIRED - Enum constant in enum class zeroecho.pki.spi.store.DomainContinuationStore.State: Original signing deadline elapsed before trustworthy completion.
EXPIRED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: The store-authoritative signing deadline elapsed.
EXPIRED - Enum constant in enum class zeroecho.pki.util.async.AsyncState: The operation exceeded its declared deadline and was expired by the bus.
expiresAt() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallenge: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Returns the value of the expiresAt record component.
expiresAt() - Method in record class zeroecho.pki.util.async.AsyncOperationSnapshot: Returns the value of the expiresAt record component.
explain(PkiId) - Method in interface zeroecho.pki.api.PolicyService: Retrieves a trace explaining a previous decision.
Explainability - Section in package zeroecho.pki.api.policy
EXPLICIT - Enum constant in enum class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.Mode: Every custom representation is selected by stable binding identity.
export(AttributeCatalogue, AttributeSet, AttributeId, AccessContext) - Method in interface zeroecho.pki.api.audit.AttributeGovernanceService: Exports an attribute value after applying access control.
export(AttributeCatalogue, AttributeSet, AttributeId, AccessContext) - Method in class zeroecho.pki.impl.audit.DefaultAttributeGovernanceService
EXPORT - Enum constant in enum class zeroecho.pki.api.audit.AccessAction: Export attribute value to an external channel (e.g., UI, LDAP, backups).
ExportArtifact - Record Class in zeroecho.pki.api.transfer: Opaque export artifact containing exported objects.
ExportArtifact(PkiId, EncodedObject) - Constructor for record class zeroecho.pki.api.transfer.ExportArtifact: Creates an export artifact.
exportCa(PkiId, ExportFormat) - Method in interface zeroecho.pki.api.ImportExportService: Exports CA materials for a given CA entity in the requested export format.
exportCredentials(ExportQuery, ExportFormat) - Method in interface zeroecho.pki.api.ImportExportService: Exports credentials matching the query constraints in the requested export format.
ExportFormat - Enum Class in zeroecho.pki.api.transfer: Controls export representation.
exportId() - Method in record class zeroecho.pki.api.transfer.ExportArtifact: Returns the value of the exportId record component.
ExportQuery - Record Class in zeroecho.pki.api.transfer: Query constraints for exporting credentials and revocations.
ExportQuery(Optional, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.transfer.ExportQuery: Creates an export query.
exportRevocations(ExportQuery, ExportFormat) - Method in interface zeroecho.pki.api.ImportExportService: Exports revocation records matching the query constraints in the requested export format.
exportSnapshot(Path, Instant) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Exports a snapshot of this store as of time at into targetRoot.
exportTargets() - Method in record class zeroecho.pki.api.attr.AttributeAccessPolicy: Returns the value of the exportTargets record component.
extendedKeyUsageCritical() - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Returns the value of the extendedKeyUsageCritical record component.
extendedKeyUsageCritical() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the ExtendedKeyUsage extension criticality.
extendedKeyUsageCritical() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the ExtendedKeyUsage extension criticality.
ExtendedKeyUsageId - Record Class in zeroecho.pki.api.profile: Validated exact X.509 extended-key-usage object identifier.
ExtendedKeyUsageId(String) - Constructor for record class zeroecho.pki.api.profile.ExtendedKeyUsageId: Validates and constructs the identifier.
extendedKeyUsages() - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Returns the value of the extendedKeyUsages record component.
extendedKeyUsages() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the profile-derived extended key usages.
extendedKeyUsages() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the profile-derived extended key usages.
extension(List) - Static method in class zeroecho.pki.impl.framework.x509.X509BindingCatalog: Creates a trusted additive extension catalog.
extension(List) - Static method in class zeroecho.pki.impl.framework.x509.X509ComponentCatalog: Creates a trusted additive extension catalog.
EXTERNAL_OUTCOME_UNKNOWN - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: An external operation may have completed, but its authoritative outcome is not known.
EXTERNAL_OUTCOME_UNKNOWN - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: An external operation has no safely established authoritative outcome.
EXTERNAL_OUTCOME_UNKNOWN - Enum constant in enum class zeroecho.pki.api.publication.PublicationFailure: The publisher call did not establish whether an external effect occurred.
EXTERNAL_OUTCOME_UNKNOWN - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: An external operation may have completed and must be reconciled.
EXTERNAL_RETRYABLE - Enum constant in enum class zeroecho.pki.api.publication.PublicationFailure: The publisher authoritatively classified the attempt as retryable.
EXTERNAL_TERMINAL - Enum constant in enum class zeroecho.pki.api.publication.PublicationFailure: The publisher authoritatively classified the attempt as terminal.
externalSafe() - Method in enum class zeroecho.pki.api.PkiFailureReason: Returns whether this reason code may itself be exposed to an external client.
extra() - Method in record class zeroecho.pki.api.attr.AttributeMeta: Returns the value of the extra record component.
extract(ParsedCertificationRequest) - Static method in class zeroecho.pki.impl.framework.x509.bc.BcX509RequestPayloads: Validates one original payload, its exclusive attribute and digest identity.

F

Failed(String, PkiOperationFailure, String) - Constructor for record class zeroecho.pki.application.PkiOperationOutcome.Failed: Validates stable, non-sensitive failure data.
Failed(PkiOperationOutcome.Failed, Optional) - Constructor for record class zeroecho.pki.application.LocalSigningResult.Failed: Requires a failure and an explicit optional receipt container.
FAILED - Enum constant in enum class zeroecho.pki.api.backup.RestoreStatus.State: Replacement was rejected or cold activation was rolled back.
FAILED - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionStatus: Proof-of-possession evidence is present but invalid.
FAILED - Enum constant in enum class zeroecho.pki.api.schedule.StatusScheduleState.Phase: Accepted execution failed and requires configuration or operator intervention.
FAILED - Enum constant in enum class zeroecho.pki.api.signing.SemanticSigningState: Signing, cancellation or a frozen domain postcondition caused terminal failure.
FAILED - Enum constant in enum class zeroecho.pki.api.signing.SigningOperationState: The operation failed terminally.
FAILED - Enum constant in enum class zeroecho.pki.application.DashboardLiveSource.State: The configured source could not collect this measurement.
FAILED - Enum constant in enum class zeroecho.pki.application.SigningExecutionEvidence.Outcome: The signing operation failed.
FAILED - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.ObservationState: Provider reached a permanent failure.
FAILED - Enum constant in enum class zeroecho.pki.spi.store.DomainContinuationStore.State: Terminal signing or frozen-postcondition failure.
FAILED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: The initial attempt failed; ordinary durable cleanup remains eligible.
FAILED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Provider or local processing reached a terminal failure.
FAILED - Enum constant in enum class zeroecho.pki.util.async.AsyncState: The operation completed unsuccessfully (terminal failure).
failStatusSchedule(StatusScheduleState.Execution, String) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
failStatusSchedule(StatusScheduleState.Execution, String) - Method in interface zeroecho.pki.spi.store.PkiStore: Records a stable failure of accepted scheduled work, prohibiting automatic reacceptance.
failure() - Method in exception class zeroecho.pki.api.PkiFailureException: Returns the stable failure description.
failure() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the failure record component.
failure() - Method in record class zeroecho.pki.application.LocalSigningResult.Failed: Returns the value of the failure record component.
failure() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns the value of the failure record component.
failure() - Method in exception class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.ResolutionException: Returns the stable failure category.
FAILURE - Static variable in record class zeroecho.pki.application.PublicationExecutionEvidence: Evidence attribute vocabulary.
failureCategory() - Method in record class zeroecho.pki.spi.store.MetadataCommitResult: Returns the value of the failureCategory record component.
failureCount() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the failureCount record component.
failureCount() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the nonnegative reconciliation failure count.
failureReason() - Method in exception class zeroecho.pki.api.PkiException: Returns the typed machine reason for this failure, when one was recorded.
failures() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DuePage: Returns the value of the failures record component.
failures() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Returns the value of the failures record component.
fairnessAuthorityId() - Method in record class zeroecho.pki.api.signing.SigningRequest: Returns the value of the fairnessAuthorityId record component.
fairnessAuthorityId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the fairnessAuthorityId record component.
fairnessAuthorityId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the fairnessAuthorityId record component.
fairnessAuthorityId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingCoordinates: Returns the value of the fairnessAuthorityId record component.
feed(Optional) - Method in interface zeroecho.pki.api.RevocationService: Opens the append-ordered authoritative transition feed at a captured head.
feed(Optional) - Method in class zeroecho.pki.impl.core.DefaultRevocationService
fence() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns the value of the fence record component.
fence() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the fence record component.
fence() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the current fencing token.
fencingToken() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the fencingToken record component.
fencingToken() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the fencingToken record component.
field(int) - Method in record class zeroecho.pki.impl.core.continuation.DomainCommandEncoding.Decoded: Returns an exact field or rejects the schema mismatch.
field(String) - Method in record class zeroecho.pki.application.PkiOperationResult: Returns one declared safe field.
fields() - Method in record class zeroecho.pki.application.PkiOperationResult: Returns the value of the fields record component.
fields() - Method in record class zeroecho.pki.application.PkiOperationValue.ObjectValue: Returns the value of the fields record component.
fields() - Method in record class zeroecho.pki.impl.core.continuation.DomainCommandEncoding.Decoded: Returns the value of the fields record component.
FileAuditSink - Class in zeroecho.pki.impl.audit: Persistent AuditSink provider storing audit events as daily gzip files.
FileAuditSink(Path) - Constructor for class zeroecho.pki.impl.audit.FileAuditSink: Creates the sink with an explicit base directory.
FileAuditSinkProvider - Class in zeroecho.pki.impl.audit: AuditSinkProvider for the file-backed audit sink.
FileAuditSinkProvider() - Constructor for class zeroecho.pki.impl.audit.FileAuditSinkProvider: Creates a file-backed audit-sink provider descriptor.
FileBackedAsyncBusProvider - Class in zeroecho.pki.impl.async: Default async bus provider: in-memory state with append-only file persistence.
FileBackedAsyncBusProvider() - Constructor for class zeroecho.pki.impl.async.FileBackedAsyncBusProvider: Creates a file-backed asynchronous-bus provider descriptor.
File format - Section in class zeroecho.pki.impl.secrets.PublisherSecretsStore
FILESYSTEM - Enum constant in enum class zeroecho.pki.api.publication.PublicationTargetType: Publish to a filesystem location.
FilesystemPkiStore - Class in zeroecho.pki.impl.fs: Filesystem-based reference implementation of PkiStore.
FilesystemPkiStore(Path, FsPkiStoreOptions) - Constructor for class zeroecho.pki.impl.fs.FilesystemPkiStore: Opens or creates a filesystem PKI store rooted at root.
FilesystemPkiStore(Path, FsPkiStoreOptions, Clock) - Constructor for class zeroecho.pki.impl.fs.FilesystemPkiStore: Opens or creates a filesystem store with an explicit authoritative clock.
FilesystemPkiStore(Path, FsPkiStoreOptions, Clock, BackupLimits) - Constructor for class zeroecho.pki.impl.fs.FilesystemPkiStore: Opens a store with explicit backup resource limits, preserving the store format.
FilesystemPkiStore.LocalSigningIndexCapacityMetrics - Record Class in zeroecho.pki.impl.fs: Immutable local signing-index capacity counters.
FilesystemPkiStore.LocalSigningWriterMetrics - Record Class in zeroecho.pki.impl.fs: Immutable operational counters for the shared local-signing WAL writer.
FilesystemPkiStoreProvider - Class in zeroecho.pki.impl.fs: PkiStoreProvider for the filesystem-backed PkiStore.
FilesystemPkiStoreProvider() - Constructor for class zeroecho.pki.impl.fs.FilesystemPkiStoreProvider: Public no-arg constructor required by ServiceLoader.
FilesystemPublisherProvider - Class in zeroecho.pki.impl.publish: Explicit filesystem publication-destination provider.
FilesystemPublisherProvider() - Constructor for class zeroecho.pki.impl.publish.FilesystemPublisherProvider: Creates a filesystem publisher provider descriptor.
FilesystemStagedContentStore - Class in zeroecho.pki.impl.fs: Filesystem-backed staged-content store with atomic completion and streaming integrity verification.
FilesystemStagedContentStore(Path, String) - Constructor for class zeroecho.pki.impl.fs.FilesystemStagedContentStore: Creates a staged-content store.
find(String) - Method in interface zeroecho.pki.api.algorithm.X509AlgorithmBindingRegistry: Resolves a stable binding identifier.
find(String) - Method in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry
find(AttributeId) - Method in interface zeroecho.pki.api.attr.AttributeCatalogue: Finds a definition by id.
find(PkiId) - Method in interface zeroecho.pki.api.PublicationService: Reads one durable publication operation.
find(PkiId) - Method in interface zeroecho.pki.api.SemanticSigningService: Reads retained authoritative semantic state by operation identity.
find(PkiId) - Method in interface zeroecho.pki.api.SigningService: Returns the authoritative retained operation, if known.
find(PkiId) - Method in class zeroecho.pki.impl.core.DefaultPublicationService
find(PkiId) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
find(PkiId) - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService
find(X509ComponentCatalog.Kind, String) - Method in class zeroecho.pki.impl.framework.x509.X509ComponentCatalog: Resolves a component when present.
findByCorrelation(SemanticSigningKind, String) - Method in interface zeroecho.pki.api.SemanticSigningService: Looks up retained work through its existing durable domain correlation.
findByCorrelation(SemanticSigningKind, String) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
findByIssuerSerial(PkiId, String) - Method in interface zeroecho.pki.api.CredentialInventoryService: Finds a credential by issuer CA and serial/unique identifier.
findIssuance(CorrelatedEndEntityIssuanceRequest) - Method in interface zeroecho.pki.api.SemanticSigningService: Finds a retained issuance by the request's authority and external issuance ID, and verifies its exact effective commitment and frozen selection before disclosure.
findIssuance(CorrelatedEndEntityIssuanceRequest) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
findIssuance(RetainedIssuanceBinding) - Method in interface zeroecho.pki.api.SemanticSigningService: Finds retained issuance using a previously derived CSR-free binding.
findIssuance(RetainedIssuanceBinding) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
findRenewal(CorrelatedEndEntityRenewalRequest) - Method in interface zeroecho.pki.api.SemanticSigningService: Finds a retained renewal using exact frozen input and predecessor binding.
findRenewal(CorrelatedEndEntityRenewalRequest) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
findReplacement(CorrelatedEndEntityReplacementRequest) - Method in interface zeroecho.pki.api.SemanticSigningService: Finds an accepted replacement using exact frozen input and predecessor binding.
findReplacement(CorrelatedEndEntityReplacementRequest) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
fingerprint() - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Returns the value of the fingerprint record component.
fingerprint() - Method in class zeroecho.pki.impl.core.VerifiedIssuanceCandidate: Returns the identity bound to the verified request.
fingerprint() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the encoded acceptance commitment.
fingerprint(CertificationRequest) - Method in interface zeroecho.pki.api.CertificationRequestService: Computes a stable identifier (fingerprint) for the given request payload.
fingerprint(CertificationRequest) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Computes a deterministic identifier for the supplied certification request.
fingerprint(SigningProvider.ConfigurationCommitment, String, AccessContext, KeyRef, String, SigningProvider.ContentCommitment, Optional, Optional) - Static method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Computes the canonical signfp:v3 fingerprint.
FINGERPRINT - Static variable in record class zeroecho.pki.application.SigningExecutionEvidence: Evidence attribute vocabulary.
fingerprintFilter() - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Returns the value of the fingerprintFilter record component.
fingerprintFilter() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns the value of the fingerprintFilter record component.
finished() - Method in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: Returns whether a bounded initial attempt has a retained outcome.
firstBrokenSequence() - Method in record class zeroecho.pki.api.audit.AuditIntegrityReport: Returns the value of the firstBrokenSequence record component.
fixedSignatureLength(String) - Static method in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: Returns the fixed raw signature length for a known PQC algorithm by searching the canonical algorithm identifier string for known family name substrings.
fixedValue() - Method in record class zeroecho.pki.api.profile.SubjectRdnRule: Returns the value of the fixedValue record component.
forceNanos() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns the value of the forceNanos record component.
forces() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns the value of the forces record component.
FOREIGN_TRANSACTION - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Transaction identity belongs to another store.
Format - Section in class zeroecho.pki.impl.audit.SyslogAuditSink
FORMAT_ID - Static variable in record class zeroecho.pki.application.StatusGenerationEvidence: Evidence attribute vocabulary.
FORMAT_ID - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework: X.509 format identifier used by this framework.
formatId() - Method in record class zeroecho.pki.api.audit.AccessContext: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.ca.CaCreateCommand: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.ca.CaQuery: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.ca.IntermediateCreateCommand: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.credential.CredentialQuery: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.profile.CertificateProfile: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.profile.ProfileQuery: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.request.CertificationRequest: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.request.RequestQuery: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.status.StatusObject: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.api.status.StatusObjectGenerateCommand: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.application.PkiOperation.ImportRequest: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.application.PkiSigningOperation.GenerateStatus: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Returns the value of the formatId record component.
formatId() - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Returns the value of the formatId record component.
formatId() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the credential format.
formatId() - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework: Returns the framework format identifier.
formatId() - Method in interface zeroecho.pki.spi.framework.CredentialFramework: Returns the format id supported by this framework.
formatId() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the credential format.
formatId() - Method in record class zeroecho.pki.spi.store.PkiStore.RequestSelection: Returns the value of the formatId record component.
FormatId - Record Class in zeroecho.pki.api: Identifier of a credential framework/format handled by the PKI core.
FormatId(String) - Constructor for record class zeroecho.pki.api.FormatId: Creates a format identifier.
formats() - Method in record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Returns the value of the formats record component.
forStage(SignWorkflowStore.Stage) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingPlan: Selects a pre-reserved coordinate.
FrameworkAttributeMapper - Interface in zeroecho.pki.spi.framework: Maps universal attributes to framework-specific constructs and optionally back.
from(DomainCommandEncoding.Decoded) - Static method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Reads the exact frozen coordinates from the current full-CRL command.
from(SignWorkflowStore.AcceptanceCommand) - Static method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Creates the immutable envelope for a validated acceptance command.
from(SignWorkflowStore.AcceptanceEnvelope) - Static method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingPlan: Constructs an immutable plan from accepted input.
fromCode(int) - Static method in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: Resolves a stable canonical code.
fromCode(int) - Static method in enum class zeroecho.pki.application.OcspResponseService.CertIdHash: Resolves an exact stable persistence code.
fromCode(int) - Static method in enum class zeroecho.pki.application.OcspResponseService.ResponderId: Resolves an exact stable persistence code.
fromDefinition(CertificateProfileDefinition) - Static method in record class zeroecho.pki.api.profile.CertificateProfile: Creates the deterministic runtime projection of a validated definition.
fromLib(AlgorithmIdentifier) - Static method in class zeroecho.pki.impl.framework.x509.bc.BcX509AlgorithmAdapter: Converts a PKIX library identifier to the exact provider-neutral representation.
fromOid(String) - Static method in enum class zeroecho.pki.api.profile.SubjectRdnType: Resolves a supported RDN type.
fromPersistentCode(int) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: Decodes a current-format phase.
fromPersistentCode(int) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.Mode: Decodes a current-format mode.
fromPersistentCode(int) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: Restores a stage.
fromPersistentCode(int) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Resolves a current stable persistence code.
fromPkcs12(Path, char[], Path, char[], String) - Static method in class zeroecho.pki.impl.crypto.remote.http.MutualTlsContext: Builds a client SSLContext that presents the configured client identity and trusts only the configured anchors.
frozenIssuance() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the service-frozen publication selection.
FrozenIssuance(PkiId, PkiId, String, Optional) - Constructor for record class zeroecho.pki.impl.core.ValidatedCertificateRequest.FrozenIssuance: Validates one immutable issuance selection.
frozenPublication() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns service-frozen CA publication inputs.
FrozenPublication(PkiId, PkiId, String, KeyRef) - Constructor for record class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.FrozenPublication: Validates immutable CA publication authority.
FsCtJournalStore - Class in zeroecho.pki.impl.fs.ct: Filesystem-backed implementation of CtJournalStore.
FsCtJournalStoreFactory - Class in zeroecho.pki.impl.fs.ct: Factory that opens or creates a FsCtJournalStore at a given filesystem path.
FsHistoryPolicy - Class in zeroecho.pki.impl.fs: History configuration for mutable entities stored by FilesystemPkiStore.
FsHistoryPolicy.CleanupStrategy - Enum Class in zeroecho.pki.impl.fs: Supported cleanup strategy.
FsPkiStoreOptions - Record Class in zeroecho.pki.impl.fs: Options for FilesystemPkiStore.
FsPkiStoreOptions(FsHistoryPolicy, FsHistoryPolicy, FsHistoryPolicy, FsHistoryPolicy, boolean, Duration, Duration, int, long, long, BigInteger, boolean) - Constructor for record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Creates existing filesystem options with credential search disabled.
FsPkiStoreOptions(FsHistoryPolicy, FsHistoryPolicy, FsHistoryPolicy, FsHistoryPolicy, boolean, Duration, Duration, int, long, long, BigInteger, boolean, Optional) - Constructor for record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Canonical constructor with validation.
FsPkiStoreOptions.CredentialSearch - Record Class in zeroecho.pki.impl.fs: Explicit resource settings for the derived embedded H2 search index.
FullCrlRequest - Record Class in zeroecho.pki.api.status: Immutable request to prepare a full X.509 CRL for one explicitly selected issuer generation.
FullCrlRequest(PkiId, Duration) - Constructor for record class zeroecho.pki.api.status.FullCrlRequest: Creates a request without performing store access or reserving a CRL number.
FullCrlSigningCommand - Class in zeroecho.pki.impl.core.continuation: Internal durable full-CRL schema shared by preparation, publication and recovery.
FullCrlSigningPreparation - Class in zeroecho.pki.impl.core: Stateless session-owned composition of full-CRL policy validation and TBS staging.
FullCrlSigningPreparation(PkiStore, Clock, X509AuthoritySnapshot, X509AlgorithmBindingRegistry, String) - Constructor for class zeroecho.pki.impl.core.FullCrlSigningPreparation: Binds preparation to the exact session store and selected provider authority.
FullCrlSnapshotProvenance - Record Class in zeroecho.pki.impl.core.continuation: Bounded immutable revocation provenance shared by full-CRL publication and validation.
FullCrlSnapshotProvenance(MetadataStoreId, long, long, String) - Constructor for record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Validates bounded canonical provenance without consulting a store.

G

GENERAL_NAME - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: GeneralName-like identity (DNS/IP/URI/email/etc.) represented in a canonical structured form.
generate(StatusObjectGenerateCommand) - Method in interface zeroecho.pki.api.StatusObjectService: Generates a new status object for an issuer CA.
generate(StatusObjectGenerateCommand, CancellationSignal) - Method in interface zeroecho.pki.api.StatusObjectService: Generates a signed status object with originating cancellation.
generate(StatusObjectGenerateCommand, CrlEntrySource) - Method in interface zeroecho.pki.spi.framework.StatusObjectGenerator: Generates a status object.
generate(StatusObjectGenerateCommand, CrlEntrySource, CancellationSignal) - Method in interface zeroecho.pki.spi.framework.StatusObjectGenerator: Generates a status object while carrying originating cancellation to signing.
GENERATED - Enum constant in enum class zeroecho.pki.application.StatusGenerationEvidence.Outcome: The status object was generated successfully.
generatedObjectBytes() - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Returns the value of the generatedObjectBytes record component.
GenerateStatus(PkiId, StatusObjectType, FormatId) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.GenerateStatus: Validates the generation input.
GENESIS_RECORD_HASH - Static variable in record class zeroecho.pki.api.audit.AuditChainHead: Chain seed used before the first record and as the empty-log head hash.
get(String) - Method in record class zeroecho.pki.spi.ProviderConfig: Returns an optional value for the given key.
get(AttributeId) - Method in interface zeroecho.pki.api.attr.AttributeSet: Reads a single-valued attribute.
get(AttributeId) - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Returns the first value associated with the supplied attribute identifier.
get(AttributeId) - Method in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet: Returns the first value associated with the supplied attribute identifier.
get(PkiId) - Method in interface zeroecho.pki.api.audit.AuditService: Retrieves an audit event by id if the implementation assigns stable ids.
get(PkiId) - Method in interface zeroecho.pki.api.CertificationRequestService: Retrieves a stored request.
get(PkiId) - Method in interface zeroecho.pki.api.confirmation.CredentialConfirmationService: Returns one authoritative lifecycle when initialized.
get(PkiId) - Method in interface zeroecho.pki.api.CredentialInventoryService: Retrieves a credential by id.
get(PkiId) - Method in interface zeroecho.pki.api.RevocationService: Retrieves the validated current state for one credential.
get(PkiId) - Method in class zeroecho.pki.impl.audit.FileAuditSink
get(PkiId) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Resolves a previously stored parsed certification request by its identifier.
get(PkiId) - Method in class zeroecho.pki.impl.core.DefaultCredentialConfirmationService
get(PkiId) - Method in class zeroecho.pki.impl.core.DefaultRevocationService
get(PkiId) - Method in interface zeroecho.pki.spi.store.RevocationView: Returns one current state without scanning the revocation population.
get(MetadataKey) - Method in interface zeroecho.pki.spi.store.MetadataSnapshot: Reads one record from this stable view.
getActiveProfileRef(String) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getActiveProfileRef(String) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves the current active reference.
getActiveReference(String) - Method in interface zeroecho.pki.api.ProfileService: Retrieves the current active reference without activating anything.
getActiveReference(String) - Method in class zeroecho.pki.impl.core.DefaultProfileService
getAll(AttributeId) - Method in interface zeroecho.pki.api.attr.AttributeSet: Reads a potentially multi-valued attribute.
getAll(AttributeId) - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Returns all values associated with the supplied attribute identifier.
getAll(AttributeId) - Method in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet: Returns all values associated with the supplied attribute identifier.
getById(PkiId) - Method in class zeroecho.pki.impl.audit.FileAuditSink
getById(PkiId) - Method in class zeroecho.pki.impl.audit.InMemoryAuditSink
getCa(PkiId) - Method in interface zeroecho.pki.api.CaService: Retrieves a CA record.
getCa(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getCa(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves a CA record.
getCredential(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getCredential(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves a credential record.
getCredentialByIssuanceIntent(IssuanceIntent) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getCredentialByIssuanceIntent(IssuanceIntent) - Method in interface zeroecho.pki.spi.store.PkiStore: Resolves the exact credential atomically persisted with one issuance intent.
getCredentialByIssuerAndSerial(PkiId, BigInteger) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getCredentialByIssuerAndSerial(PkiId, BigInteger) - Method in interface zeroecho.pki.spi.store.PkiStore: Resolves one exact X.509 credential through the derived issuer-generation and canonical positive serial index.
getCredentialConfirmation(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getCredentialConfirmation(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves one authoritative credential-confirmation lifecycle.
getCredentialConfirmationChallenge(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getCredentialConfirmationChallenge(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves one authoritative credential-confirmation challenge.
getDomainContinuation(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getDomainContinuation(PkiId) - Method in interface zeroecho.pki.spi.store.DomainContinuationStore: Returns one authoritative continuation by the shared operation id.
getDomainContinuation(DomainContinuationStore.Kind, String) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getDomainContinuation(DomainContinuationStore.Kind, String) - Method in interface zeroecho.pki.spi.store.DomainContinuationStore: Returns one continuation through its bounded domain idempotency identity.
getImportedVersion(String, long) - Method in interface zeroecho.pki.api.ProfileService: Retrieves one immutable imported version for administration.
getImportedVersion(String, long) - Method in class zeroecho.pki.impl.core.DefaultProfileService
getIssuerChainPath(PkiId) - Method in interface zeroecho.pki.api.CaService: Returns one exact immutable issuer chain path.
getIssuerChainPath(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getIssuerChainPath(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves one immutable issuer chain path.
getIssuerGeneration(PkiId) - Method in interface zeroecho.pki.api.CaService: Returns one exact issuer generation owned by this PKI authority.
getIssuerGeneration(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getIssuerGeneration(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves one canonical issuer-generation record.
getLatest(PkiId, StatusObjectType) - Method in interface zeroecho.pki.api.StatusObjectService: Retrieves the latest status object of a given type for an issuer CA.
getPolicyTrace(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getPolicyTrace(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves a policy trace.
getProfileVersion(String, long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getProfileVersion(String, long) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves one imported version.
getPublicationRecord(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getPublicationRecord(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Reads one publication operation by exact semantic identity.
getRequest(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getRequest(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves a parsed certification request.
getRevocation(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getRevocation(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves the validated current revocation state for a credential.
getSignWorkflow(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getSignWorkflow(PkiId) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Returns authoritative state for an identifier.
getStatusObject(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getStatusObject(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves a status object.
getStatusSchedule(PkiId, StatusObjectType) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getStatusSchedule(PkiId, StatusObjectType) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves one status-generation schedule.
getStatusScheduleState(PkiId, StatusObjectType) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getStatusScheduleState(PkiId, StatusObjectType) - Method in interface zeroecho.pki.spi.store.PkiStore: Reads worker progress separately from operator configuration.
getWorkflowState(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
getWorkflowState(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Retrieves workflow continuation state for a given operation.
globalRevision() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Entry: Returns the value of the globalRevision record component.
globalRevision() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.HighWatermark: Returns the value of the globalRevision record component.
goodCount() - Method in record class zeroecho.pki.application.OcspResponseService.Response: Returns the value of the goodCount record component.
graceSeconds() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the graceSeconds record component.
graceSeconds() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Returns the value of the graceSeconds record component.
greatestKey(String) - Method in interface zeroecho.pki.spi.store.MetadataSnapshot: Returns the greatest key in one namespace without opening record content.
groupCommitWaitNanos() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns the value of the groupCommitWaitNanos record component.
groupsCommitted() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns the value of the groupsCommitted record component.

H

HARD_MAXIMUM_COUNT - Static variable in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Maximum number of SAN entries.
HARD_MAXIMUM_RDN_COUNT - Static variable in record class zeroecho.pki.api.profile.SubjectPolicy: Maximum number of subject RDNs.
HARD_MAXIMUM_UTF8_BYTES - Static variable in record class zeroecho.pki.api.profile.SubjectRdnRule: Maximum hard value size.
hash() - Method in record class zeroecho.pki.application.OcspResponseService.CertId: Returns the value of the hash record component.
HASH_BYTES - Static variable in class zeroecho.pki.api.profile.CertificateProfileRef: SHA-256 digest length in bytes.
HASH_BYTES - Static variable in record class zeroecho.pki.spi.ct.CtJournalEntry: Required length in bytes for all hash fields.
hashCode() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.attr.AttributeAccessPolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.attr.AttributeId: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.attr.AttributeMeta: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.attr.AttributeValue.BooleanValue: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.attr.AttributeValue.BytesValue: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.attr.AttributeValue.InstantValue: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.attr.AttributeValue.IntegerValue: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.attr.AttributeValue.StringValue: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.audit.AccessContext: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.audit.AuditChainHead: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.audit.AuditIntegrityReport: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.audit.Principal: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.audit.Purpose: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.backup.BackupArtifact: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.backup.BackupRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.backup.BackupVerificationReport: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.backup.RestoreIdentity: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.backup.RestoreReport: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.backup.RestoreRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.backup.RestoreStatus: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.CaCreateCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Intermediate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Root: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.CaQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Intermediate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Root: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.IntermediateCreateCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.IssuerChainPath: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteRef: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.ConfirmationRealmBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns a content-based hash code for every record component.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns a content-based hash code for every command component.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationPolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofCas: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallenge: Returns a content-based hash code for every component.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallengeRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofSubmission: Returns a content-based hash code for every component.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewCursor: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewPage: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.content.DurableContentOwner: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.content.ResourceLimit.LimitedTo: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.content.ResourceLimit.UnrestrictedByDeployment: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.credential.CaProfileBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.credential.Credential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.credential.CredentialBundle: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.credential.CredentialQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.credential.EndEntityProfileBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.ct.CtLogDescriptor: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.EncodedObject: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.FormatId: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.AltSignature: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.Composite: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.None: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.TwinCertificate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.BundleCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityIssuanceRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityReplacementRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Existing: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Prepared: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.EndEntityReissueRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.EndEntityRenewalRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.IssuanceInputs: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.IssuanceIntent: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.ReissueCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.RenewCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.ReplaceCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.issuance.VerificationPolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.IssuerRef: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.KeyRef: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.orch.SigningSubmissionId: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.PkiFailure: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.PkiId: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.policy.PolicyDecision: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.policy.PolicyTrace: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.policy.PolicyTraceStep: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.ActiveCertificateProfile: Returns a hash code value for this object.
hashCode() - Method in class zeroecho.pki.api.profile.BuiltInCertificateProfileTemplate
hashCode() - Method in record class zeroecho.pki.api.profile.CaCertificatePolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.CertificateProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns a hash code value for this object.
hashCode() - Method in class zeroecho.pki.api.profile.CertificateProfileRef
hashCode() - Method in record class zeroecho.pki.api.profile.ExtendedKeyUsageId: Returns a hash code value for this object.
hashCode() - Method in class zeroecho.pki.api.profile.ImportedCertificateProfileVersion
hashCode() - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.ProfileQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNameRule: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.SubjectPolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.SubjectRdnRule: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.BindingReference: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.publication.PublicationQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.publication.PublicationRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.publication.PublicationResult: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.publication.PublicationTarget: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.CertificationRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.ProofOfPossessionResult: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.RequestQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.DnsName: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.IpAddress: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.Rfc822Name: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.UriName: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.SubjectRdn: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.request.X509EnrollmentPayload: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Hold: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.RevokePermanently: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Unhold: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.revocation.RevocationInputs: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.revocation.RevocationQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.revocation.RevocationRecord: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.revocation.RevocationTransition: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.CaSubject: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.OcspResponder: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofScope: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns a hash code value for this object.
hashCode() - Method in class zeroecho.pki.api.signing.SigningAcceptanceReceipt
hashCode() - Method in record class zeroecho.pki.api.signing.SigningAcceptanceResult: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.signing.SigningRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.status.DeltaCrlRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.status.FullCrlRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.status.StatusObject: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.status.StatusObjectGenerateCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.status.StatusObjectQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.SubjectRef: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.transfer.ExportArtifact: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.transfer.ExportQuery: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.transfer.ImportPolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.api.Validity: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.CredentialConfirmationProofAudience: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.DashboardLiveSource.Metric: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.LocalSigningResult.Completed: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.LocalSigningResult.Failed: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.OcspResponseService.CertId: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.OcspResponseService.Response: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ActivateProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.CompleteCredentialConfirmationProof: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.HoldCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ImportRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectAlgorithmBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectAuthority: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerChainPath: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerGeneration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectPublication: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectRevocation: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectStatus: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.InspectStatusSchedule: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.IssueCredentialConfirmationChallenge: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListAuthorities: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerChainPaths: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerGenerations: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListProfiles: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListProfileVersions: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListPublications: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListRequests: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListStatus: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ListStatusSchedules: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ProcessPublication: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.QueryAuthorityMetrics: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.QueryCertificateMetrics: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.QueryPublicationMetrics: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.QueryRevocationMetrics: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.QueryServerMetrics: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ReadRevocationHistory: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ReconcilePublication: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.RegisterIssuerChainPath: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.RegisterProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.RegisterPublication: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.RetryPublication: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.RevokeCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.RevokePendingCredentialConfirmation: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.SnapshotRevocations: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.TransitionAuthority: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.UnholdCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ValidateAlgorithmBindings: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ValidateConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.ValidateProfile: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperation.VerifyRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Completed: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Failed: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Pending: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperationResult: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperationValue.BooleanValue: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperationValue.IntegerValue: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperationValue.ListValue: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperationValue.ObjectValue: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiOperationValue.Text: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiResourceScopeResolver.CredentialScope: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.BindingProviderConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSessionConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningCoordinatorLimits: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningKeyGroup: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningLanePool: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningTopology: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.GenerateStatus: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReissueCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.RenewCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReplaceCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.RolloverCaCertificate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PkiSigningOperation.RotateCaKey: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet.Entry: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.continuation.DomainCommandEncoding.Decoded: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.CaContext: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Returns a hash code value for this object.
hashCode() - Method in class zeroecho.pki.impl.core.CrlScope
hashCode() - Method in record class zeroecho.pki.impl.core.DeltaCrlBase: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.FrozenPublication: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.core.ValidatedCertificateRequest.FrozenIssuance: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator.CertificateBindings: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CertificateTbsLayout: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CrlSemanticLayout: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter.Measurement: Returns a hash code value for this object.
hashCode() - Method in class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier
hashCode() - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Component: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions.CredentialSearch: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.bootstrap.PkiBootstrap.SigningComposition: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Returns a content-based hash code for every coordinate.
hashCode() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofCredential: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofDescriptor: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofPresentation: Returns a content-based hash code.
hashCode() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofResponse: Returns a content-based hash code.
hashCode() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCallControl: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningStatus: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.CallControl: Returns a hash code value for this object.
hashCode() - Method in class zeroecho.pki.spi.crypto.SigningProvider.ConfigurationCommitment
hashCode() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.ContentCommitment: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.ct.CtJournalVerificationResult: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.framework.CrlEntry: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.ProviderConfig: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.AuditEvidenceFeed.Entry: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.MetadataCommitResult: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.MetadataKey: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.Integrity: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.MetadataStoreCapabilities: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.MetadataStoreId: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.MetadataTransactionId: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.PkiStore.RequestSelection: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Entry: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.HighWatermark: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Position: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns a hash code value for this object.
hashCode() - Method in class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommitment
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CandidateBinding: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofOutcome: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DueCandidate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DuePage: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.OuterCommand: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.PageCandidate: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingCoordinates: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingPlan: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.util.async.AsyncEvent: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.util.async.AsyncOperationSnapshot: Returns a hash code value for this object.
hashCode() - Method in record class zeroecho.pki.util.async.AsyncStatus: Returns a hash code value for this object.
Hash computation - Section in record class zeroecho.pki.spi.ct.CtJournalEntry
hasSameOperation(PublicationRecord) - Method in record class zeroecho.pki.api.publication.PublicationRecord: Tests whether another record describes the same immutable operation.
head() - Method in record class zeroecho.pki.api.audit.AuditIntegrityReport: Returns the value of the head record component.
HEAD_MISMATCH - Enum constant in enum class zeroecho.pki.api.audit.AuditIntegrityReport.Status: The chain is internally consistent but the head differs from the trusted anchor (truncation).
headEntryHash() - Method in class zeroecho.pki.impl.fs.ct.FsCtJournalStore: Returns the entryHash of the most-recently-appended entry, or all-zeros if the journal is empty.
HELD - Enum constant in enum class zeroecho.pki.api.credential.EffectiveCredentialStatus: The credential is temporarily held.
HELD - Enum constant in enum class zeroecho.pki.api.revocation.RevocationState: Credential is temporarily held.
highWatermark() - Method in interface zeroecho.pki.spi.store.AuditEvidenceFeed: Returns the captured entry count (next sequence) at open time.
highWatermark() - Method in interface zeroecho.pki.spi.store.RevocationTransitionFeed: Returns the immutable head captured at open time.
highWatermark() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DuePage: Returns the value of the highWatermark record component.
highWatermark() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Returns the value of the highWatermark record component.
HighWatermark(MetadataStoreId, long, String) - Constructor for record class zeroecho.pki.spi.store.RevocationTransitionFeed.HighWatermark: Validates the immutable captured head.
history(PkiId) - Method in interface zeroecho.pki.api.RevocationService: Opens the authoritative transition history for one credential.
history(PkiId) - Method in class zeroecho.pki.impl.core.DefaultRevocationService
History tracking - Section in record class zeroecho.pki.impl.fs.FsPkiStoreOptions
hold(RevocationCommand.Hold) - Method in interface zeroecho.pki.api.RevocationService: Places a credential on hold.
hold(RevocationCommand.Hold) - Method in class zeroecho.pki.impl.core.DefaultRevocationService
Hold(PkiId, AttributeSet) - Constructor for record class zeroecho.pki.api.revocation.RevocationCommand.Hold: Validates and snapshots the command.
HoldCredential(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.HoldCredential: Creates a hold without justification.
HoldCredential(PkiId, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.HoldCredential: Validates the exact target and bounded optional justification.
holdCredentialScope(PkiId) - Method in interface zeroecho.pki.application.PkiResourceScopeResolver: Returns frozen authorization coordinates for a temporary hold or release, including CA certificates when supported by the implementation.
HTTP - Enum constant in enum class zeroecho.pki.api.publication.PublicationTargetType: Publish via an HTTP(S) endpoint.
HttpsPublisherProvider - Class in zeroecho.pki.impl.publish: HTTPS publication destination provider.
HttpsPublisherProvider() - Constructor for class zeroecho.pki.impl.publish.HttpsPublisherProvider: Creates an HTTPS publisher provider descriptor.
HttpsRemoteSigningTransport - Class in zeroecho.pki.impl.crypto.remote.http: Mutually-authenticated HTTPS/JSON binding of RemoteSigningTransport.
HYBRID - Enum constant in enum class zeroecho.pki.impl.secrets.PublisherSecretsProtection: Both PBKDF2 password and BIKE-256 KEM recipients; either can decrypt.
HybridCertificateMode - Interface in zeroecho.pki.api.hybrid: Discriminates the hybrid certificate mode for a certificate profile.
HybridCertificateMode.AltSignature - Record Class in zeroecho.pki.api.hybrid: X.509 2019 Amendment 2 alternative-signature extension mode.
HybridCertificateMode.Composite - Record Class in zeroecho.pki.api.hybrid: Composite-signature mode per draft-ounsworth-pq-composite-sigs (stub; not yet implemented).
HybridCertificateMode.None - Record Class in zeroecho.pki.api.hybrid: No hybrid mode — the certificate carries only a primary signature.
HybridCertificateMode.TwinCertificate - Record Class in zeroecho.pki.api.hybrid: Twin-certificate mode: two parallel CA hierarchies, one classical and one post-quantum, are maintained and cross-referenced at the deployment level.
hybridMode() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the hybridMode record component.

I

id() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns the value of the id record component.
id() - Method in record class zeroecho.pki.api.orch.SigningSubmissionId: Returns the value of the id record component.
id() - Method in class zeroecho.pki.impl.async.FileBackedAsyncBusProvider
id() - Method in class zeroecho.pki.impl.audit.FileAuditSinkProvider
id() - Method in class zeroecho.pki.impl.audit.InMemoryAuditSinkProvider
id() - Method in class zeroecho.pki.impl.audit.StdoutAuditSinkProvider
id() - Method in class zeroecho.pki.impl.audit.SyslogAuditSinkProvider
id() - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet.Entry: Returns the value of the id record component.
id() - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProvider
id() - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory
id() - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider
id() - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory
id() - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
id() - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory
id() - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFrameworkProvider: Returns the stable provider identifier used to select this X.509 framework backend.
id() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRule: Returns the stable namespaced rule identifier.
id() - Method in record class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Component: Returns the value of the id record component.
id() - Method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Returns this durable store authority identity.
id() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStoreProvider
id() - Method in class zeroecho.pki.impl.publish.FilesystemPublisherProvider
id() - Method in class zeroecho.pki.impl.publish.HttpsPublisherProvider
id() - Method in interface zeroecho.pki.spi.ConfigurableProvider: Returns a stable backend identifier (e.g.
id() - Method in interface zeroecho.pki.spi.crypto.SigningProvider: Returns the stable provider identifier.
id() - Method in interface zeroecho.pki.spi.store.MetadataTransaction: Returns the store-issued transaction identity.
id() - Method in interface zeroecho.pki.spi.store.TransactionalMetadataStore: Returns this durable store authority identity.
id(T) - Method in interface zeroecho.pki.spi.bootstrap.SpiSelector.ProviderId: Returns the stable id for a provider instance.
ID_ATTRIBUTE - Static variable in record class zeroecho.pki.api.issuance.IssuanceIntent: Stable internal metadata attribute carrying the non-secret issuance identity.
IdCodec<T> - Interface in zeroecho.pki.util.async.codec: String codec for stable persistence of identifiers.
identifier() - Method in record class zeroecho.pki.api.content.DurableContentOwner: Returns the value of the identifier record component.
identities() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRuleProvider: Returns exact identities introduced by this installed extension.
identity() - Method in record class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Component: Returns the value of the identity record component.
identity(X509ComponentCatalog.Kind, String) - Method in class zeroecho.pki.impl.framework.x509.X509ComponentCatalog: Reverse-resolves an exact component OID.
idFor(String) - Static method in record class zeroecho.pki.api.ca.IssuerChainPath: Returns the canonical path identity for a path commitment.
idFor(PkiId, PkiId) - Static method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns the canonical identity for an authority credential generation.
idlePollInterval() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningCoordinatorLimits: Returns the value of the idlePollInterval record component.
ids() - Method in interface zeroecho.pki.api.attr.AttributeSet: Returns all attribute identifiers present in this set.
ids() - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Returns the distinct set of attribute identifiers present in this set.
ids() - Method in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet: Returns the identifiers present in this attribute set.
Immutability - Section in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet
Immutability and history - Section in package zeroecho.pki.api.orch
Immutability and lifecycle - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework
ImmutableX509AlgorithmBindingRegistry - Class in zeroecho.pki.impl.framework.x509: Package-owned immutable registry implementation used by session bootstrap.
implementation() - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Returns the value of the implementation record component.
IMPLEMENTATION_ID - Static variable in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory: Stable implementation id for capability binding.
IMPLEMENTATION_ID - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509VerificationExecutor: Stable semantic implementation identifier.
Implementation expectations - Section in interface zeroecho.pki.spi.framework.CredentialIssuerBackend
Implementation style - Section in package zeroecho.pki.impl.core
Implementation style - Section in package zeroecho.pki.impl.framework.x509.bc
IMPORT_ROOT - Enum constant in enum class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.Operation: Imports an existing root credential after full profile validation.
importBuiltIn(BuiltInCertificateProfileTemplate) - Method in interface zeroecho.pki.api.ProfileService: Imports a built-in provisioning template through the same document path.
importBuiltIn(BuiltInCertificateProfileTemplate) - Method in class zeroecho.pki.impl.core.DefaultProfileService
importCaCertificate(PkiId, EncodedObject, ImportPolicy) - Method in interface zeroecho.pki.api.ImportExportService: Imports a CA certificate payload into an existing CA entity's credential set.
importCredential(FormatId, EncodedObject, ImportPolicy) - Method in interface zeroecho.pki.api.ImportExportService: Imports an issued credential payload into inventory.
importedAt() - Method in class zeroecho.pki.api.profile.ImportedCertificateProfileVersion: Returns the authoritative import time.
ImportedCertificateProfileVersion - Class in zeroecho.pki.api.profile: Immutable persisted profile version and its canonical configuration bytes.
ImportedCertificateProfileVersion(CertificateProfileRef, int, CertificateProfileDefinition, byte[], Instant) - Constructor for class zeroecho.pki.api.profile.ImportedCertificateProfileVersion: Creates an immutable imported version.
ImportExportService - Interface in zeroecho.pki.api: Import and export operations for migration and interoperability.
ImportPolicy - Record Class in zeroecho.pki.api.transfer: Policy flags controlling import behavior.
ImportPolicy(boolean, boolean, AttributeSet) - Constructor for record class zeroecho.pki.api.transfer.ImportPolicy: Creates an import policy.
importProfile(byte[]) - Method in interface zeroecho.pki.api.ProfileService: Imports a bounded strict JSON profile document without activating it.
importProfile(byte[]) - Method in class zeroecho.pki.impl.core.DefaultProfileService
importProfile(InputStream) - Method in interface zeroecho.pki.api.ProfileService: Imports a strict JSON profile document without taking ownership of the supplied stream.
importProfile(InputStream) - Method in class zeroecho.pki.impl.core.DefaultProfileService
importProfileVersion(ImportedCertificateProfileVersion) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
importProfileVersion(ImportedCertificateProfileVersion) - Method in interface zeroecho.pki.spi.store.PkiStore: Atomically imports one immutable validated profile version.
ImportRequest(FormatId, EncodedObject) - Constructor for record class zeroecho.pki.application.PkiOperation.ImportRequest: Validates the object.
importRoot(CaImportCommand) - Method in interface zeroecho.pki.api.CaService: Imports an existing root CA into the PKI inventory.
importRoot(CaImportCommand, CancellationSignal) - Method in interface zeroecho.pki.api.CaService: Imports a root while carrying cancellation through managed-key proof.
INCOMPATIBLE_KEY - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: Signature and key identities are incompatible.
INDEFINITE - Enum constant in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.OutcomeRetention: Known terminal outcomes remain resolvable indefinitely.
INITIAL_REVISION - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Initial pending or not-required revision.
initialAttemptPhase() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the initialAttemptPhase record component.
initialAttemptPhase() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the retained bounded initial-attempt phase.
initialCrlNumber() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the initialCrlNumber record component.
initialDisclosurePolicy() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the initialDisclosurePolicy record component.
initialDisclosurePolicy() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Returns the value of the initialDisclosurePolicy record component.
initialize(CredentialConfirmationInitialization) - Static method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Creates the canonical revision-1 lifecycle from frozen initialization inputs.
initialize(CredentialConfirmationInitialization) - Method in interface zeroecho.pki.api.confirmation.CredentialConfirmationService: Initializes or exactly replays one frozen confirmation lifecycle.
initialize(CredentialConfirmationInitialization) - Method in class zeroecho.pki.impl.core.DefaultCredentialConfirmationService
initializeCredentialConfirmation(CredentialConfirmationInitialization) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
initializeCredentialConfirmation(CredentialConfirmationInitialization) - Method in interface zeroecho.pki.spi.store.PkiStore: Atomically creates the credential-confirmation lifecycle and its pending review projection when absent.
initialPolicy() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Returns the value of the initialPolicy record component.
initialPolicy() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the initialPolicy record component.
initialPolicyCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Returns the value of the initialPolicyCommitment record component.
initialPolicyCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the initialPolicyCommitment record component.
InMemoryAuditSink - Class in zeroecho.pki.impl.audit: In-memory AuditSink provider intended for deterministic tests and local debugging.
InMemoryAuditSink() - Constructor for class zeroecho.pki.impl.audit.InMemoryAuditSink: Public no-arg constructor required for ServiceLoader.
InMemoryAuditSink(int) - Constructor for class zeroecho.pki.impl.audit.InMemoryAuditSink: Creates a sink with an explicit maximum number of events.
InMemoryAuditSinkProvider - Class in zeroecho.pki.impl.audit: AuditSinkProvider for the in-memory audit sink.
InMemoryAuditSinkProvider() - Constructor for class zeroecho.pki.impl.audit.InMemoryAuditSinkProvider: Creates an in-memory audit-sink provider descriptor.
inputCapabilities() - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProvider
inputCapabilities() - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider
inputCapabilities() - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
inputCapabilities() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Returns the value of the inputCapabilities record component.
inputCapabilities() - Method in interface zeroecho.pki.spi.crypto.SigningProvider: Returns the immutable effective input contract pinned by configuration.
inputMode() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the inputMode record component.
inspect(PkiId, CancellationSignal) - Method in interface zeroecho.pki.application.LocalSigningExecutor: Reads the selected persisted operation without claiming work or completing it.
InspectAlgorithmBinding(String) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectAlgorithmBinding: Validates the identifier.
InspectAuthority(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectAuthority: Creates an immutable point-inspection request.
InspectCredential(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectCredential: Creates an immutable point-inspection request.
inspectCrlSemantics(RepeatableContent, CancellationSignal) - Method in class zeroecho.pki.impl.framework.x509.StreamingDerReader: Inspects one canonical CRL and its CRL-level number extensions without materialization.
InspectIssuerChainPath(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectIssuerChainPath: Creates an immutable point-inspection request.
InspectIssuerGeneration(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectIssuerGeneration: Creates an immutable point-inspection request.
InspectProfile(String, long) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectProfile: Validates the identity.
InspectPublication(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectPublication: Validates the identifier.
InspectRequest(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectRequest: Validates the identifier.
InspectRevocation(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectRevocation: Validates the identifier.
inspectSignedObject(RepeatableContent, StreamingDerReader.SignedObjectKind, CancellationSignal) - Method in class zeroecho.pki.impl.framework.x509.StreamingDerReader: Validates and locates the signed portions of one certificate or CRL.
InspectStatus(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectStatus: Creates an immutable point-inspection request.
InspectStatusSchedule(PkiId, StatusObjectType) - Constructor for record class zeroecho.pki.application.PkiOperation.InspectStatusSchedule: Validates the identity.
inspectUnsignedCertificateTbs(byte[], int) - Method in class zeroecho.pki.impl.framework.x509.StreamingDerReader: Validates bounded canonical DER and locates the signature algorithm and SPKI in one complete unsigned certificate TBS.
installed(X509AlgorithmResolver.Policy) - Static method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Creates the installed runtime snapshot with an explicit policy.
INSTANCE - Static variable in record class zeroecho.pki.api.hybrid.HybridCertificateMode.Composite: Singleton instance.
INSTANCE - Static variable in record class zeroecho.pki.api.hybrid.HybridCertificateMode.None: Singleton instance.
INSTANCE - Static variable in record class zeroecho.pki.api.hybrid.HybridCertificateMode.TwinCertificate: Singleton instance.
INSTANT - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: Timestamp value.
Instantiation model - Section in package zeroecho.pki.spi.audit
InstantValue(Instant) - Constructor for record class zeroecho.pki.api.attr.AttributeValue.InstantValue: Creates an instant value.
intact() - Method in record class zeroecho.pki.api.audit.AuditIntegrityReport: Indicates whether the chain verified cleanly.
intact() - Method in record class zeroecho.pki.spi.ct.CtJournalVerificationResult: Returns the value of the intact record component.
INTACT - Enum constant in enum class zeroecho.pki.api.audit.AuditIntegrityReport.Status: The chain is contiguous, correctly linked, and matches the expected head.
INTEGER - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: Integer/long value.
IntegerValue(long) - Constructor for record class zeroecho.pki.api.attr.AttributeValue.IntegerValue: Creates an instance of a IntegerValue record class.
IntegerValue(long) - Constructor for record class zeroecho.pki.application.PkiOperationValue.IntegerValue: Creates an instance of a IntegerValue record class.
integrity() - Method in interface zeroecho.pki.spi.store.MetadataSnapshot.Record: Returns stable adapter-supplied integrity metadata when available.
Integrity(String, String) - Constructor for record class zeroecho.pki.spi.store.MetadataSnapshot.Integrity: Creates integrity metadata.
INTEGRITY_FAILURE - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Stored metadata failed integrity validation.
Intended usage - Section in package zeroecho.pki.spi.audit
intent() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityIssuanceRequest: Returns the value of the intent record component.
intent() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Returns the value of the intent record component.
intent() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityReplacementRequest: Returns the value of the intent record component.
intent() - Method in record class zeroecho.pki.impl.core.ValidatedCertificateRequest.FrozenIssuance: Returns the value of the intent record component.
intent(PkiId, SignWorkflowStore.Mode, SignWorkflowStore.Stage) - Static method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns a revision-zero intent with the initial phase for the accepted mode.
INTENT - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Durable intent exists but has not been submitted to the provider.
intentCommitment() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.CaContext: Returns the value of the intentCommitment record component.
Intermediate(PkiId, KeyRef, PkiId, AttributeSet) - Constructor for record class zeroecho.pki.api.ca.CaKeyRotationCommand.Intermediate: Validates local structure without resolving authority state.
Intermediate(PkiId, PkiId, KeyRef, Optional, AttributeSet) - Constructor for record class zeroecho.pki.api.ca.CaRolloverCommand.Intermediate: Validates local structure without resolving authority state.
INTERMEDIATE - Enum constant in enum class zeroecho.pki.api.ca.CaKind: Intermediate CA (issued by another CA).
INTERMEDIATE_CA - Enum constant in enum class zeroecho.pki.api.profile.CertificateProfileKind: Issuer-signed intermediate certification-authority certificate.
INTERMEDIATE_ISSUER - Enum constant in enum class zeroecho.pki.api.credential.CredentialUse: Issuer credential used for intermediate CA issuance.
IntermediateCertIssueCommand - Record Class in zeroecho.pki.api.ca: Command to issue a new CA credential for an existing intermediate CA entity.
IntermediateCertIssueCommand(FormatId, PkiId, PkiId, String, KeyRef, Optional, AttributeSet) - Constructor for record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Creates an intermediate CA credential issuance command.
IntermediateCreateCommand - Record Class in zeroecho.pki.api.ca: Command to create a new intermediate CA entity and issue its initial CA credential.
IntermediateCreateCommand(FormatId, PkiId, SubjectRef, String, KeyRef, AttributeSet) - Constructor for record class zeroecho.pki.api.ca.IntermediateCreateCommand: Creates an intermediate create command.
IntermediateSigningCommand - Class in zeroecho.pki.impl.core.continuation: Configuration-independent provenance for intermediate creation, additional issuance and rollover.
IntermediateSigningPreparation - Class in zeroecho.pki.impl.core: Session-owned intermediate creation, issuance and lifecycle validation and single-candidate staging.
IntermediateSigningPreparation(PkiStore, Clock, SigningProvider, X509AuthoritySnapshot, X509AlgorithmBindingRegistry, String, long, ManagedKeyProofPreparation) - Constructor for class zeroecho.pki.impl.core.IntermediateSigningPreparation: Binds to the already-opened provider and exact SIGN authority.
INTERNAL - Enum constant in enum class zeroecho.pki.api.attr.AttributeSensitivity: Internal operational value; restricted to internal components and operators.
INTERNAL_FAILURE - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: An internal defect or otherwise unclassified internal failure prevented completion.
INTERNAL_FAILURE - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic internal implementation failure.
INTERNAL_FAILURE - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionReason: Verification failed for an internal or otherwise unclassified reason.
INTERNAL_FAILURE - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: An unexpected implementation defect prevented a safe result.
interoperability() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the interoperability record component.
interval() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the interval record component.
interval() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Returns the value of the interval record component.
INVALID_ALGORITHM - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Algorithm identity is invalid or unsupported.
INVALID_KEY_REFERENCE - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Key reference is malformed for this provider.
IP_ADDRESS - Enum constant in enum class zeroecho.pki.api.profile.SubjectAlternativeNameType: Raw IPv4 or IPv6 address.
IpAddress(byte[]) - Constructor for record class zeroecho.pki.api.request.SubjectAlternativeName.IpAddress: Defensively snapshots and validates the address.
IPV4_OCTET_COUNT - Static variable in interface zeroecho.pki.api.request.SubjectAlternativeName: IPv4 octet count.
isEmpty() - Method in record class zeroecho.pki.api.audit.AuditChainHead: Indicates whether this head describes an empty log.
isExpiredAt(Instant) - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns whether the record is expired at the provided time.
isLiveAt(Instant) - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Tests whether this challenge is live at an authoritative observation time.
ISSUANCE - Enum constant in enum class zeroecho.pki.api.signing.SemanticSigningKind: Credential issuance.
ISSUANCE - Enum constant in enum class zeroecho.pki.spi.store.DomainContinuationStore.Kind: End-entity or intermediate credential issuance.
IssuanceApprovalRequirement - Enum Class in zeroecho.pki.api.profile: Closed multi-party approval requirement a certificate profile places on end-entity issuance.
issuanceBinding(CorrelatedEndEntityIssuanceRequest) - Method in interface zeroecho.pki.api.SemanticSigningService: Derives a CSR-free binding to the exact bounded request and its frozen selection.
issuanceBinding(CorrelatedEndEntityIssuanceRequest) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
issuanceChainPathId() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns the value of the issuanceChainPathId record component.
IssuanceExecutionEvidence - Record Class in zeroecho.pki.application: Immutable, server-derived evidence co-committed with a successful end-entity issuance.
IssuanceExecutionEvidence(IssuanceExecutionEvidence.ActorType, String, String, String, IssuanceExecutionEvidence.Authentication, IssuanceExecutionEvidence.Authorization, Optional, Optional, String, String, IssuanceExecutionEvidence.Outcome) - Constructor for record class zeroecho.pki.application.IssuanceExecutionEvidence: Validates the closed evidence model.
IssuanceExecutionEvidence.ActorType - Enum Class in zeroecho.pki.application: Stable evidence actor classifications.
IssuanceExecutionEvidence.Authentication - Enum Class in zeroecho.pki.application: Stable evidence authentication classifications.
IssuanceExecutionEvidence.Authorization - Enum Class in zeroecho.pki.application: Stable evidence authorization classifications.
IssuanceExecutionEvidence.AuthorizationPath - Enum Class in zeroecho.pki.application: Exact administrative or enrollment authorization path; administrative break-glass takes precedence.
IssuanceExecutionEvidence.Outcome - Enum Class in zeroecho.pki.application: Outcome committed atomically with the credential.
issuanceId() - Method in record class zeroecho.pki.api.issuance.IssuanceIntent: Returns the value of the issuanceId record component.
issuanceId() - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Returns the value of the issuanceId record component.
IssuanceInputs - Record Class in zeroecho.pki.api.issuance: Normalized inputs for issuance policy evaluation.
IssuanceInputs(PkiId, ParsedCertificationRequest, String, AttributeSet) - Constructor for record class zeroecho.pki.api.issuance.IssuanceInputs: Creates issuance inputs for policy evaluation.
issuanceIntent() - Method in record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Returns the value of the issuanceIntent record component.
IssuanceIntent - Record Class in zeroecho.pki.api.issuance: Durable idempotency and frozen-selection authority for one issuance request.
IssuanceIntent(String, String, CertificateProfileRef, PkiId, PkiId, String) - Constructor for record class zeroecho.pki.api.issuance.IssuanceIntent: Validates the transport-neutral frozen issuance authority.
issuanceRecordId() - Method in record class zeroecho.pki.api.issuance.ReissueCommand: Returns the value of the issuanceRecordId record component.
IssuanceService - Interface in zeroecho.pki.api: Issues, renews, replaces, and reissues credentials, and builds distributable bundles.
ISSUE - Static variable in class zeroecho.pki.impl.core.continuation.IntermediateSigningCommand: Adds a credential to an existing intermediate authority.
ISSUE_INTERMEDIATE - Enum constant in enum class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.Operation: Issues an additional intermediate CA credential.
IssueCredential(PkiId, PkiId, String) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.IssueCredential: Validates the issuance input.
issueCredentialConfirmationChallenge(CredentialConfirmationChallengeIssuance) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
issueCredentialConfirmationChallenge(CredentialConfirmationChallengeIssuance) - Method in interface zeroecho.pki.spi.store.PkiStore: Atomically issues or idempotently resolves one challenge for a pending credential-confirmation lifecycle.
IssueCredentialConfirmationChallenge(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.IssueCredentialConfirmationChallenge: Validates the identifier.
ISSUED - Enum constant in enum class zeroecho.pki.api.credential.CredentialStatus: Credential is issued and not revoked.
ISSUED - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Outcome: Credential and evidence committed atomically.
issuedAfter() - Method in record class zeroecho.pki.api.transfer.ExportQuery: Returns the value of the issuedAfter record component.
issuedAt() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the issuedAt record component.
issuedBefore() - Method in record class zeroecho.pki.api.transfer.ExportQuery: Returns the value of the issuedBefore record component.
issueEndEntity(IssueEndEntityCommand) - Method in interface zeroecho.pki.api.IssuanceService: Issues a new end-entity credential.
issueEndEntity(IssueEndEntityCommand, CancellationSignal) - Method in interface zeroecho.pki.api.IssuanceService: Issues a leaf credential with originating cancellation.
issueEndEntity(IssueEndEntityCommand, AttributeSet, CancellationSignal) - Method in interface zeroecho.pki.api.IssuanceService: Issues a leaf credential, co-committing server-derived issuance evidence into the credential's universal attribute set in the same atomic durable write.
issueEndEntity(ValidatedLeafRequest, DurableContentReference, KeyRef, BigInteger) - Method in interface zeroecho.pki.spi.framework.CredentialIssuerBackend: Issues an end-entity credential.
issueEndEntity(ValidatedLeafRequest, DurableContentReference, KeyRef, BigInteger, CancellationSignal) - Method in interface zeroecho.pki.spi.framework.CredentialIssuerBackend: Issues a leaf while carrying originating cancellation to signing.
IssueEndEntityCommand - Record Class in zeroecho.pki.api.issuance: Command to issue an end-entity credential from a parsed certification request.
IssueEndEntityCommand(PkiId, ParsedCertificationRequest, String, Optional) - Constructor for record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Creates an ordinary non-correlated administrative issuance command.
IssueEndEntityCommand(PkiId, ParsedCertificationRequest, String, Optional, Optional) - Constructor for record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Creates an issuance command.
issueIntermediateCertificate(IntermediateCertIssueCommand) - Method in interface zeroecho.pki.api.CaService: Issues a new CA credential for an existing intermediate CA entity.
issueIntermediateCertificate(IntermediateCertIssueCommand, CancellationSignal) - Method in interface zeroecho.pki.api.CaService: Issues an intermediate credential with originating cancellation.
issueIntermediateCertificate(ValidatedCaRequest, DurableContentReference, KeyRef) - Method in interface zeroecho.pki.spi.framework.CredentialIssuerBackend: Issues a CA credential for an existing CA subject entity.
issueIntermediateCertificate(ValidatedCaRequest, DurableContentReference, KeyRef, CancellationSignal) - Method in interface zeroecho.pki.spi.framework.CredentialIssuerBackend: Issues an intermediate while carrying originating cancellation to signing.
IssueIntermediateCertificate(FormatId, PkiId, PkiId, String, Optional) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Validates the closed intermediate-issuance input.
issueProofChallenge(CredentialConfirmationProofChallengeRequest) - Method in interface zeroecho.pki.api.confirmation.CredentialConfirmationService: Issues or exactly replays one authoritative key-possession proof challenge.
issueProofChallenge(CredentialConfirmationProofChallengeRequest) - Method in class zeroecho.pki.impl.core.DefaultCredentialConfirmationService
issuer(PkiId) - Method in interface zeroecho.pki.application.PkiRepository: Returns an exact issuer generation.
ISSUER_CA_ID - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
ISSUER_CA_ID - Static variable in record class zeroecho.pki.application.StatusGenerationEvidence: Evidence attribute vocabulary.
ISSUER_CA_NOT_ACTIVE - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A referenced issuing authority (CA) exists but is not in an active state.
ISSUER_CA_NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A referenced issuing authority (CA) does not exist.
ISSUER_CERT_DER - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for a DER-encoded issuer X.509 certificate.
ISSUER_CHAIN_PATH_NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A referenced issuer chain path does not exist.
ISSUER_CREDENTIAL_NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A referenced issuer credential does not exist.
ISSUER_GENERATION_NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A referenced issuer generation does not exist.
ISSUER_KEYREF - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for the issuer signing key reference.
issuerAuthorityId() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.CaSubject: Returns the value of the issuerAuthorityId record component.
issuerCaId() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Intermediate: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Intermediate: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.ca.IntermediateCreateCommand: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.credential.CredentialQuery: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityReplacementRequest: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.issuance.IssuanceInputs: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.revocation.RevocationQuery: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.status.StatusObject: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.status.StatusObjectGenerateCommand: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.status.StatusObjectQuery: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.api.transfer.ExportQuery: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.application.PkiOperation.ListStatus: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.application.PkiSigningOperation.GenerateStatus: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueCredential: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.application.PkiSigningOperation.RolloverCaCertificate: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.application.PkiSigningOperation.RotateCaKey: Returns the value of the issuerCaId record component.
issuerCaId() - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Returns the value of the issuerCaId record component.
issuerCaId() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the issuing CA identifier.
issuerCaId() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the authoritative issuer CA identifier.
issuerCaId() - Method in class zeroecho.pki.impl.core.VerifiedIssuanceCandidate: Returns the store-authoritative issuing CA identifier.
issuerCaId() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the issuing CA identifier.
issuerCaId() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the authoritative issuer CA identifier.
IssuerChainPath - Record Class in zeroecho.pki.api.ca: Immutable explicitly ordered issuer chain from selected issuer certificate to its trust-anchor certificate.
IssuerChainPath(PkiId, PkiId, PkiId, List, String) - Constructor for record class zeroecho.pki.api.ca.IssuerChainPath: Creates and validates an immutable chain path.
issuerContent() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the issuerContent record component.
issuerCredentialId() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the issuerCredentialId record component.
issuerCredentialId() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the issuerCredentialId record component.
IssuerGeneration - Record Class in zeroecho.pki.api.ca: Immutable authority record for one concrete CA issuer generation.
IssuerGeneration(PkiId, PkiId, PkiId, KeyRef, IssuerGenerationState, String, String) - Constructor for record class zeroecho.pki.api.ca.IssuerGeneration: Creates a validated issuer generation.
issuerGenerationId() - Method in record class zeroecho.pki.api.status.DeltaCrlRequest: Returns the value of the issuerGenerationId record component.
issuerGenerationId() - Method in record class zeroecho.pki.api.status.FullCrlRequest: Returns the value of the issuerGenerationId record component.
issuerGenerationId() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the issuerGenerationId record component.
IssuerGenerationState - Enum Class in zeroecho.pki.api.ca: Durable lifecycle state of one concrete CA issuer generation.
issuerId() - Method in record class zeroecho.pki.api.ca.IssuerChainPath: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.api.IssuerRef: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerGeneration: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerChainPaths: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.application.PkiOperation.RegisterIssuerChainPath: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Returns the value of the issuerId record component.
issuerId() - Method in record class zeroecho.pki.impl.core.ValidatedCertificateRequest.FrozenIssuance: Returns the value of the issuerId record component.
issuerIds() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns the value of the issuerIds record component.
issuerKeyHash() - Method in record class zeroecho.pki.application.OcspResponseService.CertId: Returns the issuer-key digest without exposing internal state.
issuerKeyRef() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns the value of the issuerKeyRef record component.
issuerLength() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the issuerLength record component.
issuerNameHash() - Method in record class zeroecho.pki.application.OcspResponseService.CertId: Returns the issuer-name digest without exposing internal state.
issuerOffset() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the issuerOffset record component.
issuerRef() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the issuerRef record component.
IssuerRef - Record Class in zeroecho.pki.api: References the exact issuer generation that produced a credential.
IssuerRef(PkiId) - Constructor for record class zeroecho.pki.api.IssuerRef: Creates a transient unresolved reference used only at framework adapter boundaries.
IssuerRef(PkiId, PkiId, PkiId) - Constructor for record class zeroecho.pki.api.IssuerRef: Creates an issuer reference.
issues() - Method in record class zeroecho.pki.api.backup.BackupVerificationReport: Returns the value of the issues record component.
issues() - Method in record class zeroecho.pki.api.backup.RestoreStatus: Returns the value of the issues record component.
isTerminal() - Method in enum class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningState: Indicates whether this state is terminal.
isTerminal() - Method in enum class zeroecho.pki.spi.crypto.SigningProvider.ObservationState: Returns whether the observation is terminal.
isTerminal() - Method in record class zeroecho.pki.util.async.AsyncStatus: Returns whether this status is terminal.
isWithin(String, String) - Static method in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry: Tests whether one OID is strictly below or exactly at an authorized root.

J

JUSTIFICATION_COMMITMENT - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
justificationCommitment() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the justificationCommitment record component.
jvmHeapUsedBytes() - Method in interface zeroecho.pki.application.DashboardLiveSource: Returns JVM heap currently used in bytes.

K

key() - Method in record class zeroecho.pki.spi.store.MetadataKey: Returns the value of the key record component.
key() - Method in interface zeroecho.pki.spi.store.MetadataSnapshot.Record: Returns the semantic record identity.
KEY_AGREEMENT - Enum constant in enum class zeroecho.pki.api.profile.LeafKeyUsage: keyAgreement.
KEY_CERT_SIGN - Enum constant in enum class zeroecho.pki.api.profile.CaKeyUsage: keyCertSign.
KEY_COMPROMISE - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: Subject private key is compromised.
KEY_ENCIPHERMENT - Enum constant in enum class zeroecho.pki.api.profile.LeafKeyUsage: keyEncipherment.
KEY_INFO - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: Public key information representation (e.g., SPKI).
KEY_LOG_PATH - Static variable in class zeroecho.pki.impl.async.FileBackedAsyncBusProvider: Configuration key for the log file path.
KEY_NOT_FOUND - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Selected key is unavailable.
KEY_PROOF - Enum constant in enum class zeroecho.pki.api.signing.SemanticSigningKind: Verification of possession of a managed private key without publishing an artifact.
KEY_PROOF - Enum constant in enum class zeroecho.pki.spi.store.DomainContinuationStore.Kind: Managed private-key possession proof; never certificate or status publication.
Key abstractions - Section in package zeroecho.pki.api.orch
Key entry points - Section in package zeroecho.pki.api
keyHandle() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the keyHandle record component.
KeyPossessionProofChallengeContext - Record Class in zeroecho.pki.spi.confirmation: Immutable authoritative persisted context for stateless key-possession challenge work.
KeyPossessionProofChallengeContext(ConfirmationRealmBinding, String, PkiId, ConfirmationProofSuiteBinding, byte[], Instant) - Constructor for record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Validates all bounded authoritative coordinates and defensively owns the nonce.
KeyPossessionProofCredential - Record Class in zeroecho.pki.spi.confirmation: Request-local authoritative credential input for key-possession proof validation.
KeyPossessionProofCredential(ConfirmationProofSuiteBinding, PkiId, PublicKey) - Constructor for record class zeroecho.pki.spi.confirmation.KeyPossessionProofCredential: Validates the exact binding, credential identity, and extracted key reference.
KeyPossessionProofDescriptor - Record Class in zeroecho.pki.spi.confirmation: Immutable portable descriptor and public input bounds of one proof-suite configuration.
KeyPossessionProofDescriptor(ConfirmationProofSuiteBinding, int, int) - Constructor for record class zeroecho.pki.spi.confirmation.KeyPossessionProofDescriptor: Validates the exact portable suite binding and approved global bounds.
KeyPossessionProofPresentation - Record Class in zeroecho.pki.spi.confirmation: Immutable bounded canonical challenge presentation produced by a proof provider.
KeyPossessionProofPresentation(byte[]) - Constructor for record class zeroecho.pki.spi.confirmation.KeyPossessionProofPresentation: Validates and defensively owns the presentation.
KeyPossessionProofProvider - Interface in zeroecho.pki.spi.confirmation: Trusted, request-stateless provider for one key-possession proof suite.
keyPossessionProofProviders() - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns the value of the keyPossessionProofProviders record component.
KeyPossessionProofResponse - Record Class in zeroecho.pki.spi.confirmation: Immutable globally bounded client response to a key-possession challenge.
KeyPossessionProofResponse(byte[]) - Constructor for record class zeroecho.pki.spi.confirmation.KeyPossessionProofResponse: Validates and defensively owns the response.
KeyPossessionProofVerification - Enum Class in zeroecho.pki.spi.confirmation: Closed result of one stateless key-possession proof verification.
keyProof() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns the value of the keyProof record component.
KeyRange(String, Optional, Optional) - Constructor for record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Creates a validated range.
keyRef() - Method in record class zeroecho.pki.api.ca.CaCreateCommand: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Intermediate: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.api.ca.IntermediateCreateCommand: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.CaSubject: Returns the value of the keyRef record component.
keyRef() - Method in interface zeroecho.pki.api.signing.ManagedKeyProofRequest: Returns the exact managed key to prove.
keyRef() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.OcspResponder: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.api.signing.SigningRequest: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the keyRef record component.
keyRef() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingCoordinates: Returns the value of the keyRef record component.
KeyRef - Record Class in zeroecho.pki.api: Opaque reference to private key material.
KeyRef(String) - Constructor for record class zeroecho.pki.api.KeyRef: Creates a key reference.
KeyRef mapping - Section in package zeroecho.pki.impl.crypto.zeroecholib
keyRefs() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningKeyGroup: Returns the value of the keyRefs record component.
KEYRING_IO_FAILURE - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Keyring input/output failed.
keyringUnlockProvider() - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns the value of the keyringUnlockProvider record component.
keyringUnlockProvider() - Method in class zeroecho.pki.spi.crypto.SigningProviderRuntimeDependencies: Returns the optional process-local keyring unlock provider.
keys() - Method in record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Returns the value of the keys record component.
keyUsageCritical() - Method in record class zeroecho.pki.api.profile.CaCertificatePolicy: Returns the value of the keyUsageCritical record component.
keyUsageCritical() - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Returns the value of the keyUsageCritical record component.
keyUsageCritical() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the KeyUsage extension criticality.
keyUsageCritical() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the KeyUsage extension criticality.
keyUsages() - Method in record class zeroecho.pki.api.profile.CaCertificatePolicy: Returns the value of the keyUsages record component.
keyUsages() - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Returns the value of the keyUsages record component.
keyUsages() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the profile-derived key usages.
keyUsages() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the profile-derived key usages.
kind() - Method in record class zeroecho.pki.api.ca.CaQuery: Returns the value of the kind record component.
kind() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns the value of the kind record component.
kind() - Method in record class zeroecho.pki.api.request.X509EnrollmentPayload: Returns the value of the kind record component.
kind() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns the value of the kind record component.
kind() - Method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Returns the value of the kind record component.
kind() - Method in record class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Component: Returns the value of the kind record component.
kind() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the kind record component.
kind() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.OuterCommand: Returns the value of the kind record component.
KNOWN_LENGTH_ONLY - Enum constant in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.ContentLengthModel: Every admitted value must declare its exact length.
KNOWN_OR_UNKNOWN_LENGTH - Enum constant in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.ContentLengthModel: Known and initially unknown lengths can be staged safely.

L

label() - Method in record class zeroecho.pki.api.backup.BackupRequest: Returns the value of the label record component.
laneCount() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningLanePool: Returns the value of the laneCount record component.
lanePool() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningKeyGroup: Returns the value of the lanePool record component.
LATE - Enum constant in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.Timeliness: Confirmation occurred after the timeliness review boundary.
latestRestoreIdentity() - Method in interface zeroecho.pki.api.BackupService: Returns the authoritative source identity of the latest restore outcome.
latestRestoreIdentity() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Returns the exact source identity persisted with the latest restore.
latestRestoreIdentity() - Method in interface zeroecho.pki.spi.store.PkiStore: Returns the exact source identity persisted with the latest restore.
latestRestoreStatus() - Method in interface zeroecho.pki.api.BackupService: Returns the latest local restore status without attempting activation.
latestRestoreStatus() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Returns the latest local restore status without activating a candidate.
latestRestoreStatus() - Method in interface zeroecho.pki.spi.store.PkiStore: Returns the latest local restore status without activating a candidate.
latestSequenceNumber() - Method in class zeroecho.pki.impl.fs.ct.FsCtJournalStore
latestSequenceNumber() - Method in interface zeroecho.pki.spi.ct.CtJournalStore: Returns the sequence number of the most recently appended entry.
layout() - Method in record class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator.CertificateBindings: Returns the value of the layout record component.
layout() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CrlSemanticLayout: Returns the value of the layout record component.
LDAP - Enum constant in enum class zeroecho.pki.api.attr.AttributeExportTarget: Export to LDAP directory.
LDAP - Enum constant in enum class zeroecho.pki.api.publication.PublicationTargetType: Publish to an LDAP directory.
LeafCertificatePolicy - Record Class in zeroecho.pki.api.profile: Complete issuer-controlled leaf certificate extension and identity policy.
LeafCertificatePolicy(SubjectAlternativeNamePolicy, Set, Set, boolean, boolean, boolean, Set) - Constructor for record class zeroecho.pki.api.profile.LeafCertificatePolicy: Validates and constructs the policy.
leafHash() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns the value of the leafHash record component.
leafHashCopy() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns an independent copy of the leafHash bytes.
LeafKeyUsage - Enum Class in zeroecho.pki.api.profile: Closed X.509 key-usage bit set available to leaf certificate profiles.
leafPolicy() - Method in record class zeroecho.pki.api.profile.CertificateProfile: Returns the value of the leafPolicy record component.
leafPolicy() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the end-entity policy.
leaseUntil() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the leaseUntil record component.
leaseUntil() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the optional provider claim expiration.
legacyBytes() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns the value of the legacyBytes record component.
length() - Method in interface zeroecho.pki.api.content.DurableContentReference: Returns the exact checked byte length.
length() - Method in class zeroecho.pki.application.PkiRepositoryContent: Returns the validated content length.
length() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.ContentCommitment: Returns the value of the length record component.
length() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns the value of the length record component.
length() - Method in interface zeroecho.pki.spi.store.ContentSink: Returns the bytes accepted so far.
length() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CandidateBinding: Returns the value of the length record component.
lifecycle() - Method in interface zeroecho.pki.api.content.DurableContentReference: Returns the immutable content purpose classification.
Lifecycle - Section in class zeroecho.pki.spi.audit.CompositeAuditSink
Lifecycle semantics - Section in class zeroecho.pki.util.async.impl.DurableAsyncBus
limit() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ListAuthorities: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerGenerations: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ListProfiles: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ListPublications: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ListRequests: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ListStatus: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ListStatusSchedules: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.ReadRevocationHistory: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns the value of the limit record component.
limit() - Method in record class zeroecho.pki.application.PkiOperation.SnapshotRevocations: Returns the value of the limit record component.
LIMIT_EXCEEDED - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Adapter technical representability limit was exceeded.
LimitedTo(long) - Constructor for record class zeroecho.pki.api.content.ResourceLimit.LimitedTo: Creates a finite limit.
list(StatusObjectQuery) - Method in interface zeroecho.pki.api.StatusObjectService: Lists status objects matching query constraints.
listActiveStatusSchedulesPage(Optional, int, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listActiveStatusSchedulesPage(Optional, int, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists all enabled status-generation schedules in ascending caId+statusType order.
ListAlgorithmBindings(Optional, Optional, int) - Constructor for record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Validates the bounded query.
ListAlgorithmBindings(Optional, Optional, int, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Validates the bounded keyset query.
listAll() - Method in interface zeroecho.pki.api.attr.AttributeCatalogue: Lists all known definitions.
ListAuthorities(int) - Constructor for record class zeroecho.pki.application.PkiOperation.ListAuthorities: Creates an immutable authority-list request.
ListAuthorities(int, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.ListAuthorities: Validates the bounded keyset query.
listByPublicKeyId(PkiId) - Method in interface zeroecho.pki.api.CredentialInventoryService: Lists credentials bound to the same public key identifier.
listCas() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listCas() - Method in interface zeroecho.pki.spi.store.PkiStore: Lists all stored CA records.
listCas(CaQuery) - Method in interface zeroecho.pki.api.CaService: Lists CA records matching query constraints.
listCasPage(Optional, int) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listCasPage(Optional, int) - Method in interface zeroecho.pki.spi.store.PkiStore: Returns a bounded canonical keyset page of CA records.
listCredentialsPage(PkiId, Optional, int, Predicate, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listCredentialsPage(PkiId, Optional, int, Predicate, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists credentials for one authority in ascending credential-ID order.
listImportedVersions(String) - Method in interface zeroecho.pki.api.ProfileService: Lists immutable imported versions for one logical profile.
listImportedVersions(String) - Method in class zeroecho.pki.impl.core.DefaultProfileService
listIssuerChainPaths(PkiId) - Method in interface zeroecho.pki.api.CaService: Lists all explicit paths for an exact issuer generation.
listIssuerChainPaths(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listIssuerChainPaths(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists explicit paths for an exact issuer generation.
ListIssuerChainPaths(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.ListIssuerChainPaths: Creates an immutable issuer-path-list request.
listIssuerGenerations(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listIssuerGenerations(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists issuer generations owned by an exact logical authority.
ListIssuerGenerations(PkiId, int, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.ListIssuerGenerations: Validates the scope, page limit and exclusive cursor.
listIssuerGenerationsPage(PkiId, Optional, int, Predicate, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listIssuerGenerationsPage(PkiId, Optional, int, Predicate, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists historical issuer generations in ascending issuer-ID order.
ListPendingCredentialConfirmations(PkiId, Optional, Instant, Optional, int) - Constructor for record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Validates the keyset query.
listProfileIdsPage(Optional, int, Predicate, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listProfileIdsPage(Optional, int, Predicate, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists logical profile IDs after an exclusive identifier, in ascending string order.
ListProfiles(int, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.ListProfiles: Validates the page limit and exclusive cursor.
listProfileVersions(String) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listProfileVersions(String) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists imported versions in ascending version order.
ListProfileVersions(String) - Constructor for record class zeroecho.pki.application.PkiOperation.ListProfileVersions: Validates the identifier.
ListPublications(int) - Constructor for record class zeroecho.pki.application.PkiOperation.ListPublications: Validates the limit.
ListPublications(int, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.ListPublications: Validates the bounded keyset query.
listPublicationsPage(Optional, int, Predicate, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listPublicationsPage(Optional, int, Predicate, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists publication metadata in ascending publication-ID order.
ListRequests(int, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.ListRequests: Validates the page limit and exclusive cursor.
listRequestsPage(Optional, int, Predicate, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listRequestsPage(Optional, int, Predicate, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists request metadata in ascending request-ID order.
listSignWorkflows() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listSignWorkflows() - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Returns a stable snapshot of retained signing records.
ListStatus(PkiId, int) - Constructor for record class zeroecho.pki.application.PkiOperation.ListStatus: Creates an immutable status-list request.
ListStatus(PkiId, int, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.ListStatus: Validates the bounded keyset query.
listStatusObjects(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listStatusObjects(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists status objects issued under a specific issuer CA.
listStatusObjectsPage(PkiId, Optional, int, Predicate, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listStatusObjectsPage(PkiId, Optional, int, Predicate, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists status metadata for one authority in ascending status-ID order.
ListStatusSchedules(int) - Constructor for record class zeroecho.pki.application.PkiOperation.ListStatusSchedules: Creates the first page query.
ListStatusSchedules(int, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.ListStatusSchedules: Validates the bounded keyset query.
listStatusScheduleWork(Optional, int, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listStatusScheduleWork(Optional, int, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Lists enabled schedules and unfinished claims, including claims subsequently disabled.
ListValue(List) - Constructor for record class zeroecho.pki.application.PkiOperationValue.ListValue: Snapshots the list and rejects null entries.
listWork(Optional, int, CancellationSignal) - Method in interface zeroecho.pki.api.schedule.StatusScheduleCoordinator: Lists enabled schedules and unresolved executions, including disabled executions.
listWorkflowStates() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
listWorkflowStates() - Method in interface zeroecho.pki.spi.store.PkiStore: Lists workflow continuation state records.
load(ClassLoader) - Static method in class zeroecho.pki.api.profile.BuiltInCertificateProfileCatalog: Loads and validates the packaged built-in profile templates.
LOCAL_FAILURE - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.ReconciliationFailureClass: Local durable reconciliation failed.
LOCAL_RESTART_UNRECOVERABLE - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Local process loss made an in-flight outcome unrecoverable.
LOCALITY_NAME - Enum constant in enum class zeroecho.pki.api.profile.SubjectRdnType: X.520 locality name.
LocalPkiSessionConfiguration - Record Class in zeroecho.pki.application: Immutable standalone configuration with an explicitly declared trusted local operator.
LocalPkiSessionConfiguration(ProviderConfig, ProviderConfig, String, Optional, List, List) - Constructor for record class zeroecho.pki.application.LocalPkiSessionConfiguration: Validates identity and snapshots provider lists before opening any resource.
localSigning() - Method in interface zeroecho.pki.application.PkiSession: Returns the borrowed sequential caller-thread signing executor.
LocalSigningConfiguration - Record Class in zeroecho.pki.application: Immutable bounded caller-thread signing configuration without a reactor topology.
LocalSigningConfiguration(ProviderConfig, String, Duration, Optional, Duration, Duration, OptionalLong) - Constructor for record class zeroecho.pki.application.LocalSigningConfiguration: Validates all bounds and rejects nonlocal providers before resource construction.
LocalSigningExecutor - Interface in zeroecho.pki.application: Session-borrowed synchronous local signing.
localSigningIndexCapacityMetrics() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Returns an immutable observation of the local signing indexes' steady and transient resident-memory accounting.
LocalSigningIndexCapacityMetrics(long, long, long, long, long, long, long, long, long) - Constructor for record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Creates an instance of a LocalSigningIndexCapacityMetrics record class.
LocalSigningResult - Interface in zeroecho.pki.application: Immutable local result; durable acceptance alone is never successful completion.
LocalSigningResult.Completed - Record Class in zeroecho.pki.application: Completed outer domain operation.
LocalSigningResult.Failed - Record Class in zeroecho.pki.application: Explicit safe failure; absent receipt does not imply absence of mutation.
localSigningWriterMetrics() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Returns an immutable observation of the shared local-signing WAL writer, accumulated across every WAL rotation of the open store.
LocalSigningWriterMetrics(long, long, long, long, long, long, long, long, long) - Constructor for record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Creates an instance of a LocalSigningWriterMetrics record class.
LOG_ID_HEX_LENGTH - Static variable in record class zeroecho.pki.api.ct.CtLogDescriptor: Expected length of a hex-encoded CT log ID (32 bytes × 2 hex chars).
Logging - Section in class zeroecho.pki.impl.audit.DefaultAttributeGovernanceService
Logging and sensitive data - Section in class zeroecho.pki.util.async.impl.DurableAsyncBus
logId() - Method in record class zeroecho.pki.api.ct.CtLogDescriptor: Returns the value of the logId record component.
logSupportedKeys(ConfigurableProvider) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Logs provider help information (supported keys) for diagnostics.
lookup(byte[]) - Method in class zeroecho.pki.impl.fs.ct.FsCtJournalStore
lookup(byte[]) - Method in interface zeroecho.pki.spi.ct.CtJournalStore: Looks up a journal entry by certificate SHA-256 fingerprint.
Lookup semantics - Section in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet
Lookup semantics - Section in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet
lowerInclusive() - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Returns the value of the lowerInclusive record component.

M

main(String[]) - Static method in class zeroecho.pki.PkiApplication: Starts the PKI process.
malformed() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DueCandidate: Returns the value of the malformed record component.
ManagedKeyProofBindings - Class in zeroecho.pki.impl.core.continuation: Configuration-independent immutable proof bindings shared by admission, observation and recovery.
ManagedKeyProofChallenge - Class in zeroecho.pki.impl.core.continuation: Strict version-two, big-endian managed-key proof challenge codec.
ManagedKeyProofChallenge.CaContext - Record Class in zeroecho.pki.impl.core.continuation: Acyclic immutable context of an internal CA proof challenge.
ManagedKeyProofChallenge.Decoded - Record Class in zeroecho.pki.impl.core.continuation: Exact immutable decoded challenge, with defensive byte-array copies.
ManagedKeyProofCommand - Class in zeroecho.pki.impl.core.continuation: Frozen managed-key proof authorization prefix.
ManagedKeyProofPreparation - Class in zeroecho.pki.impl.core: Internal managed-key proof preparation owned by the session semantic service.
ManagedKeyProofPreparation(PkiStore, SigningProvider, X509AuthoritySnapshot, X509AuthoritySnapshot, BcX509VerificationExecutor, String, SecureRandom, long) - Constructor for class zeroecho.pki.impl.core.ManagedKeyProofPreparation: Binds preparation to exact process-local providers and algorithm authorities.
ManagedKeyProofPurpose - Enum Class in zeroecho.pki.api.signing: Closed purposes of managed private-key possession proofs.
ManagedKeyProofRequest - Interface in zeroecho.pki.api.signing: Immutable, thread-safe coordinates for a managed private-key possession proof.
ManagedKeyProofRequest.CaSubject - Record Class in zeroecho.pki.api.signing: Proof coordinates for a CA subject key.
ManagedKeyProofRequest.OcspResponder - Record Class in zeroecho.pki.api.signing: Proof coordinates for a managed OCSP responder key.
ManagedKeyProofScope - Record Class in zeroecho.pki.api.signing: Immutable, thread-safe purpose-specific coordinates of a managed key proof.
ManagedKeyProofScope(ManagedKeyProofPurpose, Optional) - Constructor for record class zeroecho.pki.api.signing.ManagedKeyProofScope: Validates the exact purpose/credential combination and bounded identity.
MANIFEST_RESOURCE - Static variable in class zeroecho.pki.api.profile.BuiltInCertificateProfileCatalog: Fixed packaged catalogue manifest resource.
manifestBytes() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns the value of the manifestBytes record component.
manifestSha256() - Method in interface zeroecho.pki.api.backup.BackupPreparation: Returns the commitment to the verified manifest bytes.
manifestSha256() - Method in record class zeroecho.pki.api.backup.RestoreIdentity: Returns the value of the manifestSha256 record component.
MASK_GENERATION - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Kind: Mask-generation AlgorithmIdentifier component.
MATCHED - Enum constant in enum class zeroecho.pki.api.signing.SigningAcceptanceResolution: Exact acceptance is durable.
MATCHED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResolution: The exact acceptance commitment is durably present.
matches(AuditQuery) - Method in record class zeroecho.pki.api.audit.AuditEvent: Evaluates whether this event matches a query constraint set.
matches(SigningProvider.ConfigurationCommitment) - Method in class zeroecho.pki.spi.crypto.SigningProvider.ConfigurationCommitment: Compares the complete value in constant time.
matches(SignWorkflowStore.AcceptanceCommitment) - Method in class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommitment: Compares digest bytes in constant time.
matchesLeafExtensions(X509Certificate, ValidatedCertificateRequest) - Static method in class zeroecho.pki.impl.framework.x509.bc.BcX509ProfileSupport: Verifies the complete allowed leaf extension set and exact values.
matchesMetadata(Credential) - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Rechecks non-SAN filters against authoritative inventory metadata.
MAX_ALGORITHM_DER_BYTES - Static variable in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Inclusive AlgorithmIdentifier DER bound, in bytes.
MAX_AUTHORITY_ID_BYTES - Static variable in record class zeroecho.pki.spi.ct.CtJournalEntry: Maximum UTF-8 byte length of the authority identifier.
MAX_CERTIFICATES - Static variable in record class zeroecho.pki.api.ca.IssuerChainPath: Maximum supported certificates in one explicit PKI path.
MAX_CHALLENGE_BYTES - Static variable in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Inclusive complete challenge bound, in bytes.
MAX_COMMAND_BYTES - Static variable in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Inclusive aggregate encoded command bound, in bytes.
MAX_SPKI_BYTES - Static variable in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Inclusive canonical SubjectPublicKeyInfo bound, in bytes.
maxEvents() - Method in class zeroecho.pki.impl.audit.InMemoryAuditSink: Returns the configured maximum number of retained events.
maximum() - Method in record class zeroecho.pki.api.content.ResourceLimit.LimitedTo: Returns the value of the maximum record component.
maximum() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNameRule: Returns the value of the maximum record component.
MAXIMUM_ALGORITHMS - Static variable in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Maximum number of advertised algorithm identities.
MAXIMUM_AUTHORITY_ID_UTF8_BYTES - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Maximum strict UTF-8 byte length of an authority identifier in this view.
MAXIMUM_BYTES - Static variable in record class zeroecho.pki.api.request.SubjectAlternativeName.DnsName: Maximum encoded DNS name length.
MAXIMUM_BYTES - Static variable in record class zeroecho.pki.api.request.SubjectAlternativeName.Rfc822Name: Maximum encoded mailbox length.
MAXIMUM_BYTES - Static variable in record class zeroecho.pki.api.request.SubjectAlternativeName.UriName: Maximum encoded URI length.
MAXIMUM_BYTES - Static variable in record class zeroecho.pki.spi.confirmation.KeyPossessionProofPresentation: Maximum canonical presentation length in bytes.
MAXIMUM_BYTES - Static variable in record class zeroecho.pki.spi.confirmation.KeyPossessionProofResponse: Global maximum response length in bytes.
MAXIMUM_CHALLENGE_BYTES - Static variable in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Existing managed-proof challenge bound: command + SPKI + framing.
MAXIMUM_CHALLENGE_TIME_TO_LIVE - Static variable in record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Maximum supported challenge lifetime.
MAXIMUM_CONFIRMATION_WINDOW - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationPolicy: Largest accepted confirmation window.
MAXIMUM_CREDENTIAL_ID_UTF8_BYTES - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Maximum strict UTF-8 byte length of a credential identifier in the confirmation model.
MAXIMUM_CSR_DER_BYTES - Static variable in record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Maximum encoded request size, checked before allocating its defensive copy.
MAXIMUM_CSR_DER_BYTES - Static variable in record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Maximum CSR size, checked before creating a defensive copy.
MAXIMUM_DER_BYTES - Static variable in record class zeroecho.pki.api.request.X509EnrollmentPayload: Maximum complete original request size in bytes.
MAXIMUM_DOCUMENT_BYTES - Static variable in class zeroecho.pki.api.profile.CertificateProfileDocumentCodec: Maximum accepted encoded document size.
MAXIMUM_ENCODED_CHARACTERS - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewCursor: Maximum encoded cursor length.
MAXIMUM_IDENTIFIER_UTF8_BYTES - Static variable in record class zeroecho.pki.api.issuance.CorrelatedEndEntityIssuanceRequest: Maximum UTF-8 byte length of each authority, issuer, path or profile identifier.
MAXIMUM_IPV4_OCTET - Static variable in interface zeroecho.pki.api.request.SubjectAlternativeName: Maximum IPv4 octet value.
MAXIMUM_KEY_UTF8_BYTES - Static variable in record class zeroecho.pki.spi.store.MetadataKey: Maximum exact logical-key length in UTF-8 bytes.
MAXIMUM_LIMIT - Static variable in record class zeroecho.pki.api.audit.AuditQuery: Hard upper bound enforced on every audit search result.
MAXIMUM_NAME_BYTES - Static variable in class zeroecho.pki.impl.core.CrlScope: Maximum encoded issuer name and canonical UTF-8 name size.
MAXIMUM_NAMESPACE_UTF8_BYTES - Static variable in record class zeroecho.pki.spi.store.MetadataKey: Maximum canonical namespace length in UTF-8 bytes.
MAXIMUM_PATH_LENGTH - Static variable in record class zeroecho.pki.api.profile.CaCertificatePolicy: Maximum supported path-length constraint.
MAXIMUM_POSITION_CHARACTERS - Static variable in interface zeroecho.pki.spi.store.RevocationTransitionFeed: Maximum accepted opaque position length.
MAXIMUM_PROFILE_ID_UTF8_BYTES - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Maximum strict UTF-8 byte length of a profile identifier in this view.
MAXIMUM_RESULT_ENTRIES - Static variable in interface zeroecho.pki.application.PkiOperation: Maximum allowed limit for capped presentation operations.
MAXIMUM_RSA_MAXIMUM_MODULUS_BITS - Static variable in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteBinding: Maximum supported RSA modulus ceiling, in bits.
MAXIMUM_SERVER_AUDIENCE_UTF8_BYTES - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Maximum strict UTF-8 server-audience length in bytes.
MAXIMUM_SIGNATURE_BYTES - Static variable in record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Maximum signature representation accepted across the SPI.
MAXIMUM_SPKI_BYTES - Static variable in class zeroecho.pki.impl.core.CrlScope: Maximum canonical SPKI size, matching certificate preparation.
MAXIMUM_TIME_TO_LIVE - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Maximum permitted challenge lifetime.
maximumBatchSize() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns the value of the maximumBatchSize record component.
maximumCertificateBytes() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions.CredentialSearch: Returns the value of the maximumCertificateBytes record component.
maximumForceNanos() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns the value of the maximumForceNanos record component.
maximumGroupCommitWaitNanos() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns the value of the maximumGroupCommitWaitNanos record component.
maximumIndividualRecordBytes() - Method in record class zeroecho.pki.spi.store.MetadataStoreCapabilities: Returns the value of the maximumIndividualRecordBytes record component.
maximumOccurrences() - Method in record class zeroecho.pki.api.profile.SubjectRdnRule: Returns the value of the maximumOccurrences record component.
maximumResponseBytes() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallenge: Returns the value of the maximumResponseBytes record component.
maximumResponseBytes() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofDescriptor: Returns the value of the maximumResponseBytes record component.
maximumTotal() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns the value of the maximumTotal record component.
maximumUtf8Bytes() - Method in record class zeroecho.pki.api.profile.SubjectRdnRule: Returns the value of the maximumUtf8Bytes record component.
maximumValidity() - Method in record class zeroecho.pki.api.profile.CertificateProfile: Returns the value of the maximumValidity record component.
maximumValidity() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the maximumValidity record component.
measure(CrlEntrySource, CancellationSignal) - Method in class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter: Validates and measures a complete first pass, without reserving a number.
Measurement(long, long) - Constructor for record class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter.Measurement: Rejects negative or inconsistent empty measurements.
Memory bound - Section in class zeroecho.pki.impl.audit.InMemoryAuditSink
merge(List) - Method in class zeroecho.pki.impl.framework.x509.X509BindingCatalog: Produces a new immutable additive snapshot.
merge(List) - Method in class zeroecho.pki.impl.framework.x509.X509ComponentCatalog: Produces a new immutable additive snapshot.
messages() - Method in record class zeroecho.pki.api.policy.PolicyDecision: Returns the value of the messages record component.
meta() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns the value of the meta record component.
MetadataCommitResult - Record Class in zeroecho.pki.spi.store: Immutable immediate or resolved metadata-transaction result.
MetadataCommitResult(MetadataTransactionId, MetadataCommitResult.Outcome, OptionalLong, Optional) - Constructor for record class zeroecho.pki.spi.store.MetadataCommitResult: Validates result invariants and checked revision semantics.
MetadataCommitResult.FailureCategory - Enum Class in zeroecho.pki.spi.store: Stable non-sensitive metadata failure categories.
MetadataCommitResult.Outcome - Enum Class in zeroecho.pki.spi.store: Closed commit-outcome model.
MetadataCursor - Interface in zeroecho.pki.spi.store: A closeable, snapshot-consistent streaming metadata cursor.
MetadataKey - Record Class in zeroecho.pki.spi.store: Immutable provider-neutral identity of one metadata record.
MetadataKey(String, String) - Constructor for record class zeroecho.pki.spi.store.MetadataKey: Validates both identity components.
MetadataSnapshot - Interface in zeroecho.pki.spi.store: An immutable, store-issued view of one committed metadata revision.
MetadataSnapshot.Integrity - Record Class in zeroecho.pki.spi.store: Stable content-integrity metadata without payload or storage details.
MetadataSnapshot.KeyRange - Record Class in zeroecho.pki.spi.store: An ordered range within one semantic namespace.
MetadataSnapshot.Record - Interface in zeroecho.pki.spi.store: A repeatable record view owned by a snapshot.
MetadataStoreCapabilities - Record Class in zeroecho.pki.spi.store: Immutable adapter capability declaration.
MetadataStoreCapabilities(MetadataStoreCapabilities.WriterModel, MetadataStoreCapabilities.ContentLengthModel, MetadataStoreCapabilities.OutcomeRetention, Set, OptionalLong) - Constructor for record class zeroecho.pki.spi.store.MetadataStoreCapabilities: Validates and defensively copies capability values.
MetadataStoreCapabilities.ContentLengthModel - Enum Class in zeroecho.pki.spi.store: Accepted repeatable-content length forms.
MetadataStoreCapabilities.OptionalFeature - Enum Class in zeroecho.pki.spi.store: Optional facilities that do not weaken required store semantics.
MetadataStoreCapabilities.OutcomeRetention - Enum Class in zeroecho.pki.spi.store: Authoritative transaction-outcome retention model.
MetadataStoreCapabilities.WriterModel - Enum Class in zeroecho.pki.spi.store: Adapter writer-concurrency model.
MetadataStoreException - Exception Class in zeroecho.pki.spi.store: Checked metadata-store failure carrying a stable, non-sensitive category.
MetadataStoreException(MetadataCommitResult.FailureCategory, String) - Constructor for exception class zeroecho.pki.spi.store.MetadataStoreException: Creates a categorized failure.
MetadataStoreException(MetadataCommitResult.FailureCategory, String, Throwable) - Constructor for exception class zeroecho.pki.spi.store.MetadataStoreException: Creates a categorized failure retaining its cause.
MetadataStoreId - Record Class in zeroecho.pki.spi.store: Stable provider-neutral metadata-store identity.
MetadataStoreId(String) - Constructor for record class zeroecho.pki.spi.store.MetadataStoreId: Validates the canonical identity.
MetadataTransaction - Interface in zeroecho.pki.spi.store: A single-use, store-issued metadata transaction.
MetadataTransactionId - Record Class in zeroecho.pki.spi.store: Canonical durable transaction identity issued by one metadata store.
MetadataTransactionId(MetadataStoreId, String) - Constructor for record class zeroecho.pki.spi.store.MetadataTransactionId: Validates the canonical identity components.
Metric(DashboardLiveSource.State, OptionalLong, String) - Constructor for record class zeroecho.pki.application.DashboardLiveSource.Metric: Validates the value and disclosure invariants.
minimum() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNameRule: Returns the value of the minimum record component.
MINIMUM_CHALLENGE_TIME_TO_LIVE - Static variable in record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Minimum supported challenge lifetime.
MINIMUM_INTERVAL - Static variable in record class zeroecho.pki.api.schedule.StatusSchedule: Minimum configurable interval.
MINIMUM_RSA_MAXIMUM_MODULUS_BITS - Static variable in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteBinding: Minimum supported RSA modulus ceiling, in bits.
MINIMUM_TIME_TO_LIVE - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Minimum permitted challenge lifetime.
minimumOccurrences() - Method in record class zeroecho.pki.api.profile.SubjectRdnRule: Returns the value of the minimumOccurrences record component.
minimumTotal() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns the value of the minimumTotal record component.
ML_DSA_44_SIGNATURE_LENGTH - Static variable in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: Fixed raw signature length for ML-DSA-44 (FIPS 204).
ML_DSA_65_SIGNATURE_LENGTH - Static variable in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: Fixed raw signature length for ML-DSA-65 (FIPS 204).
ML_DSA_87_SIGNATURE_LENGTH - Static variable in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: Fixed raw signature length for ML-DSA-87 (FIPS 204).
mode() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Returns the value of the mode record component.
mode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the mode record component.
mode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the mode record component.
mode() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the immutable accepted execution policy.
multiValued() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns the value of the multiValued record component.
mutableState() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the value of the mutableState record component.
MutableState(PkiId, SignWorkflowStore.State, long, long, Optional, Optional, Optional, Optional, Optional, int, Optional, Optional, SignWorkflowStore.InitialAttemptPhase, SignWorkflowStore.Stage, Optional) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Validates lifecycle, fencing and retry metadata.
MutualTlsContext - Class in zeroecho.pki.impl.crypto.remote.http: Builds a mutually-authenticated SSLContext for the remote signing transport from a PKCS#12 client-identity keystore and a PKCS#12 trust store pinning the remote service's issuer.

N

name() - Method in record class zeroecho.pki.api.audit.Principal: Returns the value of the name record component.
name() - Method in record class zeroecho.pki.application.PkiOperation.ActivateProfile
name() - Method in record class zeroecho.pki.application.PkiOperation.CompleteCredentialConfirmationProof
name() - Method in record class zeroecho.pki.application.PkiOperation.HoldCredential
name() - Method in record class zeroecho.pki.application.PkiOperation.ImportRequest
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectAlgorithmBinding
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectAuthority: Returns the stable semantic name "ca.inspect".
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectCredential: Returns the stable semantic name "credential.inspect".
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerChainPath: Returns the stable semantic name "issuer.path.inspect".
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerGeneration: Returns the stable semantic name "issuer.generation.inspect".
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectProfile
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectPublication
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectRequest
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectRevocation
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectStatus: Returns the stable semantic name "status.inspect".
name() - Method in record class zeroecho.pki.application.PkiOperation.InspectStatusSchedule
name() - Method in record class zeroecho.pki.application.PkiOperation.IssueCredentialConfirmationChallenge
name() - Method in record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings
name() - Method in record class zeroecho.pki.application.PkiOperation.ListAuthorities: Returns the stable semantic name "ca.list".
name() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerChainPaths: Returns the stable semantic name "issuer.path.list".
name() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerGenerations
name() - Method in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations
name() - Method in record class zeroecho.pki.application.PkiOperation.ListProfiles
name() - Method in record class zeroecho.pki.application.PkiOperation.ListProfileVersions
name() - Method in record class zeroecho.pki.application.PkiOperation.ListPublications
name() - Method in record class zeroecho.pki.application.PkiOperation.ListRequests
name() - Method in record class zeroecho.pki.application.PkiOperation.ListStatus: Returns the stable semantic name "inventory.status".
name() - Method in record class zeroecho.pki.application.PkiOperation.ListStatusSchedules
name() - Method in interface zeroecho.pki.application.PkiOperation: Returns the stable semantic operation name.
name() - Method in record class zeroecho.pki.application.PkiOperation.ProcessPublication
name() - Method in record class zeroecho.pki.application.PkiOperation.QueryAuthorityMetrics: Returns the stable semantic name "dashboard.authority".
name() - Method in record class zeroecho.pki.application.PkiOperation.QueryCertificateMetrics: Returns the stable semantic name "dashboard.certificate".
name() - Method in record class zeroecho.pki.application.PkiOperation.QueryPublicationMetrics: Returns the stable semantic name "dashboard.publication".
name() - Method in record class zeroecho.pki.application.PkiOperation.QueryRevocationMetrics: Returns the stable semantic name "dashboard.revocation".
name() - Method in record class zeroecho.pki.application.PkiOperation.QueryServerMetrics: Returns the stable semantic name "dashboard.server".
name() - Method in record class zeroecho.pki.application.PkiOperation.ReadRevocationHistory
name() - Method in record class zeroecho.pki.application.PkiOperation.ReconcilePublication
name() - Method in record class zeroecho.pki.application.PkiOperation.RegisterIssuerChainPath: Returns the stable semantic name "issuer.path.register".
name() - Method in record class zeroecho.pki.application.PkiOperation.RegisterProfile
name() - Method in record class zeroecho.pki.application.PkiOperation.RegisterPublication
name() - Method in record class zeroecho.pki.application.PkiOperation.RetryPublication
name() - Method in record class zeroecho.pki.application.PkiOperation.RevokeCredential
name() - Method in record class zeroecho.pki.application.PkiOperation.RevokePendingCredentialConfirmation
name() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials
name() - Method in record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Returns the stable semantic name "issuer.path.select".
name() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule
name() - Method in record class zeroecho.pki.application.PkiOperation.SnapshotRevocations
name() - Method in record class zeroecho.pki.application.PkiOperation.TransitionAuthority: Returns the stable semantic name "ca.transition".
name() - Method in record class zeroecho.pki.application.PkiOperation.UnholdCredential
name() - Method in record class zeroecho.pki.application.PkiOperation.ValidateAlgorithmBindings
name() - Method in record class zeroecho.pki.application.PkiOperation.ValidateConfiguration
name() - Method in record class zeroecho.pki.application.PkiOperation.ValidateProfile
name() - Method in record class zeroecho.pki.application.PkiOperation.VerifyRequest
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.GenerateStatus
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueCredential
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate
name() - Method in interface zeroecho.pki.application.PkiSigningOperation: Returns the stable historical transport and approval identity.
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReissueCredential
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.RenewCredential
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReplaceCredential
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.RolloverCaCertificate
name() - Method in record class zeroecho.pki.application.PkiSigningOperation.RotateCaKey
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ActivateProfile: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.CompleteCredentialConfirmationProof: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.HoldCredential: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ImportRequest: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectAlgorithmBinding: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectAuthority: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectCredential: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectIssuerChainPath: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectIssuerGeneration: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectProfile: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectPublication: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectRequest: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectRevocation: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectStatus: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.InspectStatusSchedule: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.IssueCredentialConfirmationChallenge: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListAuthorities: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListIssuerChainPaths: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListIssuerGenerations: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListProfiles: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListProfileVersions: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListPublications: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListRequests: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListStatus: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ListStatusSchedules: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ProcessPublication: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.QueryAuthorityMetrics: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.QueryCertificateMetrics: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.QueryPublicationMetrics: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.QueryRevocationMetrics: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.QueryServerMetrics: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ReadRevocationHistory: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ReconcilePublication: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.RegisterIssuerChainPath: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.RegisterProfile: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.RegisterPublication: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.RetryPublication: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.RevokeCredential: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.RevokePendingCredentialConfirmation: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.SnapshotRevocations: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.TransitionAuthority: Stable semantic operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.UnholdCredential: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ValidateAlgorithmBindings: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ValidateConfiguration: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.ValidateProfile: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiOperation.VerifyRequest: Stable name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.GenerateStatus: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.IssueCredential: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.ReissueCredential: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.RenewCredential: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.ReplaceCredential: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.RolloverCaCertificate: Stable operation name.
NAME - Static variable in record class zeroecho.pki.application.PkiSigningOperation.RotateCaKey: Stable operation name.
NAMED_CURVE - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Kind: Named-curve OBJECT IDENTIFIER component.
namespace() - Method in record class zeroecho.pki.api.orch.SigningSubmissionId: Returns the value of the namespace record component.
namespace() - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Returns the value of the namespace record component.
namespace() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the namespace record component.
namespace() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the namespace record component.
namespace() - Method in record class zeroecho.pki.spi.store.MetadataKey: Returns the value of the namespace record component.
namespace() - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Returns the value of the namespace record component.
namespace() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the accepted provider namespace.
NAMESPACE - Static variable in record class zeroecho.pki.application.SigningExecutionEvidence: Evidence attribute vocabulary.
NESTED_SPKI_DER - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.PublicKeyEncoding: Canonical native SPKI DER nested as the BIT STRING payload.
NESTED_SPKI_DER - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.PublicKeyEncoding: Canonical native SubjectPublicKeyInfo DER nested in the BIT STRING.
newDigest(AlgorithmIdentity) - Static method in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Creates an independent JDK engine for a supported prehash digest.
newKeyRef() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Intermediate: Returns the value of the newKeyRef record component.
newKeyRef() - Method in interface zeroecho.pki.api.ca.CaKeyRotationCommand: Returns explicitly provisioned new managed key.
newKeyRef() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Root: Returns the value of the newKeyRef record component.
newKeyRef() - Method in record class zeroecho.pki.application.PkiSigningOperation.RotateCaKey: Returns the value of the newKeyRef record component.
newRandomId() - Static method in class zeroecho.pki.util.PkiIds: Generates a new random PKI identifier.
newRequest() - Method in record class zeroecho.pki.api.issuance.ReplaceCommand: Returns the value of the newRequest record component.
newSubmissionId() - Method in interface zeroecho.pki.api.SigningService: Returns a fresh identifier in this service's configured namespace.
newSubmissionId() - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService
next() - Method in interface zeroecho.pki.spi.framework.CrlEntrySource.Cursor: Advances the cursor.
next() - Method in interface zeroecho.pki.spi.store.RevocationHistory: Advances without external cancellation.
next() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot.Cursor: Advances to the next current state.
next() - Method in interface zeroecho.pki.spi.store.RevocationTransitionFeed: Advances with a non-cancelling signal.
next(CancellationSignal) - Method in interface zeroecho.pki.api.publication.PublicationCursor: Advances by at most one matching record.
next(CancellationSignal) - Method in interface zeroecho.pki.spi.store.AuditEvidenceFeed: Advances to the next entry strictly after the resumed sequence.
next(CancellationSignal) - Method in interface zeroecho.pki.spi.store.MetadataCursor: Advances the cursor by at most one record.
next(CancellationSignal) - Method in interface zeroecho.pki.spi.store.RevocationHistory: Advances to the next transition.
next(CancellationSignal) - Method in interface zeroecho.pki.spi.store.RevocationSnapshot.Cursor: Advances with cancellation.
next(CancellationSignal) - Method in interface zeroecho.pki.spi.store.RevocationTransitionFeed: Advances to the next append no later than the captured head.
NEXT_UPDATE - Static variable in record class zeroecho.pki.application.StatusGenerationEvidence: Evidence attribute vocabulary.
nextCursor() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewPage: Returns the value of the nextCursor record component.
nextCursor() - Method in record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Returns the value of the nextCursor record component.
nextCursor() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DuePage: Returns the value of the nextCursor record component.
nextCursor() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Returns the value of the nextCursor record component.
nextDue() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState: Returns the value of the nextDue record component.
nextEligibleAt() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the nextEligibleAt record component.
nextEligibleAt() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the optional earliest reconciliation retry time.
nextPosition() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Entry: Returns the value of the nextPosition record component.
nextUpdate() - Method in record class zeroecho.pki.api.status.StatusObject: Returns the value of the nextUpdate record component.
nextUpdate() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the nextUpdate record component.
nextUpdate() - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Returns the value of the nextUpdate record component.
nextUpdate() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the nextUpdate record component.
nextUpdate() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the nextUpdate record component.
NO_BINDING - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: No authoritative X.509 binding exists.
NO_CAPABILITY - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: No installed implementation supports the tuple.
NO_EXECUTOR - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: Semantic capability has no process-local executor binding.
nonce() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the optional nonce without exposing internal state.
nonce() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Returns a defensive copy of the challenge nonce.
NONCE_BYTES - Static variable in class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge: Required nonce length, in bytes.
none() - Static method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Creates an empty process-local dependency set.
none() - Static method in class zeroecho.pki.spi.crypto.SigningProviderRuntimeDependencies: Returns dependencies for providers that require no process-local capability.
none() - Static method in interface zeroecho.pki.util.async.codec.ResultCodec: Convenience: a codec that never persists any result.
None() - Constructor for record class zeroecho.pki.api.hybrid.HybridCertificateMode.None: Creates an instance of a None record class.
NONE - Enum constant in enum class zeroecho.pki.api.profile.IssuanceApprovalRequirement: Issuance proceeds without any administrative approval.
NONE - Static variable in interface zeroecho.pki.application.DashboardLiveSource: Unavailable source; legacy getters still return 0.
NORMAL - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.Mode: Ordinary durable signing with the existing reconciliation lifecycle.
normalize(AttributeSet) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509FrameworkAttributeMapper: Normalizes the supplied framework attribute set.
normalize(AttributeSet) - Method in interface zeroecho.pki.spi.framework.FrameworkAttributeMapper: Normalizes and validates universal attributes for framework consumption.
NOT_ACCEPTED - Enum constant in enum class zeroecho.pki.api.signing.SigningAcceptanceResolution: No retained acceptance exists.
NOT_ACCEPTED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResolution: No acceptance exists for the identifier.
NOT_APPLICABLE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.PublicKeyEncoding: This binding is not an SPKI binding.
NOT_APPLICABLE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.SignatureEncoding: This binding is not a signature binding.
NOT_APPLICABLE - Enum constant in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.Timeliness: No confirmation time exists yet or confirmation is not required.
NOT_APPLICABLE - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.PublicKeyEncoding: Not applicable to a signature-only rule.
NOT_APPLICABLE - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.SignatureEncoding: Not applicable to a public-key-only rule.
NOT_APPLICABLE - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: Ordinary signing has no bounded initial attempt.
NOT_COMMITTED - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.Outcome: No mutation from the transaction became committed.
NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: The requested PKI entity or operation does not exist in the authoritative state.
NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic absence of a requested authoritative object.
NOT_FOUND - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: The selected authoritative object does not exist.
NOT_PRESENT - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionReason: No proof-of-possession evidence was present (acceptable only if policy allows).
NOT_PRESENT - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionStatus: Proof-of-possession evidence is not present.
NOT_PUBLISHED - Enum constant in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: The credential is not exposed through a publication surface.
NOT_REQUIRED - Enum constant in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.State: Public disclosure requires no credential confirmation.
NOT_SUPPORTED - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionStatus: Proof-of-possession verification is not supported for the given request type or framework.
NOT_USABLE_CODE - Static variable in class zeroecho.pki.impl.core.StoreBackedEffectiveCredentialStatusResolver: Stable unusable-credential failure code.
NOT_YET_VALID - Enum constant in enum class zeroecho.pki.api.credential.EffectiveCredentialStatus: The credential validity interval has not started.
notAfter() - Method in record class zeroecho.pki.api.Validity: Returns the value of the notAfter record component.
notBefore() - Method in record class zeroecho.pki.api.Validity: Returns the value of the notBefore record component.
notes() - Method in record class zeroecho.pki.api.attr.AttributeMeta: Returns the value of the notes record component.
notes() - Method in record class zeroecho.pki.api.policy.PolicyTraceStep: Returns the value of the notes record component.
Notes - Section in package zeroecho.pki.api.credential
Null and unsupported handling - Section in class zeroecho.pki.impl.framework.x509.bc.OidAlgorithmMapper

O

OBJECT_STORE - Enum constant in enum class zeroecho.pki.api.publication.PublicationTargetType: Publish to an object store (S3-like).
objectId() - Method in record class zeroecho.pki.api.audit.AccessContext: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns the value of the objectId record component.
objectId() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns the value of the objectId record component.
objectId() - Method in class zeroecho.pki.application.PkiRepositoryContent: Returns the exact repository-object identity.
objectId() - Method in record class zeroecho.pki.spi.store.AuditEvidenceFeed.Entry: Returns the value of the objectId record component.
ObjectValue(Map) - Constructor for record class zeroecho.pki.application.PkiOperationValue.ObjectValue: Validates names and snapshots insertion order.
OBSERVATION_CONSUMED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: The observation budget was consumed before invoking the provider.
OBSERVATION_OWED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: Dispatch returned pending and the sole observation is ready to claim.
ocsp() - Method in interface zeroecho.pki.application.PkiSession: Returns OCSP response generation over the configured signing reactor.
OCSP - Enum constant in enum class zeroecho.pki.api.status.StatusObjectType: OCSP response or responder data (representation is implementation-defined).
OCSP_CERT_STATUS - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for the resolved OCSP certificate status snapshot.
OCSP_REQUEST_SIGNATURE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Role: Signed OCSP request signature.
OCSP_RESPONDER_KEY - Enum constant in enum class zeroecho.pki.api.signing.ManagedKeyProofPurpose: Possession of a managed OCSP responder key.
OCSP_REVOCATION_REASON - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for the revocation reason of a revoked OCSP target.
OCSP_REVOCATION_TIME - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for the revocation instant of a revoked OCSP target.
OCSP_TARGET_SERIAL - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for the certificate serial a persistent OCSP status object covers.
OcspResponder(PkiId, PkiId, KeyRef) - Constructor for record class zeroecho.pki.api.signing.ManagedKeyProofRequest.OcspResponder: Validates the bounded coordinates without resolving them.
OcspResponseService - Interface in zeroecho.pki.application: Transport-neutral strict OCSP response generation through session-owned signing.
OcspResponseService.CertId - Record Class in zeroecho.pki.application: One strictly parsed CertID.
OcspResponseService.CertIdHash - Enum Class in zeroecho.pki.application: Supported RFC CertID digest identities.
OcspResponseService.Command - Record Class in zeroecho.pki.application: Exact already-authorized responder generation command.
OcspResponseService.ResponderId - Enum Class in zeroecho.pki.application: Exact responder identifier representation.
OcspResponseService.Response - Record Class in zeroecho.pki.application: Signed canonical response and stable revocation provenance.
OcspResponseService.SigningPendingException - Exception Class in zeroecho.pki.application: Content-free result indicating that the bounded initial signing attempt returned pending.
of(byte[], byte[]) - Static method in class zeroecho.pki.impl.core.CrlScope: Derives an identity from a canonical DER X.500 Name and canonical SPKI.
of(Map) - Static method in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet: Creates an immutable attribute set from the supplied map.
of(ProofOfPossessionReason) - Static method in record class zeroecho.pki.api.request.ProofOfPossessionResult: Creates a result with no diagnostic details.
of(ProofOfPossessionReason, String) - Static method in record class zeroecho.pki.api.request.ProofOfPossessionResult: Creates a result with non-sensitive diagnostic details.
oid() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the oid record component.
oid() - Method in record class zeroecho.pki.api.profile.ExtendedKeyUsageId: Returns the value of the oid record component.
oid() - Method in enum class zeroecho.pki.api.profile.SubjectRdnType: Returns the exact ASN.1 object identifier.
oid() - Method in class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier: Returns the OID.
oid() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRule: Returns the OID domain owned by this rule.
oid() - Method in record class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Component: Returns the value of the oid record component.
oid(X509ComponentCatalog.Kind, AlgorithmIdentity) - Method in class zeroecho.pki.impl.framework.x509.X509ComponentCatalog: Resolves the OID of an exact component identity.
OID - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: Object identifier string.
OID_ALT_SIGNATURE_ALGORITHM - Static variable in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: OID for AltSignatureAlgorithm (id-ce-altSignatureAlgorithm).
OID_ALT_SIGNATURE_VALUE - Static variable in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: OID for AltSignatureValue (id-ce-altSignatureValue).
OID_EC_PUBLIC_KEY - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: EC public-key OID.
OID_ECDSA_SHA256 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: ECDSA SHA-256 signature OID.
OID_ECDSA_SHA384 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: ECDSA SHA-384 signature OID.
OID_ECDSA_SHA512 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: ECDSA SHA-512 signature OID.
OID_ED25519 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: Ed25519 OID.
OID_ED448 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: Ed448 OID.
OID_ML_DSA_44 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: ML-DSA-44 OID (FIPS 204).
OID_ML_DSA_65 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: ML-DSA-65 OID (FIPS 204).
OID_ML_DSA_87 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: ML-DSA-87 OID (FIPS 204).
OID_P256 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: P-256 named-curve OID.
OID_P384 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: P-384 named-curve OID.
OID_P521 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: P-521 named-curve OID.
OID_RSA_PSS - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: RSA-PSS signature OID.
OID_RSA_PUBLIC_KEY - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: RSA public-key OID.
OID_RSA_SHA256 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: RSA PKCS#1 SHA-256 signature OID.
OID_RSA_SHA384 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: RSA PKCS#1 SHA-384 signature OID.
OID_RSA_SHA512 - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: RSA PKCS#1 SHA-512 signature OID.
OID_SLH_DSA_SHA2_128F - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHA2-128f OID (FIPS 205).
OID_SLH_DSA_SHA2_128S - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHA2-128s OID (FIPS 205).
OID_SLH_DSA_SHA2_192F - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHA2-192f OID (FIPS 205).
OID_SLH_DSA_SHA2_192S - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHA2-192s OID (FIPS 205).
OID_SLH_DSA_SHA2_256F - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHA2-256f OID (FIPS 205).
OID_SLH_DSA_SHA2_256S - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHA2-256s OID (FIPS 205).
OID_SLH_DSA_SHAKE_128F - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHAKE-128f OID (FIPS 205).
OID_SLH_DSA_SHAKE_128S - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHAKE-128s OID (FIPS 205).
OID_SLH_DSA_SHAKE_192F - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHAKE-192f OID (FIPS 205).
OID_SLH_DSA_SHAKE_192S - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHAKE-192s OID (FIPS 205).
OID_SLH_DSA_SHAKE_256F - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHAKE-256f OID (FIPS 205).
OID_SLH_DSA_SHAKE_256S - Static variable in class zeroecho.pki.impl.framework.x509.StandardX509Bindings: SLH-DSA-SHAKE-256s OID (FIPS 205).
OID_SUBJECT_ALT_PUBLIC_KEY_INFO - Static variable in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: OID for SubjectAltPublicKeyInfo (id-ce-subjectAltPublicKeyInfo).
OidAlgorithmMapper - Class in zeroecho.pki.impl.framework.x509.bc: Internal mapper from X.509 and PKCS#10 signature algorithm identifiers to ZeroEcho canonical signature algorithm ids.
ON_WRITE - Enum constant in enum class zeroecho.pki.impl.fs.FsHistoryPolicy.CleanupStrategy: Cleanup happens during write operations only.
onEvent(AsyncEvent) - Method in interface zeroecho.pki.util.async.AsyncHandler: Receives an event notification.
onStatus(RemoteSigningTransport.RemoteSigningStatus) - Method in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningCallback: Receives one remote status change.
onWrite(Optional) - Static method in class zeroecho.pki.impl.fs.FsHistoryPolicy: Creates a history policy with FsHistoryPolicy.CleanupStrategy.ON_WRITE.
OPAQUE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.SignatureEncoding: Algorithm-defined opaque signature bytes.
OPAQUE - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.SignatureEncoding: Algorithm-defined opaque signature bytes.
open(URI, SSLContext, Duration, Duration) - Static method in class zeroecho.pki.impl.crypto.remote.http.HttpsRemoteSigningTransport: Opens a transport to a remote signing service and captures its advertised capabilities during the initial handshake.
open(Path) - Static method in class zeroecho.pki.impl.fs.ct.FsCtJournalStoreFactory: Opens or creates a CT journal store rooted at journalDir.
open(Path) - Static method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Opens an existing append-only store without an adapter-specific record limit.
open(Path, OptionalLong) - Static method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Opens an existing append-only store.
open(Path, UnlockMaterial) - Static method in class zeroecho.pki.impl.secrets.PublisherSecretsStore: Opens and decrypts the secrets store.
open(PkiSessionConfiguration) - Static method in interface zeroecho.pki.application.PkiSession: Opens a production session.
open(PkiSessionConfiguration, PkiSessionRuntimeDependencies) - Static method in interface zeroecho.pki.application.PkiSession: Opens a production session with explicit process-local security capabilities.
open(PkiSessionConfiguration, PkiSessionRuntimeDependencies, Clock) - Static method in interface zeroecho.pki.application.PkiSession: Opens a production session with explicit process-local capabilities and a lifecycle clock shared by every time-dependent backend service.
openAsyncBus() - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens an async operation bus using AsyncBusProvider discovered via ServiceLoader.
openAudit() - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens an AuditSink using AuditSinkProvider discovered via ServiceLoader.
openAudit(ProviderConfig) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens an audit sink from an explicit, strictly validated configuration.
openConfiguredSigningComposition(ProviderConfig, SigningProviderRuntimeDependencies) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens a provider and captures only the selected allocating factory's execution contribution.
openConfiguredSigningProvider(ProviderConfig, SigningProviderRuntimeDependencies) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens one explicitly configured signing provider with process-local key access supplied outside persistent configuration.
openContent(DurableContentReference) - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
openContent(DurableContentReference) - Method in interface zeroecho.pki.spi.store.StagedContentStore: Resolves a completed reference to immutable repeatable content.
openCredential(PkiId) - Method in interface zeroecho.pki.application.PkiRepository: Opens validated immutable certificate content.
openCredentialFramework() - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens a CredentialFramework using CredentialFrameworkProvider discovered via ServiceLoader.
openCursor() - Method in interface zeroecho.pki.spi.framework.CrlEntrySource: Opens a new cursor over the same logical snapshot.
openCursor() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot: Opens a new pass over the same logical snapshot.
openIssuanceEvidenceFeed(long) - Method in interface zeroecho.pki.application.PkiSession: Opens the append-ordered issuance success-evidence feed strictly after afterSequenceExclusive.
openIssuanceEvidenceFeed(long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
openIssuanceEvidenceFeed(long) - Method in interface zeroecho.pki.spi.store.PkiStore: Opens the append-ordered issuance success-evidence feed strictly after afterSequenceExclusive.
openLocal(LocalPkiSessionConfiguration, PkiSessionRuntimeDependencies) - Static method in interface zeroecho.pki.application.PkiSession: Opens a standalone caller-thread session with a declared local root operator.
openLocal(LocalPkiSessionConfiguration, PkiSessionRuntimeDependencies, Clock) - Static method in interface zeroecho.pki.application.PkiSession: Opens a standalone session with one authoritative lifecycle clock.
openPublicationEvidenceFeed(long) - Method in interface zeroecho.pki.application.PkiSession: Opens the append-ordered publication terminal-outcome success-evidence feed strictly after afterSequenceExclusive.
openPublicationEvidenceFeed(long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
openPublicationEvidenceFeed(long) - Method in interface zeroecho.pki.spi.store.PkiStore: Opens the append-ordered publication terminal-outcome success-evidence feed strictly after afterSequenceExclusive.
openPublicationRecords() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
openPublicationRecords() - Method in interface zeroecho.pki.spi.store.PkiStore: Opens a stable ordered cursor over the complete publication namespace.
openPublications(PublicationQuery) - Method in interface zeroecho.pki.api.PublicationService: Opens a stable lazy query over publication operations.
openPublications(PublicationQuery) - Method in class zeroecho.pki.impl.core.DefaultPublicationService
openPublisher(ProviderConfig) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens one explicitly configured publication destination.
openRevocationHistory(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
openRevocationHistory(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Opens a bounded-memory cursor over one credential's authoritative history.
openRevocationSnapshot() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
openRevocationSnapshot() - Method in interface zeroecho.pki.spi.store.PkiStore: Opens a stable restartable streaming snapshot of authoritative revocations.
openRevocationTransitionFeed(Optional) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
openRevocationTransitionFeed(Optional) - Method in interface zeroecho.pki.spi.store.PkiStore: Opens an append-ordered feed captured at the current authoritative log head.
openRevocationView() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
openRevocationView() - Method in interface zeroecho.pki.spi.store.PkiStore: Opens a stable direct-lookup current-state view for finite protocol work.
openSigningEvidenceFeed(long) - Method in interface zeroecho.pki.application.PkiSession: Opens the append-ordered best-effort signing/proof evidence feed.
openSigningEvidenceFeed(long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
openSigningEvidenceFeed(long) - Method in interface zeroecho.pki.spi.store.PkiStore: Opens the append-ordered best-effort signing/proof evidence feed.
openSigningProvider(SigningProviderRuntimeDependencies) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens a SigningProvider using SigningProviderFactory discovered via ServiceLoader.
openStagedObjects() - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Returns the value of the openStagedObjects record component.
openStatusEvidenceFeed(long) - Method in interface zeroecho.pki.application.PkiSession: Opens the append-ordered status-generation success-evidence feed strictly after afterSequenceExclusive.
openStatusEvidenceFeed(long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
openStatusEvidenceFeed(long) - Method in interface zeroecho.pki.spi.store.PkiStore: Opens the append-ordered status-generation success-evidence feed strictly after afterSequenceExclusive.
openStatusObject(PkiId) - Method in interface zeroecho.pki.application.PkiRepository: Opens validated immutable status-object content.
openStore() - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens a PkiStore using PkiStoreProvider discovered via ServiceLoader.
openStore(ProviderConfig) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens a store from an explicit, strictly validated configuration.
openStore(ProviderConfig, PkiStoreRuntimeDependencies) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens an explicitly configured store with authoritative process-local dependencies.
openStore(PkiStoreRuntimeDependencies) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Opens the system-property configured store with explicit runtime dependencies.
openStream() - Method in interface zeroecho.pki.api.backup.BackupSource: Opens an independent stream at offset zero.
openStream() - Method in class zeroecho.pki.application.PkiRepositoryContent: Opens a new integrity-checking sequential content stream.
openTransport(ProviderConfig) - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory: Opens the concrete transport for the configured remote endpoint.
operation() - Method in record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Existing: Returns the value of the operation record component.
operation() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns the value of the operation record component.
operation() - Method in record class zeroecho.pki.impl.core.continuation.DomainCommandEncoding.Decoded: Returns the value of the operation record component.
operation() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the authorized operation.
operation(EncodedObject) - Static method in class zeroecho.pki.impl.core.continuation.DomainCommandEncoding: Returns the strict operation discriminator from a persisted command.
OPERATION - Enum constant in enum class zeroecho.pki.api.content.DurableContentReference.Lifecycle: Content retained while a durable operation is pending.
OPERATION - Static variable in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Full-CRL-only schema discriminator.
OPERATION - Static variable in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Single discriminator for both managed key proof purposes.
OPERATION_COMMITMENT - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
OPERATION_COMMITMENT - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
OPERATION_INCOMPLETE - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionReason: The verification operation did not reach a terminal outcome.
Operational model - Section in class zeroecho.pki.util.async.impl.DurableAsyncBus
Operational model - Section in package zeroecho.pki.util.async.impl
operationCommitment() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the operationCommitment record component.
operationCommitment() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the operationCommitment record component.
operationId() - Method in class zeroecho.pki.api.signing.SigningAcceptanceReceipt: Returns the durable operation identity.
operationId() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Pending: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningStatus: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CandidateBinding: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DueCandidate: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the operationId record component.
operationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the canonical accepted operation identity.
operationName() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Failed: Returns the value of the operationName record component.
operationName() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Pending: Returns the value of the operationName record component.
operationName() - Method in record class zeroecho.pki.application.PkiOperationResult: Returns the value of the operationName record component.
OperationObservation(PkiId, SigningProvider.ObservationState, Instant, SigningProvider.DetailCode, Optional) - Constructor for record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Validates and snapshots one bounded observation.
operations() - Method in interface zeroecho.pki.application.PkiSession: Returns the typed operation executor.
operatorId() - Method in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Returns the value of the operatorId record component.
operatorJustification() - Method in record class zeroecho.pki.application.PkiOperation.HoldCredential: Returns the value of the operatorJustification record component.
operatorJustification() - Method in record class zeroecho.pki.application.PkiOperation.RevokeCredential: Returns the value of the operatorJustification record component.
operatorJustification() - Method in record class zeroecho.pki.application.PkiOperation.RevokePendingCredentialConfirmation: Returns the value of the operatorJustification record component.
operatorJustification() - Method in record class zeroecho.pki.application.PkiOperation.UnholdCredential: Returns the value of the operatorJustification record component.
opId() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns the value of the opId record component.
opId() - Method in record class zeroecho.pki.util.async.AsyncOperationSnapshot: Returns the value of the opId record component.
opIdType() - Static method in class zeroecho.pki.impl.async.PkiAsyncTypes: Returns the operation id type.
Optional configuration keys - Section in class zeroecho.pki.impl.publish.HttpsPublisherProvider
optionalFeatures() - Method in record class zeroecho.pki.spi.store.MetadataStoreCapabilities: Returns the value of the optionalFeatures record component.
OrchestrationDurabilityPolicy - Enum Class in zeroecho.pki.api.orch: Durability policy for workflow continuation data managed by orchestrators.
orderedCredentialIds() - Method in record class zeroecho.pki.api.ca.IssuerChainPath: Returns the value of the orderedCredentialIds record component.
ordinal() - Method in interface zeroecho.pki.spi.framework.CrlEntrySource.Cursor: Returns the current zero-based ordinal.
ordinal() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot.Cursor: Returns the zero-based current ordinal.
ORDINARY_GRANT - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.AuthorizationPath: Ordinary administrative grant.
ORDINARY_GRANT - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.AuthorizationPath: Ordinary administrative grant.
ORGANIZATION_NAME - Enum constant in enum class zeroecho.pki.api.profile.SubjectRdnType: X.520 organization name.
ORGANIZATIONAL_UNIT_NAME - Enum constant in enum class zeroecho.pki.api.profile.SubjectRdnType: X.520 organizational unit name.
origin() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the origin record component.
origin() - Method in record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Returns the value of the origin record component.
originalRequest() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Returns the value of the originalRequest record component.
outcome() - Method in record class zeroecho.pki.api.policy.PolicyTraceStep: Returns the value of the outcome record component.
outcome() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the outcome record component.
outcome() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns the value of the outcome record component.
outcome() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the outcome record component.
outcome() - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Returns the value of the outcome record component.
outcome() - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Returns the value of the outcome record component.
outcome() - Method in record class zeroecho.pki.spi.store.MetadataCommitResult: Returns the value of the outcome record component.
OUTCOME - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
OUTCOME - Static variable in record class zeroecho.pki.application.PublicationExecutionEvidence: Evidence attribute vocabulary.
OUTCOME - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
OUTCOME - Static variable in record class zeroecho.pki.application.SigningExecutionEvidence: Evidence attribute vocabulary.
OUTCOME - Static variable in record class zeroecho.pki.application.StatusGenerationEvidence: Evidence attribute vocabulary.
OUTCOME_UNKNOWN - Enum constant in enum class zeroecho.pki.api.publication.PublicationStatus: The external effect is unknown and requires explicit reconciliation.
outcomeRetention() - Method in record class zeroecho.pki.spi.store.MetadataStoreCapabilities: Returns the value of the outcomeRetention record component.
Outcome semantics - Section in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport
outer() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the outer record component.
outer() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the outer record component.
outerAlgorithmLength() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the outerAlgorithmLength record component.
outerAlgorithmOffset() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the outerAlgorithmOffset record component.
OuterCommand(DomainContinuationStore.Kind, String, EncodedObject, String) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.OuterCommand: Validates and snapshots the bounded outer command.
outputStream() - Method in interface zeroecho.pki.api.backup.BackupSink: Returns the same bounded stream on each call.
outputStream() - Method in interface zeroecho.pki.spi.store.ContentSink: Returns the sequential output stream owned by this sink.
OVERLOADED - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: The system temporarily lacks admission or processing capacity for the request.
OVERLOADED - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic temporary admission or processing-capacity exhaustion.
OVERLOADED - Enum constant in enum class zeroecho.pki.api.SigningExecutionException.Classification: The configured admission population is fully reserved.
OVERLOADED - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: The bounded signing execution population is fully reserved.
overrides() - Method in record class zeroecho.pki.api.issuance.ReissueCommand: Returns the value of the overrides record component.
overrides() - Method in record class zeroecho.pki.api.issuance.RenewCommand: Returns the value of the overrides record component.
overrides() - Method in record class zeroecho.pki.api.issuance.ReplaceCommand: Returns the value of the overrides record component.
owner() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns the value of the owner record component.
owner() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the trusted principal retained at acceptance.
owner() - Method in record class zeroecho.pki.util.async.AsyncOperationSnapshot: Returns the value of the owner record component.
OWNER_ID - Static variable in record class zeroecho.pki.application.SigningExecutionEvidence: Evidence attribute vocabulary.
OWNER_ONLY - Enum constant in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: Retrieval is limited to an owner or specifically authorized administrator.
OWNER_TYPE - Static variable in record class zeroecho.pki.application.SigningExecutionEvidence: Evidence attribute vocabulary.
ownerId() - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Returns the value of the ownerId record component.
ownerType() - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Returns the value of the ownerType record component.
ownerType() - Static method in class zeroecho.pki.impl.async.PkiAsyncTypes: Returns the owner type.

P

Package structure - Section in package zeroecho.pki.util
Page(List, Optional, int, int, boolean) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Deprecated.
implementations should provide explicit ordered candidate details so reconciliation can resume precisely after failures
Page(List, Optional, int, int, boolean, List) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Creates a page with explicit candidate detail and no cycle watermark.
Page(List, Optional, int, int, boolean, List, Optional) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Validates one immutable page.
PageCandidate(String, Optional) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.PageCandidate: Validates one immutable scan result.
pageDueSignWorkflows(Instant, Optional, Optional, int, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
pageDueSignWorkflows(Instant, Optional, Optional, int, CancellationSignal) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Returns an identity-ordered page of lightweight identifiers eligible for reconciliation at cutoffInclusive.
pagePendingCredentialConfirmationReviews(PkiId, Optional, Instant, Optional, int) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
pagePendingCredentialConfirmationReviews(PkiId, Optional, Instant, Optional, int) - Method in interface zeroecho.pki.spi.store.PkiStore: Returns one snapshot-consistent bounded keyset page of pending reviews due at or before the exact cutoff.
pagePendingReviews(PkiId, Optional, Instant, Optional, int) - Method in interface zeroecho.pki.api.confirmation.CredentialConfirmationService: Returns one bounded snapshot-consistent page of reduced pending reviews.
pagePendingReviews(PkiId, Optional, Instant, Optional, int) - Method in class zeroecho.pki.impl.core.DefaultCredentialConfirmationService
pageSignWorkflows(Optional, int, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
pageSignWorkflows(Optional, int, CancellationSignal) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Returns at most maximumRecords records after an advisory exclusive cursor, ordered by canonical submission identifier.
pageSignWorkflows(Optional, Optional, int, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
pageSignWorkflows(Optional, Optional, int, CancellationSignal) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Returns a page capped at an inclusive stable cycle high-watermark.
pageSize() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningCoordinatorLimits: Returns the value of the pageSize record component.
parameterForm() - Method in class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier: Returns the exact parameter form.
parameterRule() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the parameterRule record component.
parameters() - Method in class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier: Returns independently owned parameter DER.
parentId() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.CaContext: Returns the value of the parentId record component.
parentIssuerId() - Method in record class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.FrozenPublication: Returns the value of the parentIssuerId record component.
parentPathCommitment() - Method in record class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.FrozenPublication: Returns the value of the parentPathCommitment record component.
parentPathId() - Method in record class zeroecho.pki.application.PkiOperation.RegisterIssuerChainPath: Returns the value of the parentPathId record component.
parentPathId() - Method in record class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.FrozenPublication: Returns the value of the parentPathId record component.
parse(byte[]) - Static method in class zeroecho.pki.api.profile.CertificateProfileDocumentCodec: Parses an encoded certificate-profile document.
parse(InputStream) - Static method in class zeroecho.pki.api.profile.CertificateProfileDocumentCodec: Reads and parses an encoded certificate-profile document.
parse(String) - Static method in record class zeroecho.pki.spi.store.MetadataKey: Parses one complete versioned length-framed identity.
parse(String) - Static method in record class zeroecho.pki.spi.store.MetadataTransactionId: Parses one complete current canonical representation.
parse(String) - Static method in class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommitment: Restores a canonical current-version commitment.
parse(PkiId) - Static method in record class zeroecho.pki.api.orch.SigningSubmissionId: Parses and validates the version, namespace, timestamp, and random length.
parse(PkiId, String) - Static method in class zeroecho.pki.api.signing.SigningAcceptanceReceipt: Restores a receipt from its exact operation and canonical commitment.
parse(CertificationRequest) - Method in interface zeroecho.pki.api.CertificationRequestService: Parses and normalizes a certification request.
parse(CertificationRequest) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Parses the supplied certification request using the active credential framework.
parse(CertificationRequest) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CertificationRequestParser: Parses a PKCS#10 certification request into the normalized PKI request representation.
parse(CertificationRequest) - Method in interface zeroecho.pki.spi.framework.CertificationRequestParser: Parses and normalizes a certification request.
ParsedCertificationRequest - Record Class in zeroecho.pki.api.request: Normalized representation of a certification request.
ParsedCertificationRequest(PkiId, FormatId, SubjectRef, EncodedObject, Optional, Optional, List, List, boolean, AttributeSet) - Constructor for record class zeroecho.pki.api.request.ParsedCertificationRequest: Creates a parsed certification request.
ParsedCertificationRequest(PkiId, FormatId, SubjectRef, EncodedObject, Optional, Optional, AttributeSet) - Constructor for record class zeroecho.pki.api.request.ParsedCertificationRequest: Creates a diagnostic request without typed X.509 identity semantics.
parseSanFilter(String) - Static method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Parses an exact typed SAN filter using the existing canonical SAN grammar.
parseX509(X509EnrollmentPayload) - Method in interface zeroecho.pki.api.CertificationRequestService: Parses an explicitly typed X.509 PKCS#10 or CRMF enrollment payload.
parseX509(X509EnrollmentPayload) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Parses an explicitly typed X.509 PKCS#10 or CRMF enrollment payload.
parseX509(X509EnrollmentPayload) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CertificationRequestParser: Parses an explicitly typed original X.509 enrollment request.
parseX509(X509EnrollmentPayload) - Method in interface zeroecho.pki.spi.framework.CertificationRequestParser: Parses an explicitly typed X.509 enrollment request when supported by this framework.
pathBytes() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns the value of the pathBytes record component.
pathCommitment() - Method in record class zeroecho.pki.api.ca.IssuerChainPath: Returns the value of the pathCommitment record component.
pathId() - Method in record class zeroecho.pki.api.ca.IssuerChainPath: Returns the value of the pathId record component.
pathId() - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerChainPath: Returns the value of the pathId record component.
pathId() - Method in record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Returns the value of the pathId record component.
pathLengthConstraint() - Method in record class zeroecho.pki.api.profile.CaCertificatePolicy: Returns the value of the pathLengthConstraint record component.
payload() - Method in record class zeroecho.pki.api.backup.BackupArtifact: Returns the value of the payload record component.
payload() - Method in record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Returns the value of the payload record component.
payload() - Method in record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Returns the value of the payload record component.
payload() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns the value of the payload record component.
payload() - Method in record class zeroecho.pki.api.transfer.ExportArtifact: Returns the value of the payload record component.
payloadEncoding() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns the value of the payloadEncoding record component.
PEM - Enum constant in enum class zeroecho.pki.api.Encoding: PEM armored textual representation.
PEM_BUNDLE - Enum constant in enum class zeroecho.pki.api.transfer.ExportFormat: Export as PEM bundle where applicable (e.g., certificate + chain).
Pending(String, PkiId) - Constructor for record class zeroecho.pki.application.PkiOperationOutcome.Pending: Validates the stable operation and durable private identifier.
PENDING - Enum constant in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.State: Non-public disclosure awaits credential confirmation.
PENDING - Enum constant in enum class zeroecho.pki.api.publication.PublicationStatus: The operation is registered and eligible for explicit processing.
PENDING - Enum constant in enum class zeroecho.pki.api.signing.SigningOperationState: Accepted or provider-pending work.
PENDING - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Operation remains pending.
PENDING - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.ObservationState: Provider knows the operation and it remains pending.
PERMANENTLY_REVOKED - Enum constant in enum class zeroecho.pki.api.credential.EffectiveCredentialStatus: The credential is permanently revoked.
PERMANENTLY_REVOKED - Enum constant in enum class zeroecho.pki.api.revocation.RevocationState: Credential is permanently revoked.
permanentReason() - Method in record class zeroecho.pki.api.revocation.RevocationTransition: Returns the value of the permanentReason record component.
permits(AlgorithmSuite, AlgorithmExecutionCapability.Direction) - Method in interface zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Policy: Tests whether configured policy permits the exact operation.
PERSISTED - Enum constant in enum class zeroecho.pki.api.content.DurableContentReference.Lifecycle: Content owned by an immutable persisted PKI object.
Persistence - Section in package zeroecho.pki.impl.audit
Persistence considerations - Section in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet
persistentCode() - Method in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: Returns the stable format code, independent of enum order.
persistentCode() - Method in enum class zeroecho.pki.spi.store.SignWorkflowStore.Mode: Returns the stable format code, independent of enum order.
persistentCode() - Method in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: Returns the stable current-format stage code.
persistentCode() - Method in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Returns the stable filesystem persistence code.
persistsResults() - Method in interface zeroecho.pki.util.async.codec.ResultCodec: Indicates whether this codec persists results in the bus log.
phase() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns the value of the phase record component.
PKCS10 - Enum constant in enum class zeroecho.pki.api.request.X509EnrollmentPayload.Kind: PKCS#10 CertificationRequest.
Pkcs11SigningProvider - Class in zeroecho.pki.impl.crypto.pkcs11: PKCS#11 / HSM signing provider.
Pkcs11SigningProviderFactory - Class in zeroecho.pki.impl.crypto.pkcs11: ServiceLoader factory for the PKCS#11 / HSM signing provider.
Pkcs11SigningProviderFactory() - Constructor for class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory: Creates a provider factory without opening an HSM session.
PKI_ID - Static variable in class zeroecho.pki.impl.async.PkiCodecs: Codec for PkiId.
PKI_SIGNATURE_DEFAULT_V1 - Static variable in class zeroecho.pki.impl.framework.x509.X509BuiltInDefaults: Historical and current version-one certificate, CRL, and CA-proof signing default.
PkiApplication - Class in zeroecho.pki: Minimal bootstrap entry point for the pki module.
PkiAsyncTypes - Class in zeroecho.pki.impl.async: PKI-specific async bus type aliases.
PkiAsyncTypes.EndpointId - Class in zeroecho.pki.impl.async: Endpoint identifier type for PKI asynchronous operations.
PkiAsyncTypes.OpId - Class in zeroecho.pki.impl.async: Operation identifier type for PKI asynchronous operations.
PkiAsyncTypes.Owner - Class in zeroecho.pki.impl.async: Owner type for PKI asynchronous operations.
PkiAsyncTypes.Result - Class in zeroecho.pki.impl.async: Result type for PKI asynchronous operations.
PkiBootstrap - Class in zeroecho.pki.spi.bootstrap: PKI bootstrap utilities for ServiceLoader-based components.
PkiBootstrap.SigningComposition - Record Class in zeroecho.pki.spi.bootstrap: Exact process-local provider allocation and selected factory contribution.
PkiCodecs - Class in zeroecho.pki.impl.async: PKI-specific codecs used to instantiate the generic async bus.
PkiConfigurationChoicesSource - Interface in zeroecho.pki.application: Read-only runtime configuration metadata; implementations expose no provider options or key material.
PkiConfigurationChoicesSource.Choices - Record Class in zeroecho.pki.application: Immutable safe configuration metadata and a bounded key page.
PkiException - Exception Class in zeroecho.pki.api: Base runtime exception for PKI domain failures.
PkiException(String) - Constructor for exception class zeroecho.pki.api.PkiException: Creates a PKI exception with a message.
PkiException(String, Throwable) - Constructor for exception class zeroecho.pki.api.PkiException: Creates a PKI exception with a message and cause.
PkiException(String, PkiFailureReason) - Constructor for exception class zeroecho.pki.api.PkiException: Creates a PKI exception carrying a typed failure reason.
PkiException(String, PkiFailureReason, Throwable) - Constructor for exception class zeroecho.pki.api.PkiException: Creates a PKI exception carrying a typed failure reason and cause.
PkiFailure - Record Class in zeroecho.pki.api: Immutable, non-sensitive description of a PKI failure.
PkiFailure(PkiFailureClassification, PkiFailureCode) - Constructor for record class zeroecho.pki.api.PkiFailure: Creates a validated failure description.
PkiFailureClassification - Enum Class in zeroecho.pki.api: Stable, protocol-independent classification of a PKI failure.
PkiFailureCode - Enum Class in zeroecho.pki.api: Closed set of stable, non-sensitive PKI failure codes.
PkiFailureException - Exception Class in zeroecho.pki.api: PKI exception carrying a stable, non-sensitive failure description.
PkiFailureException(PkiFailure) - Constructor for exception class zeroecho.pki.api.PkiFailureException: Creates an exception for a validated PKI failure.
PkiFailureException(PkiFailure, Throwable) - Constructor for exception class zeroecho.pki.api.PkiFailureException: Creates an exception for a validated PKI failure with an internal cause.
PkiFailureReason - Enum Class in zeroecho.pki.api: Closed set of stable, typed machine reason codes for internal PKI operation failures.
PkiId - Record Class in zeroecho.pki.api: Opaque identifier for PKI-managed entities.
PkiId(String) - Constructor for record class zeroecho.pki.api.PkiId: Creates an opaque PKI identifier.
PkiIds - Class in zeroecho.pki.util: Utility methods for generating and validating PkiId values.
PkiOperation - Interface in zeroecho.pki.application: Closed set of synchronous non-signing PKI operations.
PkiOperation.ActivateProfile - Record Class in zeroecho.pki.application: Activates one imported profile version.
PkiOperation.CompleteCredentialConfirmationProof - Record Class in zeroecho.pki.application: Completes one credential confirmation proof.
PkiOperation.HoldCredential - Record Class in zeroecho.pki.application: Places one committed credential on temporary hold using the authoritative clock.
PkiOperation.ImportRequest - Record Class in zeroecho.pki.application: Imports one certification request.
PkiOperation.InspectAlgorithmBinding - Record Class in zeroecho.pki.application: Inspects one active X.509 algorithm binding.
PkiOperation.InspectAuthority - Record Class in zeroecho.pki.application: Inspects the metadata of one stored authority through an authoritative point lookup.
PkiOperation.InspectCredential - Record Class in zeroecho.pki.application: Inspects the metadata of one stored credential through an authoritative point lookup.
PkiOperation.InspectIssuerChainPath - Record Class in zeroecho.pki.application: Inspects the metadata of one stored issuer chain path through an authoritative point lookup.
PkiOperation.InspectIssuerGeneration - Record Class in zeroecho.pki.application: Inspects the metadata of one stored issuer generation through an authoritative point lookup.
PkiOperation.InspectProfile - Record Class in zeroecho.pki.application: Inspects one exact profile version.
PkiOperation.InspectPublication - Record Class in zeroecho.pki.application: Inspects one publication operation.
PkiOperation.InspectRequest - Record Class in zeroecho.pki.application: Inspects one stored certification request.
PkiOperation.InspectRevocation - Record Class in zeroecho.pki.application: Inspects the current revocation state.
PkiOperation.InspectStatus - Record Class in zeroecho.pki.application: Inspects the metadata of one stored status object through an authoritative point lookup.
PkiOperation.InspectStatusSchedule - Record Class in zeroecho.pki.application: Inspects the generation schedule for one CA status family.
PkiOperation.IssueCredentialConfirmationChallenge - Record Class in zeroecho.pki.application: Issues or replays the proof challenge for one pending confirmation.
PkiOperation.ListAlgorithmBindings - Record Class in zeroecho.pki.application: Lists active X.509 algorithm bindings.
PkiOperation.ListAuthorities - Record Class in zeroecho.pki.application: Lists the first authorities in authoritative store order.
PkiOperation.ListIssuerChainPaths - Record Class in zeroecho.pki.application: Lists all chain paths for one issuer generation in authoritative store order.
PkiOperation.ListIssuerGenerations - Record Class in zeroecho.pki.application: Lists all historical issuer generations of one authority, ordered by identifier.
PkiOperation.ListPendingCredentialConfirmations - Record Class in zeroecho.pki.application: Lists pending credential-confirmation reviews in one authorized scope.
PkiOperation.ListProfiles - Record Class in zeroecho.pki.application: Lists logical profile identifiers in ascending identifier order without subject data.
PkiOperation.ListProfileVersions - Record Class in zeroecho.pki.application: Lists imported versions of one profile.
PkiOperation.ListPublications - Record Class in zeroecho.pki.application: Lists publication operations.
PkiOperation.ListRequests - Record Class in zeroecho.pki.application: Lists stored requests in ascending identifier order without subject or key material.
PkiOperation.ListStatus - Record Class in zeroecho.pki.application: Lists the first status objects for one issuer in authoritative store order.
PkiOperation.ListStatusSchedules - Record Class in zeroecho.pki.application: Lists all configured generation schedules.
PkiOperation.ProcessPublication - Record Class in zeroecho.pki.application: Processes one pending publication.
PkiOperation.QueryAuthorityMetrics - Record Class in zeroecho.pki.application: Queries authority-inventory metrics for one CA: issuer-generation states, chain depth, and CA lifecycle state.
PkiOperation.QueryCertificateMetrics - Record Class in zeroecho.pki.application: Queries certificate-lifecycle metrics for one CA: active, expiring, and revoked counts.
PkiOperation.QueryPublicationMetrics - Record Class in zeroecho.pki.application: Queries publication-health metrics for one CA: pending and failing publication counts.
PkiOperation.QueryRevocationMetrics - Record Class in zeroecho.pki.application: Queries revocation and CRL freshness metrics for one CA.
PkiOperation.QueryServerMetrics - Record Class in zeroecho.pki.application: Queries server-health and enrollment metrics: JVM heap, approval queue depth, admin request totals, and audit-projection failure counts.
PkiOperation.ReadRevocationHistory - Record Class in zeroecho.pki.application: Reads a bounded prefix of one revocation history.
PkiOperation.ReconcilePublication - Record Class in zeroecho.pki.application: Reconciles one publication with an unknown external outcome.
PkiOperation.RegisterIssuerChainPath - Record Class in zeroecho.pki.application: Registers a chain path by prepending a member generation's credential to a parent path.
PkiOperation.RegisterProfile - Record Class in zeroecho.pki.application: Registers one profile document.
PkiOperation.RegisterPublication - Record Class in zeroecho.pki.application: Registers post-commit publication of one authoritative object.
PkiOperation.RetryPublication - Record Class in zeroecho.pki.application: Retries one eligible publication.
PkiOperation.RevokeCredential - Record Class in zeroecho.pki.application: Permanently revokes one committed credential.
PkiOperation.RevokePendingCredentialConfirmation - Record Class in zeroecho.pki.application: Permanently revokes one still-pending non-public credential.
PkiOperation.SearchCredentials - Record Class in zeroecho.pki.application: Searches credentials issued by one authoritative authority with optional filters.
PkiOperation.SelectIssuancePath - Record Class in zeroecho.pki.application: Selects an active issuer generation and matching chain path owned by one authority.
PkiOperation.SetStatusSchedule - Record Class in zeroecho.pki.application: Creates or replaces the automatic generation schedule for one CA status family.
PkiOperation.SnapshotRevocations - Record Class in zeroecho.pki.application: Reads a bounded current-revocation snapshot.
PkiOperation.TransitionAuthority - Record Class in zeroecho.pki.application: Changes one authority's operational state without changing its generation selection.
PkiOperation.UnholdCredential - Record Class in zeroecho.pki.application: Releases an existing temporary hold using the authoritative clock.
PkiOperation.ValidateAlgorithmBindings - Record Class in zeroecho.pki.application: Validates the active binding registry and optionally one exact binding.
PkiOperation.ValidateConfiguration - Record Class in zeroecho.pki.application: Validates the opened session configuration.
PkiOperation.ValidateProfile - Record Class in zeroecho.pki.application: Validates one profile document without storing it.
PkiOperation.VerifyRequest - Record Class in zeroecho.pki.application: Verifies proof of possession for one stored request.
PkiOperationExecutor - Interface in zeroecho.pki.application: Synchronous transport-neutral executor for the closed PKI operation model.
PkiOperationFailure - Enum Class in zeroecho.pki.application: Stable safe classifications for synchronous PKI operation failures.
PkiOperationOutcome - Interface in zeroecho.pki.application: Closed completed, durable-pending, or safe-failure outcome returned by the operation executor.
PkiOperationOutcome.Completed - Record Class in zeroecho.pki.application: Successful operation outcome.
PkiOperationOutcome.Failed - Record Class in zeroecho.pki.application: Safely classified operation failure without a throwable graph.
PkiOperationOutcome.Pending - Record Class in zeroecho.pki.application: Durable operation that yielded without retaining its caller thread.
PkiOperationResult - Record Class in zeroecho.pki.application: Finite structured result of one successful typed PKI operation.
PkiOperationResult(String, Map) - Constructor for record class zeroecho.pki.application.PkiOperationResult: Validates and snapshots the result.
PkiOperationValue - Interface in zeroecho.pki.application: Closed transport-neutral value model used by safe operation results and plan arguments.
PkiOperationValue.BooleanValue - Record Class in zeroecho.pki.application: Boolean scalar.
PkiOperationValue.IntegerValue - Record Class in zeroecho.pki.application: Signed 64-bit integer scalar.
PkiOperationValue.ListValue - Record Class in zeroecho.pki.application: Immutable ordered list value.
PkiOperationValue.ObjectValue - Record Class in zeroecho.pki.application: Deterministically ordered object value.
PkiOperationValue.Text - Record Class in zeroecho.pki.application: Text scalar.
PkiRepository - Interface in zeroecho.pki.application: Read-only authoritative repository facade owned by one PkiSession.
PkiRepositoryContent - Class in zeroecho.pki.application: Lifecycle-owned immutable repository content lease without store internals.
PkiRepositoryContent.Role - Enum Class in zeroecho.pki.application: Closed semantic role of public repository content.
PkiResourceScopeResolver - Interface in zeroecho.pki.application: Read-only transport-neutral resolver for authorization scope cross-checks.
PkiResourceScopeResolver.CredentialScope - Record Class in zeroecho.pki.application: Exact authorization coordinates frozen into one committed credential.
PkiSelectionExecutor - Interface in zeroecho.pki.application: Authorization-aware selection execution; the predicate is invoked synchronously and never retained.
PkiSession - Interface in zeroecho.pki.application: Lifecycle-owned synchronous PKI backend session.
PkiSessionConfiguration - Record Class in zeroecho.pki.application: Immutable configuration for one PKI backend session.
PkiSessionConfiguration(int, ProviderConfig, ProviderConfig, Optional, List, List) - Constructor for record class zeroecho.pki.application.PkiSessionConfiguration: Validates and snapshots the current configuration.
PkiSessionConfiguration.BindingProviderConfiguration - Record Class in zeroecho.pki.application: Activation and OID namespace authorization for an installed binding provider.
PkiSessionConfiguration.SigningConfiguration - Record Class in zeroecho.pki.application: Provider, domain and explicit bounded runtime values for reactive signing.
PkiSessionConfiguration.SigningCoordinatorLimits - Record Class in zeroecho.pki.application: Shared finite coordinator and provider-call bounds for a P1c signing topology.
PkiSessionConfiguration.SigningKeyGroup - Record Class in zeroecho.pki.application: One exact-key routing group and its dedicated lane pool.
PkiSessionConfiguration.SigningLanePool - Record Class in zeroecho.pki.application: Finite execution and prefetch capacity owned by one signing route.
PkiSessionConfiguration.SigningTopology - Record Class in zeroecho.pki.application: Immutable P1c signing topology with disjoint exact-key groups and one mandatory catch-all lane pool.
PkiSessionRuntimeDependencies - Record Class in zeroecho.pki.application: Immutable process-local capabilities for one PKI session composition.
PkiSessionRuntimeDependencies(Optional) - Constructor for record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Creates dependencies without an externally composed audit sink.
PkiSessionRuntimeDependencies(Optional, Optional, List, Optional, DashboardLiveSource) - Constructor for record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Validates the optional capability container.
PkiSigningCommands - Interface in zeroecho.pki.application: Shared semantic command preparation and safe completed-result projection.
PkiSigningOperation - Interface in zeroecho.pki.application: Immutable closed signing-command inputs shared by server and local execution.
PkiSigningOperation.CreateAuthority - Record Class in zeroecho.pki.application: Creates one root certificate authority using an existing managed key reference.
PkiSigningOperation.CreateIntermediate - Record Class in zeroecho.pki.application: Creates one intermediate certificate authority and its initial CA credential.
PkiSigningOperation.GenerateStatus - Record Class in zeroecho.pki.application: Generates one signed status object from a stable revocation view.
PkiSigningOperation.IssueCredential - Record Class in zeroecho.pki.application: Issues one end-entity credential from an already imported request.
PkiSigningOperation.IssueIntermediateCertificate - Record Class in zeroecho.pki.application: Issues a new CA credential for an existing intermediate authority (cross-sign or renewal).
PkiSigningOperation.ReissueCredential - Record Class in zeroecho.pki.application: Reissues one end-entity credential from its stored issuance record and supersedes the predecessor.
PkiSigningOperation.RenewCredential - Record Class in zeroecho.pki.application: Renews one end-entity credential, keeping its subject and key under a fresh validity.
PkiSigningOperation.ReplaceCredential - Record Class in zeroecho.pki.application: Replaces one end-entity credential from a new imported request and supersedes the predecessor.
PkiSigningOperation.RolloverCaCertificate - Record Class in zeroecho.pki.application: Rolls over one CA credential, keeping the same key and advancing the current issuance generation.
PkiSigningOperation.RotateCaKey - Record Class in zeroecho.pki.application: Rotates one CA key and issues a new corresponding generation, advancing the current issuance pointers.
PkiStore - Interface in zeroecho.pki.spi.store: Persistence boundary for PKI state.
PkiStore.RequestSelection - Record Class in zeroecho.pki.spi.store: Safe immutable request-selection metadata; contains no subject, SAN, CSR or key bytes.
PkiStoreProvider - Interface in zeroecho.pki.spi.store: ServiceLoader provider for PkiStore implementations.
PkiStoreRuntimeDependencies - Class in zeroecho.pki.spi.store: Immutable process-local runtime dependencies supplied when opening a PKI store.
PkiStoreRuntimeDependencies(Clock) - Constructor for class zeroecho.pki.spi.store.PkiStoreRuntimeDependencies: Creates dependencies with one authoritative store clock.
plan(AlgorithmIdentity, AlgorithmIdentity, AlgorithmExecutionCapability.Direction, Optional, String, Class) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves and authorizes one process-local execution plan.
plan(AlgorithmIdentity, AlgorithmIdentity, AlgorithmExecutionCapability.Direction, Optional, String, String, Class) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves and authorizes one plan through an explicit binding identity.
planSigning(String, Class) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves a signing plan when exactly one implementation is available.
planSigning(String, String, Class) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves a signing plan for a legacy upper API that carries only the signature identity.
planSigningWithBinding(String, String, Class) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves a signing plan through one explicit binding.
planSigningWithBinding(String, String, String, Class) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves a signing plan through one explicit binding and one explicit implementation.
policy() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the exact profile-derived CA policy.
policy() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the exact profile-derived CA policy.
POLICY - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: Configured policy rejected the suite.
POLICY_REJECTION - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: Valid input was rejected by an applicable PKI policy.
POLICY_REJECTION - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic rejection by an applicable PKI policy.
POLICY_REJECTION - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: A valid request is rejected by PKI policy.
PolicyDecision - Record Class in zeroecho.pki.api.policy: Policy decision including optional modifications to be applied to an operation.
PolicyDecision(PkiId, PolicyDecisionStatus, List, AttributeSet) - Constructor for record class zeroecho.pki.api.policy.PolicyDecision: Creates a policy decision.
PolicyDecisionStatus - Enum Class in zeroecho.pki.api.policy: Outcome status of a policy evaluation.
PolicyService - Interface in zeroecho.pki.api: Policy evaluation and explainability.
PolicyTrace - Record Class in zeroecho.pki.api.policy: Explainability trace for a policy decision.
PolicyTrace(PkiId, List) - Constructor for record class zeroecho.pki.api.policy.PolicyTrace: Creates a policy trace.
PolicyTraceStep - Record Class in zeroecho.pki.api.policy: Single evaluation step within a policy trace.
PolicyTraceStep(String, String, List) - Constructor for record class zeroecho.pki.api.policy.PolicyTraceStep: Creates a policy trace step.
Position(String) - Constructor for record class zeroecho.pki.spi.store.RevocationTransitionFeed.Position: Validates and snapshots the immutable position value.
PQC - Enum constant in enum class zeroecho.pki.impl.secrets.PublisherSecretsProtection: BIKE-256 KEM with AES-256-GCM content encryption.
predecessorSha256() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Returns the value of the predecessorSha256 record component.
predecessorSha256() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityReplacementRequest: Returns the value of the predecessorSha256 record component.
preferredSignatureEncoding() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the preferredSignatureEncoding record component.
preferredTrustAnchorId() - Method in record class zeroecho.pki.api.issuance.BundleCommand: Returns the value of the preferredTrustAnchorId record component.
prefetchSize() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningLanePool: Returns the value of the prefetchSize record component.
prefix(String, String) - Static method in record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Returns the total ordered range for a canonical key prefix.
prefix(ManagedKeyProofRequest) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Returns the six frozen prefix fields without encoding or staging content.
PREHASHED_DIGEST - Enum constant in enum class zeroecho.pki.spi.crypto.SigningInputCapabilities.Mode: Exact algorithm digest, without another message hashing step.
prehashedDigests() - Method in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Returns immutable exact canonical signature-to-digest mappings.
prepare(AccessContext, CaCreateCommand, SigningSubmissionId, Duration, CancellationSignal) - Method in class zeroecho.pki.impl.core.RootSigningPreparation: Freezes the exact active root profile, approved subject and one provider SPKI into a single unsigned certificate candidate.
prepare(AccessContext, CaKeyRotationCommand.Intermediate, SigningSubmissionId, Duration, CancellationSignal) - Method in class zeroecho.pki.impl.core.IntermediateSigningPreparation: Prepares rotation using the supplied managed key and the active version of the selected credential's CA profile.
prepare(AccessContext, CaKeyRotationCommand.Root, SigningSubmissionId, Duration, CancellationSignal) - Method in class zeroecho.pki.impl.core.RootSigningPreparation: Prepares root rotation with the supplied managed key and authoritative active profile.
prepare(AccessContext, CaRolloverCommand.Intermediate, SigningSubmissionId, Duration, CancellationSignal) - Method in class zeroecho.pki.impl.core.IntermediateSigningPreparation: Prepares renewal under the active version of the selected credential's CA profile.
prepare(AccessContext, CaRolloverCommand.Root, SigningSubmissionId, Duration, CancellationSignal) - Method in class zeroecho.pki.impl.core.RootSigningPreparation: Prepares root rollover using the authoritative current key and the active version of the selected credential's profile.
prepare(AccessContext, IntermediateCertIssueCommand, SigningSubmissionId, Duration, CancellationSignal) - Method in class zeroecho.pki.impl.core.IntermediateSigningPreparation: Freezes additional issuance for an active existing intermediate authority.
prepare(AccessContext, IntermediateCreateCommand, SigningSubmissionId, Duration, CancellationSignal) - Method in class zeroecho.pki.impl.core.IntermediateSigningPreparation: Freezes one authorized invocation's issuer, profile, proof-bound subject key and TBS.
prepare(AccessContext, EndEntityIssuanceRequest, SigningSubmissionId, Duration, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.EndEntitySigningPreparation: Validates one request, freezes its command and stages its TBS exactly once.
prepare(AccessContext, ManagedKeyProofRequest, SigningSubmissionId, Duration, CancellationSignal) - Method in class zeroecho.pki.impl.core.ManagedKeyProofPreparation: Validates exact preparation metadata before a single bounded staging write.
prepare(SigningRequest, OneShotContent, CancellationSignal) - Method in interface zeroecho.pki.api.SigningService: Streams a one-shot candidate into durable staging without accepting it.
prepare(SigningRequest, OneShotContent, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService
prepare(DeltaCrlRequest, long, CancellationSignal) - Method in class zeroecho.pki.impl.core.FullCrlSigningPreparation: Selects and verifies one full CRL base before freezing a delta snapshot and reserving its number.
prepare(FullCrlRequest, CancellationSignal) - Method in class zeroecho.pki.impl.core.FullCrlSigningPreparation: Validates issuer and capability before reserving a number and staging TBS.
prepare(PkiSigningOperation, AccessContext, Optional, CancellationSignal) - Method in interface zeroecho.pki.application.PkiSigningCommands: Prepares a command using the existing semantic signing service.
prepare(DomainSigningRequest, PkiId) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService: Adopts an already staged candidate from a module-owned domain preparer.
prepareBackup(BackupSource) - Method in interface zeroecho.pki.api.BackupService: Prepares verified staging without activating it or changing the live store.
prepareBackup(BackupSource) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Prepares verified staging without activating it or changing the live store.
prepareBackup(BackupSource) - Method in interface zeroecho.pki.spi.store.PkiStore: Prepares verified staging without activating it or changing the live store.
prepareBoundedObservation(SigningRequest, OneShotContent, CancellationSignal) - Method in interface zeroecho.pki.api.SigningService: Prepares raw signing with one durable initial dispatch and at most one initial provider observation.
prepareBoundedObservation(SigningRequest, OneShotContent, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService
prepareCaKeyRotation(AccessContext, CaKeyRotationCommand, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares a root or intermediate credential for an explicitly provisioned key.
prepareCaKeyRotation(AccessContext, CaKeyRotationCommand, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareCaRollover(AccessContext, CaRolloverCommand, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Renews a root or intermediate credential using its authoritative current key.
prepareCaRollover(AccessContext, CaRolloverCommand, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareCorrelated(AccessContext, CorrelatedEndEntityIssuanceRequest, SigningSubmissionId, Duration, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.EndEntitySigningPreparation: Validates a new correlated issuance against its exact imported profile and current issuer/path selection, then stages one TBS with PKI-derived intent.
prepareCorrelatedEndEntity(AccessContext, CorrelatedEndEntityIssuanceRequest, Optional, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Looks up exact retained issuance before preparing any new work.
prepareCorrelatedEndEntity(AccessContext, CorrelatedEndEntityIssuanceRequest, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareCorrelatedRenewal(AccessContext, CorrelatedEndEntityRenewalRequest, Optional, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares one durable correlated renewal or returns its already accepted operation.
prepareCorrelatedRenewal(AccessContext, CorrelatedEndEntityRenewalRequest, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareCorrelatedRenewal(AccessContext, CorrelatedEndEntityRenewalRequest, SigningSubmissionId, Duration, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.EndEntitySigningPreparation: Prepares a correlated renewal after the semantic facade has excluded an accepted replay.
prepareCorrelatedReplacement(AccessContext, CorrelatedEndEntityReplacementRequest, Optional, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares a correlated replacement or returns its already accepted operation.
prepareCorrelatedReplacement(AccessContext, CorrelatedEndEntityReplacementRequest, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareCorrelatedReplacement(AccessContext, CorrelatedEndEntityReplacementRequest, SigningSubmissionId, Duration, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.EndEntitySigningPreparation: Stages a correlated replacement through the existing replacement continuation.
prepared() - Method in record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Prepared: Returns the value of the prepared record component.
Prepared(PreparedSemanticSigningRequest) - Constructor for record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Prepared: Creates a custody carrier.
prepareDeltaCrl(AccessContext, DeltaCrlRequest, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares a delta CRL against the latest full CRL of the selected issuer's authority.
prepareDeltaCrl(AccessContext, DeltaCrlRequest, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
PreparedFullCrlTbs - Record Class in zeroecho.pki.impl.core: Provider-free, resource-free evidence for one fully staged full CRL TBS.
PreparedFullCrlTbs(PkiId, PkiId, PkiId, CertificateProfileRef, DurableContentReference, String, String, String, KeyRef, String, X509AlgorithmBinding, X509AlgorithmIdentifier, BigInteger, Instant, Instant, Instant, String, MetadataStoreId, long, long, String, OptionalLong, long, DurableContentReference, Optional) - Constructor for record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Creates an instance of a PreparedFullCrlTbs record class.
PreparedSemanticSigningRequest - Interface in zeroecho.pki.api.signing: Opaque single-use semantic preparation with exclusive staged-content custody.
PreparedSigningRequest - Interface in zeroecho.pki.api.signing: Opaque prepared request whose staged candidate remains caller-owned.
prepareEndEntity(AccessContext, EndEntityIssuanceRequest, Optional, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Verifies and prepares one end-entity certificate using the current authoritative issuer generation and active profile.
prepareEndEntity(AccessContext, EndEntityIssuanceRequest, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareFullCrl(AccessContext, FullCrlRequest, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares a full CRL for the exact active or retired issuer generation.
prepareFullCrl(AccessContext, FullCrlRequest, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareFullCrl(AccessContext, PreparedFullCrlTbs, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService: Adopts module-owned completed CRL preparation without copying the staged TBS.
prepareIntermediateCreation(AccessContext, IntermediateCreateCommand, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares creation of an intermediate CA from an exact retained completed managed-key proof, active issuer selection and active intermediate profile.
prepareIntermediateCreation(AccessContext, IntermediateCreateCommand, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareIntermediateIssuance(AccessContext, IntermediateCertIssueCommand, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares an additional certificate for an active existing intermediate CA.
prepareIntermediateIssuance(AccessContext, IntermediateCertIssueCommand, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareManagedKeyProof(AccessContext, ManagedKeyProofRequest, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares a fresh managed-private-key possession challenge using this session's exact provider public-key source and configured signature algorithm.
prepareManagedKeyProof(AccessContext, ManagedKeyProofRequest, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareReissue(AccessContext, EndEntityReissueRequest, Optional, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares reissue of the predecessor's subject, SAN and SPKI using the current logical profile and issuer generation, with policy-derived validity.
prepareReissue(AccessContext, EndEntityReissueRequest, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareReissue(AccessContext, EndEntityReissueRequest, SigningSubmissionId, Duration, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.EndEntitySigningPreparation: Prepares reissue through the shared leaf builder and single staging path.
prepareRenewal(AccessContext, EndEntityRenewalRequest, Optional, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares renewal from the authoritative predecessor under the currently active logical profile and issuer generation.
prepareRenewal(AccessContext, EndEntityRenewalRequest, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareRenewal(AccessContext, EndEntityRenewalRequest, SigningSubmissionId, Duration, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.EndEntitySigningPreparation: Prepares renewal through the shared leaf builder and single staging path.
prepareReplacement(AccessContext, EndEntityReplacementRequest, Optional, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares replacement from a verified exact CSR using the selected active profile and the predecessor's current logical issuing authority.
prepareReplacement(AccessContext, EndEntityReplacementRequest, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
prepareReplacement(AccessContext, EndEntityReplacementRequest, SigningSubmissionId, Duration, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.core.EndEntitySigningPreparation: Prepares verified replacement through the shared leaf builder and staging path.
prepareRootCreation(AccessContext, CaCreateCommand, CancellationSignal) - Method in interface zeroecho.pki.api.SemanticSigningService: Prepares a self-issued root certificate using an existing managed key and the exact active root profile.
prepareRootCreation(AccessContext, CaCreateCommand, CancellationSignal) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
presentation() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallenge: Returns a defensive copy of the suite-defined presentation.
previousHash() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns the value of the previousHash record component.
previousHashCopy() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns an independent copy of the previousHash bytes.
principal() - Method in record class zeroecho.pki.api.audit.AccessContext: Returns the value of the principal record component.
principal() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns the value of the principal record component.
Principal - Record Class in zeroecho.pki.api.audit: Identifies an actor performing an operation or requesting access.
Principal(String, String) - Constructor for record class zeroecho.pki.api.audit.Principal: Creates a principal.
PRINCIPAL - Static variable in class zeroecho.pki.impl.async.PkiCodecs: Codec for Principal.
principalName() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns the value of the principalName record component.
principalName() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the principalName record component.
principalType() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the principalType record component.
PRIVILEGE_WITHDRAWN - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: Privileges granted to the subject have been withdrawn.
process(PkiId) - Method in interface zeroecho.pki.api.PublicationService: Processes one pending operation synchronously.
process(PkiId) - Method in class zeroecho.pki.impl.core.DefaultPublicationService
ProcessPublication(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.ProcessPublication: Validates the identifier.
producedAt() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the producedAt record component.
profile() - Method in record class zeroecho.pki.api.profile.ActiveCertificateProfile: Returns the deterministic runtime projection of the authoritative definition.
profile() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the profile record component.
PROFILE_ACTIVATION_FAILED - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Profile activation failed.
PROFILE_ACTIVATION_HISTORY_UNAVAILABLE - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Historical activation evidence is unavailable or invalid.
PROFILE_ACTIVE_POINTER_CORRUPT - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Persisted active-profile pointer is corrupt.
PROFILE_DOCUMENT_INVALID - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Supplied profile document is structurally or semantically invalid.
PROFILE_DURABILITY_UNCONFIRMED - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Store could not confirm durable profile persistence.
PROFILE_HASH_MISMATCH - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Persisted content does not match its profile hash.
PROFILE_ID - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
PROFILE_IMPORT_FAILED - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Profile import failed without a more specific classification.
PROFILE_IMPORT_VALIDATION_FAILED - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Imported profile failed closed validation.
PROFILE_KIND_CONFLICT - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Versions of one logical profile disagree on certificate kind.
PROFILE_NOT_ACTIVE - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: No active version exists for the requested profile.
PROFILE_STATE_CORRUPT - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Persisted profile lifecycle state is inconsistent.
PROFILE_STORE_FAILURE - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Profile storage operation failed.
PROFILE_VERSION_CONFLICT - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: An existing profile version has different canonical content.
PROFILE_VERSION_CORRUPT - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Persisted profile-version metadata is corrupt.
PROFILE_VERSION_NOT_FOUND - Enum constant in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Requested imported profile version does not exist.
profileBinding() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the profileBinding record component.
profileHistoryPolicy() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the profileHistoryPolicy record component.
profileId() - Method in record class zeroecho.pki.api.ca.CaCreateCommand: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.ca.IntermediateCreateCommand: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.credential.CredentialQuery: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.issuance.IssuanceInputs: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.issuance.ReplaceCommand: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.profile.CertificateProfile: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the profileId record component.
profileId() - Method in class zeroecho.pki.api.profile.CertificateProfileRef: Returns the logical profile identifier.
profileId() - Method in record class zeroecho.pki.api.profile.ProfileQuery: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.request.RequestQuery: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.CaSubject: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiOperation.ActivateProfile: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiOperation.InspectProfile: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiOperation.ListProfileVersions: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiResourceScopeResolver.CredentialScope: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueCredential: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Returns the value of the profileId record component.
profileId() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReplaceCredential: Returns the value of the profileId record component.
profileId() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the selected logical profile identifier.
profileId() - Method in class zeroecho.pki.impl.core.VerifiedIssuanceCandidate: Returns the validated profile identifier.
profileId() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the selected logical profile identifier.
profileId() - Method in record class zeroecho.pki.spi.store.PkiStore.RequestSelection: Returns the value of the profileId record component.
profileIdFilter() - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Returns the value of the profileIdFilter record component.
profileIdFilter() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns the value of the profileIdFilter record component.
ProfileLifecycleFailure - Exception Class in zeroecho.pki.impl: Internal typed classification for redacted profile lifecycle failures.
ProfileLifecycleFailure(ProfileLifecycleFailure.Code) - Constructor for exception class zeroecho.pki.impl.ProfileLifecycleFailure: Creates one cause-free failure with a stable code.
ProfileLifecycleFailure.Code - Enum Class in zeroecho.pki.impl: Closed profile lifecycle failure codes.
profilePolicyCommitment() - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns the value of the profilePolicyCommitment record component.
profilePolicyCommitment() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the profilePolicyCommitment record component.
ProfileQuery - Record Class in zeroecho.pki.api.profile: Query constraints for listing profiles.
ProfileQuery(Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.profile.ProfileQuery: Creates a profile query.
profileReference() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the exact active profile reference.
profileReference() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the selected exact profile reference, active or frozen by issuance intent.
profileReference() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the exact active profile reference.
profileReference() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the selected exact profile reference, active or frozen by issuance intent.
profiles() - Method in interface zeroecho.pki.application.PkiSession: Returns the profile lifecycle service.
ProfileService - Interface in zeroecho.pki.api: Versioned certificate-profile import, activation, and lookup service.
profileVersion() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the profileVersion record component.
profileVersion() - Method in class zeroecho.pki.api.profile.CertificateProfileRef: Returns the profile version.
profileVersion() - Method in record class zeroecho.pki.application.PkiOperation.ActivateProfile: Returns the value of the profileVersion record component.
profileVersion() - Method in record class zeroecho.pki.application.PkiOperation.InspectProfile: Returns the value of the profileVersion record component.
proof() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingPlan: Returns the value of the proof record component.
proofCas() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallenge: Returns the value of the proofCas record component.
proofCas() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofSubmission: Returns the value of the proofCas record component.
proofId() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns the value of the proofId record component.
proofKind() - Method in class zeroecho.pki.impl.core.VerifiedIssuanceCandidate: Returns the proof result that authorized construction.
Proof of possession - Section in package zeroecho.pki.api.request
ProofOfPossessionReason - Enum Class in zeroecho.pki.api.request: Closed set of stable, machine-readable proof-of-possession (PoP) verification reason codes.
ProofOfPossessionResult - Record Class in zeroecho.pki.api.request: Result of proof-of-possession (PoP) verification.
ProofOfPossessionResult(ProofOfPossessionReason, Optional) - Constructor for record class zeroecho.pki.api.request.ProofOfPossessionResult: Creates a PoP verification result.
ProofOfPossessionStatus - Enum Class in zeroecho.pki.api.request: Outcome of proof-of-possession (PoP) verification.
proofOfPossessionVerifier() - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework: Returns the proof-of-possession verifier used by this framework instance.
proofOfPossessionVerifier() - Method in interface zeroecho.pki.spi.framework.CredentialFramework: Returns the proof-of-possession verifier for this framework.
ProofOfPossessionVerifier - Interface in zeroecho.pki.spi.framework: Verifies proof-of-possession (PoP) for a parsed request in a framework-specific manner.
proofOutcome() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the proofOutcome record component.
proofOutcome() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns small retained proof evidence, never its signature.
proofStep() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns the value of the proofStep record component.
proofStep() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the proofStep record component.
proofStep() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the proofStep record component.
proofSuite() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Returns the value of the proofSuite record component.
proofSuite() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the proofSuite record component.
proofSuite() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationPolicy: Returns the value of the proofSuite record component.
proofSuiteBinding() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the proofSuiteBinding record component.
proofSuiteBinding() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns the value of the proofSuiteBinding record component.
proofSuiteBinding() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallenge: Returns the value of the proofSuiteBinding record component.
proofSuiteBinding() - Method in record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Returns the value of the proofSuiteBinding record component.
proofSuiteBinding() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Returns the value of the proofSuiteBinding record component.
proofSuiteBinding() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofCredential: Returns the value of the proofSuiteBinding record component.
proofSuiteBinding() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofDescriptor: Returns the value of the proofSuiteBinding record component.
proofSuiteRef() - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteBinding: Returns the value of the proofSuiteRef record component.
properties() - Method in record class zeroecho.pki.spi.ProviderConfig: Returns the value of the properties record component.
PROTOCOL_VERSION - Static variable in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Version of the explicit raw/prehashed input protocol.
protocolVersion() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Returns the value of the protocolVersion record component.
protocolVersion() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the protocolVersion record component.
provenance() - Method in record class zeroecho.pki.impl.core.DeltaCrlBase: Returns the value of the provenance record component.
provenance() - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Returns the value of the provenance record component.
provider() - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Returns the value of the provider record component.
provider() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Returns the value of the provider record component.
provider() - Method in record class zeroecho.pki.spi.bootstrap.PkiBootstrap.SigningComposition: Returns the value of the provider record component.
PROVIDER_RESULT_INVALID - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Provider returned an invalid operation identity or result shape.
PROVIDER_UNAVAILABLE - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionReason: The verification provider was unavailable or returned no usable status.
providerCallTimeout() - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Returns the value of the providerCallTimeout record component.
providerCallTimeout() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningCoordinatorLimits: Returns the value of the providerCallTimeout record component.
ProviderConfig - Record Class in zeroecho.pki.spi: Backend configuration for ConfigurableProvider instances.
ProviderConfig(String, Map) - Constructor for record class zeroecho.pki.spi.ProviderConfig: Canonical constructor with validation and defensive wrapping.
providerConfigurationCommitment() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the providerConfigurationCommitment record component.
providerConfigurationCommitment() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the providerConfigurationCommitment record component.
providerId() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the providerId record component.
providerId() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.BindingProviderConfiguration: Returns the value of the providerId record component.
providerId() - Method in interface zeroecho.pki.spi.algorithm.X509AlgorithmBindingProvider: Returns the provider identity.
Provider identity - Section in interface zeroecho.pki.spi.ConfigurableProvider
providerNamespace() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the providerNamespace record component.
providerNamespace() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the providerNamespace record component.
providerOperationId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the current stage's exact provider identity.
providerUpdatedAt() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns the value of the providerUpdatedAt record component.
providerUpdatedAt() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofOutcome: Returns the value of the providerUpdatedAt record component.
providerUpdatedAt() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the providerUpdatedAt record component.
providerUpdatedAt() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the optional last provider observation timestamp.
PSEUDONYM - Enum constant in enum class zeroecho.pki.api.profile.SubjectRdnType: X.520 pseudonym.
PUBLIC - Enum constant in enum class zeroecho.pki.api.attr.AttributeSensitivity: Public value; can be disclosed broadly.
PUBLIC - Enum constant in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: Anonymous retrieval and public indexing may be permitted.
PUBLIC_UNLISTED - Enum constant in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: Anonymous retrieval requires a separate capability and is not indexed.
PUBLICATION_ATTEMPT_EXHAUSTED - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A publication attempt counter overflowed and cannot be advanced.
PUBLICATION_CONCURRENT_MODIFICATION - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A publication record changed concurrently and the transition no longer applies.
PUBLICATION_CONTENT_INVALID - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: The content submitted for publication is invalid.
PUBLICATION_NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: The referenced publication operation does not exist.
PUBLICATION_RECOVERY_FAILED - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A publication operation requires authoritative recovery before continuing.
PUBLICATION_RESULT_UNCONFIRMED - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A publication result outcome is unknown, so authoritative recovery is required.
PublicationAttempt - Record Class in zeroecho.pki.spi.publish: Immutable non-secret identity and content commitment for one external attempt.
PublicationAttempt(PkiId, PublicationSourceType, PkiId, PublicationTarget, long, String, Encoding, long, String) - Constructor for record class zeroecho.pki.spi.publish.PublicationAttempt: Creates a validated immutable attempt descriptor.
publicationAuthority(PkiId) - Method in interface zeroecho.pki.application.PkiResourceScopeResolver: Returns the authority of the immutable source behind one publication operation.
publicationBytes() - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Returns the value of the publicationBytes record component.
PublicationCursor - Interface in zeroecho.pki.api.publication: Closeable snapshot-consistent cursor over publication records.
PublicationEvidence - Enum Class in zeroecho.pki.api.publication: Identifies how an exact attempt outcome was established.
PublicationExecutionEvidence - Record Class in zeroecho.pki.application: Immutable, server-derived evidence for the terminal outcome of one publication operation.
PublicationExecutionEvidence(String, String, String, String, long, Optional, Optional, PublicationExecutionEvidence.Outcome) - Constructor for record class zeroecho.pki.application.PublicationExecutionEvidence: Validates the closed evidence model.
PublicationExecutionEvidence.Outcome - Enum Class in zeroecho.pki.application: Terminal publication outcomes.
PublicationFailure - Enum Class in zeroecho.pki.api.publication: Safe closed classifications for publication-operation failures.
publicationId() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the publicationId record component.
publicationId() - Method in record class zeroecho.pki.api.publication.PublicationRequest: Returns the value of the publicationId record component.
publicationId() - Method in record class zeroecho.pki.api.publication.PublicationResult: Returns the value of the publicationId record component.
publicationId() - Method in record class zeroecho.pki.application.PkiOperation.InspectPublication: Returns the value of the publicationId record component.
publicationId() - Method in record class zeroecho.pki.application.PkiOperation.ProcessPublication: Returns the value of the publicationId record component.
publicationId() - Method in record class zeroecho.pki.application.PkiOperation.ReconcilePublication: Returns the value of the publicationId record component.
publicationId() - Method in record class zeroecho.pki.application.PkiOperation.RegisterPublication: Returns the value of the publicationId record component.
publicationId() - Method in record class zeroecho.pki.application.PkiOperation.RetryPublication: Returns the value of the publicationId record component.
publicationId() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns the value of the publicationId record component.
PublicationOutcome - Enum Class in zeroecho.pki.spi.publish: Definitive outcomes a publisher may safely return for one exact attempt.
PublicationQuery - Record Class in zeroecho.pki.api.publication: Query constraints for listing publication records.
PublicationQuery(Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.publication.PublicationQuery: Creates a publication query.
PublicationRecord - Record Class in zeroecho.pki.api.publication: Persisted current state of one publication operation.
PublicationRecord(PkiId, PublicationSourceType, PkiId, DurableContentReference, PublicationTarget, PublicationStatus, long, Optional, Instant, Instant, Optional, Optional) - Constructor for record class zeroecho.pki.api.publication.PublicationRecord: Creates a publication record.
Publication recovery ownership - Section in interface zeroecho.pki.spi.store.PkiStore
PublicationRequest - Record Class in zeroecho.pki.api.publication: Immutable request to register distribution of one already committed PKI object.
PublicationRequest(PkiId, PublicationSourceType, PkiId, PublicationTarget) - Constructor for record class zeroecho.pki.api.publication.PublicationRequest: Creates a validated publication request.
PublicationResult - Record Class in zeroecho.pki.api.publication: Result of a publish operation.
PublicationResult(PkiId, PublicationStatus, long) - Constructor for record class zeroecho.pki.api.publication.PublicationResult: Creates a publication result.
publications() - Method in interface zeroecho.pki.application.PkiSession: Returns the publication service.
PublicationService - Interface in zeroecho.pki.api: Publication and distribution operations.
PublicationSourceType - Enum Class in zeroecho.pki.api.publication: Identifies the authoritative PKI object supplying publication content.
PublicationStatus - Enum Class in zeroecho.pki.api.publication: Durable publication-operation state.
publicationTarget() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the publicationTarget record component.
publicationTarget() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Returns the value of the publicationTarget record component.
PublicationTarget - Record Class in zeroecho.pki.api.publication: Describes where and how to publish an artifact.
PublicationTarget(PublicationTargetType, String) - Constructor for record class zeroecho.pki.api.publication.PublicationTarget: Creates a publication target.
publicationTargets() - Method in record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Returns the value of the publicationTargets record component.
PublicationTargetType - Enum Class in zeroecho.pki.api.publication: Classifies the publication destination type.
publicKey() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofCredential: Returns the value of the publicKey record component.
publicKeyDer() - Method in record class zeroecho.pki.api.ct.CtLogDescriptor: Returns an independent copy of the DER-encoded public key bytes.
publicKeyEncoding() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the publicKeyEncoding record component.
publicKeyEncoding() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRule: Returns the exact subject-public-key encoding rule.
publicKeyId() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the publicKeyId record component.
publicKeyId() - Method in record class zeroecho.pki.api.credential.CredentialQuery: Returns the value of the publicKeyId record component.
publicKeyInfo() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the publicKeyInfo record component.
publicKeyInfo(String, RemoteSigningTransport.RemoteCallControl) - Method in class zeroecho.pki.impl.crypto.remote.http.HttpsRemoteSigningTransport
publicKeyInfo(String, RemoteSigningTransport.RemoteCallControl) - Method in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport: Resolves the canonical DER SubjectPublicKeyInfo for a key handle.
PublicKeyInfoResolver - Interface in zeroecho.pki.impl.core: Functional contract for resolving public key information for a KeyRef.
PublicKeyInfoSource - Interface in zeroecho.pki.spi.crypto: Resolves exportable public-key information from the same managed-key authority used by a signing provider.
publish(PublicationAttempt, RepeatableContent) - Method in interface zeroecho.pki.spi.publish.Publisher: Publishes the payload for one durably prepared attempt.
Publisher - Interface in zeroecho.pki.spi.publish: Publishes an encoded artifact to a configured publication target.
PublisherProvider - Interface in zeroecho.pki.spi.publish: Service-provider contract for explicitly configured publication destinations.
publishers() - Method in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Returns the value of the publishers record component.
publishers() - Method in record class zeroecho.pki.application.PkiSessionConfiguration: Returns the value of the publishers record component.
PublisherSecretResolver - Class in zeroecho.pki.impl.secrets: Resolves secret references in publisher provider configurations.
PublisherSecretResolver(Map) - Constructor for class zeroecho.pki.impl.secrets.PublisherSecretResolver: Creates a resolver backed by the given decrypted secrets.
PublisherSecretsProtection - Enum Class in zeroecho.pki.impl.secrets: Encryption protection profile for the publisher secrets store.
PublisherSecretsStore - Class in zeroecho.pki.impl.secrets: Encrypted publisher secrets store.
PUBLISHING - Enum constant in enum class zeroecho.pki.api.signing.SemanticSigningState: The signature is available and domain publication is being reconciled.
PUBLISHING - Enum constant in enum class zeroecho.pki.spi.store.DomainContinuationStore.State: Signature is terminal and publication is being reconciled.
pureEdDsaMaximumTbsBytes() - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Returns the value of the pureEdDsaMaximumTbsBytes record component.
pureEdDsaMaximumTbsBytes() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Returns the value of the pureEdDsaMaximumTbsBytes record component.
purgeExpiredSignRecords() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
purgeExpiredSignRecords() - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Performs one bounded purge pass for content-free expired or retired records after the configured horizon.
purpose() - Method in record class zeroecho.pki.api.audit.AccessContext: Returns the value of the purpose record component.
purpose() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns the value of the purpose record component.
purpose() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofScope: Returns the value of the purpose record component.
purpose() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the purpose record component.
Purpose - Record Class in zeroecho.pki.api.audit: Declares the purpose of an operation/access for governance and auditing.
Purpose(String) - Constructor for record class zeroecho.pki.api.audit.Purpose: Creates a purpose.
Purpose and scope - Section in package zeroecho.pki.spi.audit
put(AttributeId, AttributeValue) - Method in class zeroecho.pki.impl.core.attr.SimpleAttributeSet.Builder: Associates the supplied identifier with exactly one value.
put(AttributeId, AttributeValue) - Method in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet.Builder: Associates the supplied attribute identifier with exactly one value.
putAll(AttributeSet) - Method in class zeroecho.pki.impl.core.attr.SimpleAttributeSet.Builder: Copies all attributes from the supplied set into this builder.
putAll(AttributeSet) - Method in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet.Builder: Copies all attributes from the supplied set into this builder.
putCa(CaRecord) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Stores a complete logical CA value after validating its credential dependencies.
putCa(CaRecord) - Method in interface zeroecho.pki.spi.store.PkiStore: Persists or updates a Certificate Authority (CA) record.
putCredential(Credential) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putCredential(Credential) - Method in interface zeroecho.pki.spi.store.PkiStore: Persists a credential record.
putCredentialFromSigning(Credential, PkiId, String) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putCredentialFromSigning(Credential, PkiId, String) - Method in interface zeroecho.pki.spi.store.PkiStore: Publishes an X.509 credential from one authoritative signing continuation.
putIssuerChainPath(IssuerChainPath) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putIssuerChainPath(IssuerChainPath) - Method in interface zeroecho.pki.spi.store.PkiStore: Persists one immutable, already validated issuer chain path.
putIssuerGeneration(IssuerGeneration) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putIssuerGeneration(IssuerGeneration) - Method in interface zeroecho.pki.spi.store.PkiStore: Persists one immutable canonical issuer-generation record.
putPolicyTrace(PolicyTrace) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putPolicyTrace(PolicyTrace) - Method in interface zeroecho.pki.spi.store.PkiStore: Persists a policy trace.
putRequest(ParsedCertificationRequest) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putRequest(ParsedCertificationRequest) - Method in interface zeroecho.pki.spi.store.PkiStore: Persists a parsed certification request.
putStatusObject(StatusObject) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putStatusObject(StatusObject) - Method in interface zeroecho.pki.spi.store.PkiStore: Persists a status object.
putStatusObjectFromSigning(StatusObject, PkiId, String) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putStatusObjectFromSigning(StatusObject, PkiId, String) - Method in interface zeroecho.pki.spi.store.PkiStore: Publishes a canonical status and any scheduled execution marker atomically.
putStatusSchedule(StatusSchedule) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putStatusSchedule(StatusSchedule) - Method in interface zeroecho.pki.spi.store.PkiStore: Creates or unconditionally replaces one status-generation schedule.
putWorkflowState(WorkflowStateRecord) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
putWorkflowState(WorkflowStateRecord) - Method in interface zeroecho.pki.spi.store.PkiStore: Persists or updates an orchestrator workflow continuation record.

Q

QueryAuthorityMetrics(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.QueryAuthorityMetrics: Validates the identifier.
QueryCertificateMetrics(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.QueryCertificateMetrics: Validates the identifier.
QueryPublicationMetrics(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.QueryPublicationMetrics: Validates the identifier.
QueryRevocationMetrics(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.QueryRevocationMetrics: Validates the identifier.
QueryServerMetrics() - Constructor for record class zeroecho.pki.application.PkiOperation.QueryServerMetrics: Creates an instance of a QueryServerMetrics record class.
queryTimeoutMillis() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions.CredentialSearch: Returns the value of the queryTimeoutMillis record component.
QUEUED - Enum constant in enum class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningState: Accepted and awaiting signing or an external (typically human) decision.

R

RAW - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.PublicKeyEncoding: Algorithm-defined raw public-key bytes.
RAW - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.PublicKeyEncoding: Algorithm-defined raw public-key bytes.
RAW_CHALLENGE_BYTES - Static variable in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Exact raw challenge length in bytes.
RAW_MESSAGE - Enum constant in enum class zeroecho.pki.spi.crypto.SigningInputCapabilities.Mode: Original message bytes.
rawChallenge() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns a defensive copy of the raw challenge.
rawChallenge() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns a defensive copy of the caller-generated nonce.
rawChallenge() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Returns a defensive copy of the persisted nonce.
rawEntryCount() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the rawEntryCount record component.
rawMessageMaximum() - Method in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Returns inclusive positive raw-message maximum.
read(AttributeCatalogue, AttributeSet, AttributeId, AccessContext) - Method in interface zeroecho.pki.api.audit.AttributeGovernanceService: Reads an attribute value after applying access control.
read(AttributeCatalogue, AttributeSet, AttributeId, AccessContext) - Method in class zeroecho.pki.impl.audit.DefaultAttributeGovernanceService
READ - Enum constant in enum class zeroecho.pki.api.audit.AccessAction: Read an attribute value.
readAllLines() - Method in class zeroecho.pki.util.async.impl.AppendOnlyLineStore: Reads all lines from the store.
readChallenge(StagedContentStore, PkiId, Instant, Optional, DomainCommandEncoding.Decoded, DurableContentReference) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofBindings: Reads one live candidate to exact EOF and requires all challenge commitments.
readPrefixed(String) - Static method in class zeroecho.pki.spi.bootstrap.SpiSystemProperties: Reads all string system properties with the given prefix.
ReadRevocationHistory(PkiId, int) - Constructor for record class zeroecho.pki.application.PkiOperation.ReadRevocationHistory: Validates the bounded query.
realm() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the realm record component.
realm() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns the value of the realm record component.
realm() - Method in record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Returns the value of the realm record component.
realm() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Returns the value of the realm record component.
REALM_ID - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
REALM_ID - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
realmId() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the realmId record component.
realmId() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the realmId record component.
reason() - Method in record class zeroecho.pki.api.request.ProofOfPossessionResult: Returns the value of the reason record component.
reason() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.RevokePermanently: Returns the value of the reason record component.
reason() - Method in record class zeroecho.pki.api.revocation.RevocationInputs: Returns the value of the reason record component.
reason() - Method in record class zeroecho.pki.api.revocation.RevocationQuery: Returns the value of the reason record component.
reason() - Method in record class zeroecho.pki.application.DashboardLiveSource.Metric: Returns the value of the reason record component.
reason() - Method in record class zeroecho.pki.application.PkiOperation.RevokeCredential: Returns the value of the reason record component.
reason() - Method in record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Returns the value of the reason record component.
reason() - Method in record class zeroecho.pki.application.PkiOperation.TransitionAuthority: Returns the value of the reason record component.
reason() - Method in record class zeroecho.pki.spi.framework.CrlEntry: Returns the value of the reason record component.
receipt() - Method in interface zeroecho.pki.api.signing.PreparedSemanticSigningRequest: Returns the immutable recovery receipt; it conveys no authorization.
receipt() - Method in interface zeroecho.pki.api.signing.PreparedSigningRequest: Returns the deterministic acceptance recovery receipt.
receipt() - Method in record class zeroecho.pki.api.signing.SigningAcceptanceResult: Returns the value of the receipt record component.
receipt() - Method in record class zeroecho.pki.application.LocalSigningResult.Completed: Returns the value of the receipt record component.
receipt() - Method in record class zeroecho.pki.application.LocalSigningResult.Failed: Returns the value of the receipt record component.
receipt() - Method in class zeroecho.pki.impl.core.signing.DefaultPreparedSemanticSigningRequest
receipt() - Method in class zeroecho.pki.impl.core.signing.DefaultPreparedSigningRequest
reconcile(PkiId) - Method in interface zeroecho.pki.api.PublicationService: Reconciles one unknown external outcome using the original attempt token.
reconcile(PkiId) - Method in class zeroecho.pki.impl.core.DefaultPublicationService
reconcile(PkiId, SigningProvider.CallControl) - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProvider
reconcile(PkiId, SigningProvider.CallControl) - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider
reconcile(PkiId, SigningProvider.CallControl) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
reconcile(PkiId, SigningProvider.CallControl) - Method in interface zeroecho.pki.spi.crypto.SigningProvider: Observes an already-dispatched operation without re-dispatching it.
reconcile(StatusScheduleState, CancellationSignal) - Method in interface zeroecho.pki.api.schedule.StatusScheduleCoordinator: Reconciles one schedule, resuming any accepted signature rather than preparing a replacement.
reconcile(PublicationAttempt) - Method in interface zeroecho.pki.spi.publish.Publisher: Resolves an existing unknown attempt without creating a new external effect.
reconcile(SignWorkflowStore.Workflow, CancellationSignal) - Method in class zeroecho.pki.spi.crypto.SigningProviderExecutor: Reconciles one durably claimed DISPATCHED or CANCELLING state.
ReconcilePublication(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.ReconcilePublication: Validates the identifier.
RECONCILIATION_RESPONSE - Enum constant in enum class zeroecho.pki.api.publication.PublicationEvidence: The publisher resolved the existing attempt through reconciliation.
reconciliationFailureClass() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the reconciliationFailureClass record component.
reconciliationFailureClass() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the optional retained reconciliation failure classification.
reconstructForRenewal(X509Certificate, FormatId) - Static method in class zeroecho.pki.impl.framework.x509.bc.BcX509CertificationRequestParser: Reconstructs a certification request from an already-issued certificate for renewal or reissue, where no fresh PKCS#10 request exists.
record() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Entry: Returns the value of the record record component.
record() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.PageCandidate: Returns the value of the record record component.
record(AuditEvent) - Method in interface zeroecho.pki.api.audit.AuditService: Records an audit event.
record(AuditEvent) - Method in class zeroecho.pki.impl.audit.FileAuditSink
record(AuditEvent) - Method in class zeroecho.pki.impl.audit.InMemoryAuditSink
record(AuditEvent) - Method in class zeroecho.pki.impl.audit.StdoutAuditSink
record(AuditEvent) - Method in class zeroecho.pki.impl.audit.SyslogAuditSink
record(AuditEvent) - Method in interface zeroecho.pki.spi.audit.AuditSink: Persists an audit event.
record(AuditEvent) - Method in class zeroecho.pki.spi.audit.CompositeAuditSink: Delivers the event to each delegate in order, continuing past any failure.
Record(PkiId, int, DomainContinuationStore.Kind, Optional, DomainContinuationStore.State, long, Instant, Instant, EncodedObject, String, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Validates and snapshots one continuation.
RECORD_MUTATED - Enum constant in enum class zeroecho.pki.api.audit.AuditIntegrityReport.Status: A record's recomputed hash does not match its stored hash (content altered).
recordBytes() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns the value of the recordBytes record component.
recordCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the recordCommitment record component.
recordCommitment() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the recordCommitment record component.
recordCount() - Method in record class zeroecho.pki.api.audit.AuditIntegrityReport: Returns the value of the recordCount record component.
recordedAt() - Method in record class zeroecho.pki.spi.store.AuditEvidenceFeed.Entry: Returns the value of the recordedAt record component.
recordHash() - Method in record class zeroecho.pki.api.audit.AuditChainHead: Returns the value of the recordHash record component.
recordRevision() - Method in interface zeroecho.pki.spi.store.MetadataSnapshot.Record: Returns the non-negative record revision.
records() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Returns the value of the records record component.
recoverContent(TemporaryUniqueIndex, TemporaryUniqueIndex) - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
recoverContent(TemporaryUniqueIndex, TemporaryUniqueIndex) - Method in interface zeroecho.pki.spi.store.StagedContentStore: Removes completed content not referenced by durable runtime state.
RECOVERY_REQUIRED - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: Processing cannot safely continue until authoritative state recovery is completed.
RECOVERY_REQUIRED - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Authoritative recovery is required before processing may continue.
RECOVERY_REQUIRED - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: Durable recovery is required before the operation can continue.
reference() - Method in record class zeroecho.pki.api.credential.CaProfileBinding: Returns the value of the reference record component.
reference() - Method in record class zeroecho.pki.api.credential.EndEntityProfileBinding: Returns the value of the reference record component.
reference() - Method in record class zeroecho.pki.api.profile.ActiveCertificateProfile: Returns the value of the reference record component.
reference() - Method in class zeroecho.pki.api.profile.ImportedCertificateProfileVersion: Returns the exact version reference.
register(PublicationRequest) - Method in interface zeroecho.pki.api.PublicationService: Registers one publication operation after its source object is committed.
register(PublicationRequest) - Method in class zeroecho.pki.impl.core.DefaultPublicationService
registerEndpoint(EndpointId, AsyncEndpoint) - Method in interface zeroecho.pki.util.async.AsyncBus: Registers an endpoint instance under an identifier.
registerEndpoint(EndpointId, AsyncEndpoint) - Method in class zeroecho.pki.util.async.impl.DurableAsyncBus: Registers an endpoint under the supplied endpoint identifier.
registerIssuerChainPath(PkiId, PkiId, PkiId) - Method in interface zeroecho.pki.api.CaService: Registers an additional explicit path for an existing issuer generation by appending one already-authoritative parent path.
RegisterIssuerChainPath(PkiId, PkiId, PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.RegisterIssuerChainPath: Creates an immutable path-registration request.
RegisterProfile(byte[]) - Constructor for record class zeroecho.pki.application.PkiOperation.RegisterProfile: Defensively copies the document.
RegisterPublication(PkiId, PublicationSourceType, PkiId, PublicationTarget) - Constructor for record class zeroecho.pki.application.PkiOperation.RegisterPublication: Validates the registration.
reissue(ReissueCommand) - Method in interface zeroecho.pki.api.IssuanceService: Reissues based on a stored issuance record.
reissue(ReissueCommand, CancellationSignal) - Method in interface zeroecho.pki.api.IssuanceService: Reissues a credential while carrying originating cancellation.
ReissueCommand - Record Class in zeroecho.pki.api.issuance: Command to reissue based on a stored issuance record.
ReissueCommand(PkiId, AttributeSet) - Constructor for record class zeroecho.pki.api.issuance.ReissueCommand: Creates a reissue command.
ReissueCredential(PkiId) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.ReissueCredential: Validates the reissue input.
REJECTED - Enum constant in enum class zeroecho.pki.api.confirmation.CredentialConfirmationProofResult: A bounded proof for a pending lifecycle cryptographically failed verification.
REJECTED - Enum constant in enum class zeroecho.pki.spi.confirmation.KeyPossessionProofVerification: The proof is well-formed but does not verify for the authoritative context.
Relation to other layers - Section in package zeroecho.pki.util
releaseContent(DurableContentReference, DurableContentOwner) - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
releaseContent(DurableContentReference, DurableContentOwner) - Method in interface zeroecho.pki.spi.store.StagedContentStore: Durably releases one exact owner and retires content after its last owner.
REMOTE_RAW_LIMIT - Static variable in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Current remote client's inclusive raw input ceiling.
RemoteCallControl(Instant, CancellationSignal) - Constructor for record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCallControl: Validates the control.
RemoteCapabilities(Set, byte[], int, SigningInputCapabilities) - Constructor for record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Validates and snapshots the advertised configuration.
RemoteSigningException(String) - Constructor for exception class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningException: Creates the exception.
RemoteSigningException(String, Throwable) - Constructor for exception class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningException: Creates the exception with a cause.
RemoteSigningProvider - Class in zeroecho.pki.impl.crypto.remote: Stateless signing provider backed by an externally idempotent remote service.
RemoteSigningProvider(String, RemoteSigningTransport, String, Duration) - Constructor for class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider: Creates one remote signing-provider client.
RemoteSigningProviderFactory - Class in zeroecho.pki.impl.crypto.remote: Service-loadable factory that binds the PKI to a remote signing service through SigningProvider.
RemoteSigningProviderFactory() - Constructor for class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory: Creates a remote signing-provider factory.
RemoteSigningStatus(String, RemoteSigningTransport.RemoteSigningState, Instant, Optional, String) - Constructor for record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningStatus: Creates an instance of a RemoteSigningStatus record class.
RemoteSigningTransport - Interface in zeroecho.pki.spi.crypto.remote: Technology-neutral wire seam between the PKI's remote signing provider provider and a remote signing service.
RemoteSigningTransport.RemoteCallControl - Record Class in zeroecho.pki.spi.crypto.remote: Per-call deadline and cooperative cancellation.
RemoteSigningTransport.RemoteCapabilities - Record Class in zeroecho.pki.spi.crypto.remote: Remote service capabilities.
RemoteSigningTransport.RemoteSigningCallback - Interface in zeroecho.pki.spi.crypto.remote: Best-effort remote status-change callback.
RemoteSigningTransport.RemoteSigningException - Exception Class in zeroecho.pki.spi.crypto.remote: Signals that a remote signing call did not complete with a definite, trustworthy outcome.
RemoteSigningTransport.RemoteSigningState - Enum Class in zeroecho.pki.spi.crypto.remote: Technology-neutral state a remote signing service reports.
RemoteSigningTransport.RemoteSigningStatus - Record Class in zeroecho.pki.spi.crypto.remote: The remote operation's current status.
RemoteSigningTransport.RemoteSignRequest - Record Class in zeroecho.pki.spi.crypto.remote: One signing request on the wire.
RemoteSignRequest(String, String, String, long, String, String, String, long, byte[], String, String, String, Optional, int, SigningInputCapabilities.Mode, String, SigningProvider.ConfigurationCommitment) - Constructor for record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Validates bounded wire structure and takes ownership of a copy.
Remote state model - Section in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport
remove(byte[]) - Method in interface zeroecho.pki.spi.store.TemporaryUniqueIndex: Removes one exact bounded value after validating its physical record.
REMOVE_FROM_CRL - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: Remove the credential from status list (unhold semantics).
renew(RenewCommand) - Method in interface zeroecho.pki.api.IssuanceService: Renews an existing credential according to policy-defined continuity semantics.
renew(RenewCommand, CancellationSignal) - Method in interface zeroecho.pki.api.IssuanceService: Renews a credential while carrying originating cancellation.
RenewCommand - Record Class in zeroecho.pki.api.issuance: Command to renew an existing credential.
RenewCommand(PkiId, Optional, AttributeSet) - Constructor for record class zeroecho.pki.api.issuance.RenewCommand: Creates a renewal command.
RenewCredential(PkiId) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.RenewCredential: Validates the renewal input.
renewSignStep(PkiId, long, long, Duration) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
renewSignStep(PkiId, long, long, Duration) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Atomically renews an owned lease.
replace(ReplaceCommand) - Method in interface zeroecho.pki.api.IssuanceService: Replaces an existing credential (e.g., after compromise or attribute changes).
replace(ReplaceCommand, CancellationSignal) - Method in interface zeroecho.pki.api.IssuanceService: Replaces a credential while carrying originating cancellation.
replace(MetadataKey, long, RepeatableContent, CancellationSignal) - Method in interface zeroecho.pki.spi.store.MetadataTransaction: Adds a compare-and-replace mutation.
replaceCa(CaRecord, CaRecord) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Conditionally publishes a complete CA value using its observed current value.
replaceCa(CaRecord, CaRecord) - Method in interface zeroecho.pki.spi.store.PkiStore: Atomically replaces an existing CA record only while its complete value equals expected.
ReplaceCommand - Record Class in zeroecho.pki.api.issuance: Command to replace an existing credential.
ReplaceCommand(PkiId, ParsedCertificationRequest, String, AttributeSet) - Constructor for record class zeroecho.pki.api.issuance.ReplaceCommand: Creates a replacement command.
ReplaceCredential(PkiId, PkiId, String) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.ReplaceCredential: Validates the replacement input.
replacePublicationRecord(PublicationRecord, PublicationRecord) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
replacePublicationRecord(PublicationRecord, PublicationRecord) - Method in interface zeroecho.pki.spi.store.PkiStore: Atomically replaces one exact observed publication state.
replaceStatusSchedule(StatusSchedule, StatusSchedule) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
replaceStatusSchedule(StatusSchedule, StatusSchedule) - Method in interface zeroecho.pki.spi.store.PkiStore: Conditionally replaces one status-generation schedule using optimistic concurrency.
repository() - Method in interface zeroecho.pki.application.PkiSession: Returns the authoritative repository facade.
request() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityIssuanceRequest: Returns the value of the request record component.
request() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Returns the value of the request record component.
request() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityReplacementRequest: Returns the value of the request record component.
request() - Method in record class zeroecho.pki.api.issuance.IssuanceInputs: Returns the value of the request record component.
request() - Method in record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Returns the value of the request record component.
request() - Method in interface zeroecho.pki.api.signing.PreparedSigningRequest: Returns the immutable application request.
request() - Method in class zeroecho.pki.impl.core.signing.DefaultPreparedSigningRequest
request() - Method in class zeroecho.pki.impl.core.VerifiedIssuanceCandidate: Returns an immutable snapshot of the cryptographically verified request.
REQUEST_ID - Static variable in record class zeroecho.pki.application.IssuanceExecutionEvidence: Evidence attribute vocabulary.
REQUEST_ID - Static variable in record class zeroecho.pki.application.RevocationExecutionEvidence: Evidence attribute vocabulary.
requested() - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Returns the value of the requested record component.
requestedOverrides() - Method in record class zeroecho.pki.api.issuance.IssuanceInputs: Returns the value of the requestedOverrides record component.
requestedProfileId() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the requestedProfileId record component.
requestedValidity() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Intermediate: Returns the value of the requestedValidity record component.
requestedValidity() - Method in interface zeroecho.pki.api.ca.CaRolloverCommand: Returns optional requested validity; policy may override or deny it.
requestedValidity() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Root: Returns the value of the requestedValidity record component.
requestedValidity() - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Returns the value of the requestedValidity record component.
requestedValidity() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the requestedValidity record component.
requestedValidity() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Returns the value of the requestedValidity record component.
requesterSupplied() - Method in record class zeroecho.pki.api.profile.SubjectRdnRule: Returns the value of the requesterSupplied record component.
requestId() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the requestId record component.
requestId() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns the value of the requestId record component.
requestId() - Method in record class zeroecho.pki.application.PkiOperation.InspectRequest: Returns the value of the requestId record component.
requestId() - Method in record class zeroecho.pki.application.PkiOperation.VerifyRequest: Returns the value of the requestId record component.
requestId() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueCredential: Returns the value of the requestId record component.
requestId() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReplaceCredential: Returns the value of the requestId record component.
requestId() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns the value of the requestId record component.
requestId() - Method in record class zeroecho.pki.spi.store.PkiStore.RequestSelection: Returns the value of the requestId record component.
requestParser() - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework: Returns the certification request parser used by this framework instance.
requestParser() - Method in interface zeroecho.pki.spi.framework.CredentialFramework: Returns the request parser for this framework.
RequestQuery - Record Class in zeroecho.pki.api.request: Query constraints for searching stored certification requests.
RequestQuery(Optional, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.request.RequestQuery: Creates a request query.
requests() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the requests record component.
requests() - Method in interface zeroecho.pki.application.PkiSession: Returns the certification-request service.
requestsCommitted() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns the value of the requestsCommitted record component.
RequestSelection(PkiId, FormatId, Optional) - Constructor for record class zeroecho.pki.spi.store.PkiStore.RequestSelection: Creates an instance of a RequestSelection record class.
requestSignCancellation(PkiId, long, long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
requestSignCancellation(PkiId, long, long) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Atomically applies authoritative cancellation intent.
RequestStorePolicy - Enum Class in zeroecho.pki.api.request: Controls whether and when parsed certification requests are persisted for correlation and audit.
require(String) - Method in record class zeroecho.pki.spi.ProviderConfig: Returns a required non-blank value for the given key.
require(String, String) - Method in interface zeroecho.pki.api.algorithm.X509AlgorithmBindingRegistry: Requires that one explicit binding remains active with an exact commitment.
require(String, String) - Method in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry
require(PkiId) - Static method in class zeroecho.pki.util.PkiIds: Validates that the provided identifier is non-null.
require(PkiOperationExecutor) - Static method in interface zeroecho.pki.application.RevocationEvidenceExecutor: Resolves the evidence-aware capability or fails closed.
requireAccepting() - Method in class zeroecho.pki.impl.core.signing.SigningReactor: Rejects acceptance after the reactor begins quiescing.
requireActive(Instant) - Method in record class zeroecho.pki.spi.crypto.SigningProvider.CallControl: Rejects work at or after the deadline or after cancellation.
requireActiveProfile(String) - Method in interface zeroecho.pki.api.ProfileService: Resolves and validates the exact active profile.
requireActiveProfile(String) - Method in class zeroecho.pki.impl.core.DefaultProfileService
requireActiveProfile(String) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
requireActiveProfile(String) - Method in interface zeroecho.pki.spi.store.PkiStore: Resolves the exact active version and validated runtime projection.
requireAdmission(String, long, long) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Enforces the configured pure-EdDSA message bound before entering a provider.
requireAllows(long) - Method in record class zeroecho.pki.api.content.ResourceLimit.LimitedTo
requireAllows(long) - Method in interface zeroecho.pki.api.content.ResourceLimit: Checks an incrementally observed non-negative value.
requireAllows(long) - Method in record class zeroecho.pki.api.content.ResourceLimit.UnrestrictedByDeployment
requireAuthority(X509AlgorithmResolver.Selection) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Rejects a selection produced by a semantically different authority snapshot.
requireCandidate(DomainCommandEncoding.Decoded, DurableContentReference) - Static method in class zeroecho.pki.impl.core.continuation.IntermediateSigningCommand: Binds immutable candidate metadata to the frozen exact TBS commitment.
requireCandidate(DomainCommandEncoding.Decoded, DurableContentReference) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofBindings: Checks candidate metadata without opening content or requiring current ownership.
requireCanonicalCredentialId(PkiId) - Static method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Validates one opaque credential identifier against the confirmation API's strict UTF-8 contract without normalizing or otherwise changing it.
requireCompatible(AlgorithmIdentity, AlgorithmIdentity) - Static method in class zeroecho.pki.impl.framework.x509.X509SuiteCompatibility: Combines compatible signature and key identities.
requireCompleted(StatusObject, DomainContinuationStore.Record) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Checks a completed result against publication metadata whose content and owner have already been validated by the caller.
requireCompleted(PkiStore, DomainContinuationStore.Record) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Resolves a completed result against authoritative publication metadata without reopening retired TBS.
Required configuration keys - Section in class zeroecho.pki.impl.publish.HttpsPublisherProvider
requiredDetails() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns the value of the requiredDetails record component.
requiredDigest(AlgorithmIdentity) - Static method in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Resolves only explicitly supported typed standard signature semantics.
requiredValue(X509Certificate, String) - Static method in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: Extracts the canonical DER value of a required certificate extension.
requireEmailIdentity() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns the value of the requireEmailIdentity record component.
requireEnvelope(SignWorkflowStore.AcceptanceEnvelope) - Static method in class zeroecho.pki.impl.core.continuation.CaSubjectProofBindings: Checks retained metadata without opening either candidate or resolving codecs.
requireEnvelope(SignWorkflowStore.AcceptanceEnvelope) - Static method in class zeroecho.pki.impl.core.continuation.IntermediateSigningCommand: Requires the frozen proof's provider identity and the parent's signing authority to match the consuming envelope.
requireEnvelope(SignWorkflowStore.AcceptanceEnvelope) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofBindings: Requires all frozen scalar bindings against an immutable acceptance envelope.
requireExecutableSignature(String, AlgorithmExecutionCapability.Direction) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Validates a persisted signature identity against the complete runtime authority intersection.
requireFields(int) - Method in record class zeroecho.pki.impl.core.continuation.DomainCommandEncoding.Decoded: Requires the exact current field count.
requireLiveCandidates(StagedContentStore, SignWorkflowStore.AcceptanceEnvelope) - Static method in class zeroecho.pki.impl.core.continuation.CaSubjectProofBindings: Reads both bounded live candidates and rejects challenge, intent, algorithm, SPKI or final-TBS substitution.
requireParent(PkiId) - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Requires a distinct parent identifier in the same provider namespace.
requirePermitted(AlgorithmIdentity) - Static method in class zeroecho.pki.impl.framework.x509.X509SecurityFloor: Enforces the immutable security floor.
requireProfileProof(ParsedCertificationRequest, CertificateProfileRef) - Method in interface zeroecho.pki.api.CertificationRequestService: Verifies the exact retained original proof and its CSR-signature binding against an immutable imported profile version.
requireProfileProof(ParsedCertificationRequest, CertificateProfileRef) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Verifies the exact retained original proof and its CSR-signature binding against an immutable imported profile version.
requireProofOfPossession() - Method in record class zeroecho.pki.api.issuance.VerificationPolicy: Returns the value of the requireProofOfPossession record component.
requirePublicationMetadata(StatusObject, DomainContinuationStore.Record) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Checks canonical publication metadata against its retained command, including before acknowledgement.
requireRenewalIdentity(ParsedCertificationRequest, PkiId) - Method in interface zeroecho.pki.api.CertificationRequestService: Requires an original X.509 request to describe the exact authoritative renewal predecessor subject, ordered RDNs, SAN presence/entries and DER public key.
requireRenewalIdentity(ParsedCertificationRequest, PkiId) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Requires an original X.509 request to describe the exact authoritative renewal predecessor subject, ordered RDNs, SAN presence/entries and DER public key.
requireResult(DomainContinuationStore.Record) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofBindings: Requires the exact non-artifact proof completion marker.
requireRevocationPrefix(RevocationTransitionFeed.HighWatermark, long, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
requireRevocationPrefix(RevocationTransitionFeed.HighWatermark, long, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Requires an exact authoritative revocation prefix in this store's captured live head.
requiresApproval() - Method in enum class zeroecho.pki.api.profile.IssuanceApprovalRequirement: Indicates whether server issuance under this requirement must be gated by a durable administrative approval before the credential is signed.
requireServiceIdentity() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns the value of the requireServiceIdentity record component.
requireSigningEffect(PkiStore, StatusObject, DomainContinuationStore.Record, EncodedObject) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Checks a proposed publication against the exact accepted TBS and signature in bounded memory.
requireStatusCompletion(X509SignedObjectCompletion) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Validates and unwraps a status completion minted by this live authority.
requireStatusSigningPlan(X509SignedObjectCompletion) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Returns the exact live SIGN plan after validating status completion provenance.
requireSupportedIssuance() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Requires a currently supported certificate lifecycle before import, activation or issuance.
requireTbs(DomainCommandEncoding.Decoded, DurableContentReference) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Checks live TBS metadata against the frozen command, without restoring retired content.
requireUsable(Credential, CredentialUse) - Method in interface zeroecho.pki.api.credential.EffectiveCredentialStatusResolver.Evaluation: Requires a credential to be usable for the supplied operation category.
requireWorkflow(SignWorkflowStore.Workflow, DomainContinuationStore.Record) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofBindings: Validates the exact immutable envelope/continuation and terminal provenance.
reserveCrlNumber(PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
reserveCrlNumber(PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Irreversibly reserves the next CRL number for an authoritative issuer generation.
RESOLUTION_FAILED_CODE - Static variable in class zeroecho.pki.impl.core.StoreBackedEffectiveCredentialStatusResolver: Stable status-resolution failure code.
resolve(String) - Static method in class zeroecho.pki.impl.framework.x509.X509BuiltInDefaults: Resolves one immutable built-in default.
resolve(String, AlgorithmIdentity, X509AlgorithmRole) - Method in class zeroecho.pki.impl.framework.x509.X509BindingCatalog: Resolves one exact identity through an explicitly selected binding.
resolve(AlgorithmIdentity, AlgorithmIdentity, AlgorithmExecutionCapability.Direction, Optional, String) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves one effective operation and binds it to this snapshot fingerprint.
resolve(AlgorithmIdentity, AlgorithmIdentity, AlgorithmExecutionCapability.Direction, Optional, String, String) - Method in class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver: Resolves an exact explicit selection.
resolve(AlgorithmIdentity, AlgorithmIdentity, AlgorithmExecutionCapability.Direction, Optional, String, String) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves one operation through an explicitly selected role-specific binding.
resolve(AlgorithmIdentity, AlgorithmIdentity, AlgorithmExecutionCapability.Direction, Optional, String, String, Optional) - Method in class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver: Resolves an operation with an optional explicit X.509 binding identity.
resolve(AlgorithmIdentity, X509AlgorithmRole) - Method in class zeroecho.pki.impl.framework.x509.X509BindingCatalog: Resolves one exact identity for a closed role.
resolve(Credential) - Method in interface zeroecho.pki.api.credential.EffectiveCredentialStatusResolver.Evaluation: Resolves one credential using current revocation state and the captured evaluation time.
resolve(SigningAcceptanceReceipt) - Method in interface zeroecho.pki.api.SemanticSigningService: Resolves an uncertain acceptance against the authoritative store.
resolve(SigningAcceptanceReceipt) - Method in interface zeroecho.pki.api.SigningService: Resolves an acceptance whose committing call had an uncertain outcome.
resolve(SigningAcceptanceReceipt) - Method in class zeroecho.pki.impl.core.signing.DefaultSemanticSigningService
resolve(SigningAcceptanceReceipt) - Method in class zeroecho.pki.impl.core.signing.DefaultSigningService
resolve(ProviderConfig) - Method in class zeroecho.pki.impl.secrets.PublisherSecretResolver: Returns a new ProviderConfig with all secret references in property values resolved to their plaintext equivalents.
resolve(MetadataTransactionId) - Method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Resolves a transaction outcome retained by this store.
resolve(MetadataTransactionId) - Method in interface zeroecho.pki.spi.store.TransactionalMetadataStore: Resolves a transaction outcome retained by this store.
resolveAcceptance(PkiId, SignWorkflowStore.AcceptanceCommitment) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
resolveAcceptance(PkiId, SignWorkflowStore.AcceptanceCommitment) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Resolves a previously uncertain acceptance without modifying workflow state.
resolveDefault(String) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves an immutable built-in default without extension override.
resolveIdentity(String) - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Resolves a canonical identity or finite built-in compatibility alias.
resolvePublicKeyInfo(KeyRef) - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider
resolvePublicKeyInfo(KeyRef) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
resolvePublicKeyInfo(KeyRef) - Method in interface zeroecho.pki.spi.crypto.PublicKeyInfoSource: Resolves one managed key reference to canonical DER SubjectPublicKeyInfo.
resolvePureEdDsaMaximumTbsBytes(long) - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Resolves the existing pure-EdDSA buffering budget for one executing signer.
resolvePureEdDsaMaximumTbsBytes(long) - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Resolves the maximum raw pure-EdDSA TBSCertList size.
resolver() - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Returns the owned effective resolver.
resolveSpkiDer(KeyRef) - Method in interface zeroecho.pki.impl.core.PublicKeyInfoResolver: Resolves the subject public key information for the supplied key reference.
RESOURCE - Static variable in class zeroecho.pki.impl.framework.x509.ZeroEchoPrivateX509Bindings: Versioned assignment resource.
RESOURCE_FAILURE - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: A required storage, memory, file, or other finite resource was unavailable.
RESOURCE_FAILURE - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic failure of a required finite or system resource.
RESOURCE_FAILURE - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: Filesystem, channel or another required resource failed.
ResourceLimit - Interface in zeroecho.pki.api.content: Explicit deployment-owned resource constraint.
ResourceLimit.LimitedTo - Record Class in zeroecho.pki.api.content: Positive finite deployment-owned limit.
ResourceLimit.ResourceLimitExceededException - Exception Class in zeroecho.pki.api.content: Stable non-sensitive failure for deployment resource rejection.
ResourceLimit.UnrestrictedByDeployment - Record Class in zeroecho.pki.api.content: Explicit absence of a deployment-owned limit.
resourceName() - Method in class zeroecho.pki.api.profile.BuiltInCertificateProfileTemplate: Returns the validated classpath resource name.
resourceScopes() - Method in interface zeroecho.pki.application.PkiSession: Returns the read-only authoritative identifier resolver used to cross-check realm and authority scopes before protected operations.
respond(OcspResponseService.Command) - Method in interface zeroecho.pki.application.OcspResponseService: Resolves one stable view and signs exactly one response.
respond(OcspResponseService.Command, CancellationSignal) - Method in interface zeroecho.pki.application.OcspResponseService: Resolves and signs one response with originating cancellation.
responderCredentialId() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.OcspResponder: Returns the value of the responderCredentialId record component.
responderCredentialId() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofScope: Returns the value of the responderCredentialId record component.
responderCredentialId() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the responderCredentialId record component.
responderId() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the responderId record component.
response() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofSubmission: Returns a defensive copy of the suite-defined response.
Response(byte[], long, String, int, int, int) - Constructor for record class zeroecho.pki.application.OcspResponseService.Response: Defensively owns response DER.
RESPONSE_EVIDENCE - Static variable in record class zeroecho.pki.application.PublicationExecutionEvidence: Evidence attribute vocabulary.
responseChain() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the responseChain record component.
responseEvidence() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns the value of the responseEvidence record component.
Responsibilities - Section in package zeroecho.pki.api.ca
restore(String, byte[], String) - Static method in class zeroecho.pki.impl.core.CrlScope: Restores canonical constituents and verifies their stored digest.
restoreBackup(RestoreRequest) - Method in interface zeroecho.pki.api.BackupService: Restores PKI state from a backup artifact.
restoreBackup(RestoreRequest) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Stages a bounded legacy archive for cold activation on the next store open.
restoreBackup(RestoreRequest) - Method in interface zeroecho.pki.spi.store.PkiStore: Restores PKI state from a backup artifact.
restoreId() - Method in record class zeroecho.pki.api.backup.RestoreReport: Returns the value of the restoreId record component.
restoreId() - Method in record class zeroecho.pki.api.backup.RestoreStatus: Returns the value of the restoreId record component.
RestoreIdentity - Record Class in zeroecho.pki.api.backup: Authoritative identity and outcome of the latest cold restore.
RestoreIdentity(PkiId, String, RestoreStatus) - Constructor for record class zeroecho.pki.api.backup.RestoreIdentity: Validates immutable identity fields without performing I/O.
restoreReference(String, String, Encoding, long, String, DurableContentReference.Lifecycle) - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
restoreReference(String, String, Encoding, long, String, DurableContentReference.Lifecycle) - Method in interface zeroecho.pki.spi.store.StagedContentStore: Restores one persisted reference through this owning store.
RestoreRejectedException - Exception Class in zeroecho.pki.api.backup: Definitive rejection before a restore publishes activation intent.
RestoreRejectedException(IOException) - Constructor for exception class zeroecho.pki.api.backup.RestoreRejectedException: Creates a payload-free rejection preserving the underlying diagnostic cause.
RestoreReport - Record Class in zeroecho.pki.api.backup: Result report for a restore operation.
RestoreReport(PkiId, boolean, List, List) - Constructor for record class zeroecho.pki.api.backup.RestoreReport: Creates a restore report.
RestoreRequest - Record Class in zeroecho.pki.api.backup: Requests restore of PKI state from a backup artifact.
RestoreRequest(BackupArtifact, AttributeSet) - Constructor for record class zeroecho.pki.api.backup.RestoreRequest: Creates a restore request.
RestoreStatus - Record Class in zeroecho.pki.api.backup: Immutable local restore outcome.
RestoreStatus(PkiId, RestoreStatus.State, List) - Constructor for record class zeroecho.pki.api.backup.RestoreStatus: Validates identity and takes an immutable copy of the issue codes.
RestoreStatus.State - Enum Class in zeroecho.pki.api.backup: Observable restore outcomes.
RESTRICTED - Enum constant in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: Retrieval requires an explicit principal or role grant.
result() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the result record component.
result() - Method in record class zeroecho.pki.application.LocalSigningResult.Completed: Returns the value of the result record component.
result() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Completed: Returns the value of the result record component.
result() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the result record component.
result() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the result record component.
result() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the optional immutable retained signature.
result() - Method in record class zeroecho.pki.util.async.AsyncEvent: Returns the value of the result record component.
result(OpId) - Method in interface zeroecho.pki.util.async.AsyncEndpoint: Returns a best-effort result for a successful operation.
result(DomainContinuationStore.Record) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofBindings: Encodes the non-artifact success marker of a proof continuation.
RESULT_PERSISTENCE_UNKNOWN - Enum constant in enum class zeroecho.pki.api.publication.PublicationFailure: Durable persistence of a returned result could not be established.
ResultCodec<R> - Interface in zeroecho.pki.util.async.codec: Optional persistence codec for results.
resultId(EncodedObject) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Decodes the sole permitted full-CRL completion result.
Result retention - Section in interface zeroecho.pki.util.async.AsyncBus
retainContent(DurableContentReference, DurableContentOwner) - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
retainContent(DurableContentReference, DurableContentOwner) - Method in interface zeroecho.pki.spi.store.StagedContentStore: Durably retains sealed content for one typed business owner.
RetainedIssuanceBinding - Record Class in zeroecho.pki.api.issuance: Immutable CSR-free coordinates for exact lookup of retained issuance semantics.
RetainedIssuanceBinding(PkiId, String, CertificateProfileRef, PkiId, PkiId, String, String) - Constructor for record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Validates the same frozen coordinate bounds as correlated issuance requests.
retentionWindow() - Method in class zeroecho.pki.impl.fs.FsHistoryPolicy: Optional retention window.
retire(OpId) - Method in class zeroecho.pki.util.async.impl.DurableAsyncBus: Durably retires all bus state for an operation.
RETIRED - Enum constant in enum class zeroecho.pki.api.ca.CaState: CA is retired and must not issue new credentials.
RETIRED - Enum constant in enum class zeroecho.pki.api.ca.IssuerGenerationState: Retained for validation but unavailable for new issuance.
RETIRED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Terminal evidence is retained without live content ownership.
retireSign(PkiId, long, long) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
retireSign(PkiId, long, long) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Atomically retires a terminal current record while retaining its identity and any successful result.
retireUnownedContent(DurableContentReference) - Method in class zeroecho.pki.impl.fs.FilesystemStagedContentStore
retireUnownedContent(DurableContentReference) - Method in interface zeroecho.pki.spi.store.StagedContentStore: Retires sealed content that has no durable owner.
retry(PkiId) - Method in interface zeroecho.pki.api.PublicationService: Explicitly retries one retryable operation as a new numbered attempt.
retry(PkiId) - Method in class zeroecho.pki.impl.core.DefaultPublicationService
RETRYABLE_FAILURE - Enum constant in enum class zeroecho.pki.api.publication.PublicationStatus: The attempt definitively failed and an explicit retry is permitted.
RETRYABLE_FAILURE - Enum constant in enum class zeroecho.pki.spi.publish.PublicationOutcome: No unsafe duplicate effect exists and an explicit retry is permitted.
RETRYABLE_UNKNOWN - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Operation existence or outcome is temporarily unknown.
RETRYABLE_UNKNOWN - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.ObservationState: Provider cannot currently determine whether the operation exists.
RetryPublication(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.RetryPublication: Validates the identifier.
reverse(X509AlgorithmIdentifier, X509AlgorithmRole) - Method in class zeroecho.pki.impl.framework.x509.X509BindingCatalog: Reverse-resolves an exact role-specific representation.
reviews() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewPage: Returns the value of the reviews record component.
revision() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.api.revocation.RevocationTransition: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the revision record component.
revision() - Method in interface zeroecho.pki.spi.store.MetadataSnapshot: Returns the captured non-negative committed store revision.
revision() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot: Returns the captured authoritative revision.
revision() - Method in interface zeroecho.pki.spi.store.RevocationView: Returns the captured global revision.
revision() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the revision record component.
revision() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the current compare-and-set revision.
REVOCATION_CREDENTIAL_NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: The credential targeted by a revocation transition does not exist.
REVOCATION_PERSIST_FAILED - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: Persisting a revocation transition failed against the underlying storage.
REVOCATION_RECOVERY_REQUIRED - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A revocation append outcome is unknown, so authoritative recovery is required.
REVOCATION_STATE_CORRUPT - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: The persisted revocation state is structurally invalid and requires recovery.
REVOCATION_STATE_UPDATE_FAILED - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A revocation failed for an unenumerated store reason; details are withheld.
REVOCATION_TERMINAL - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: The credential is already permanently revoked, so no further transition applies.
REVOCATION_TIME_UNAVAILABLE - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: The authoritative signing time source was unavailable for the revocation.
REVOCATION_TRANSITION_CONFLICT - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: The revocation transition conflicts with a later committed transition.
REVOCATION_TRANSITION_ILLEGAL - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: The requested revocation transition is not permitted from the current state.
RevocationCommand - Interface in zeroecho.pki.api.revocation: Closed, immutable commands accepted by the revocation state machine.
RevocationCommand.Hold - Record Class in zeroecho.pki.api.revocation: Places a credential on hold.
RevocationCommand.RevokePermanently - Record Class in zeroecho.pki.api.revocation: Permanently revokes a credential.
RevocationCommand.Unhold - Record Class in zeroecho.pki.api.revocation: Removes an existing hold.
revocationCommitment() - Method in record class zeroecho.pki.application.OcspResponseService.Response: Returns the value of the revocationCommitment record component.
RevocationEvidenceExecutor - Interface in zeroecho.pki.application: Narrow application seam for revocations that require authoritative evidence.
RevocationExecutionEvidence - Record Class in zeroecho.pki.application: Immutable, server-derived evidence co-committed with a revocation transition.
RevocationExecutionEvidence(RevocationExecutionEvidence.ActorType, String, String, String, RevocationExecutionEvidence.Authentication, RevocationExecutionEvidence.Authorization, Optional, Optional, Optional, RevocationExecutionEvidence.Outcome) - Constructor for record class zeroecho.pki.application.RevocationExecutionEvidence: Validates the closed evidence model.
RevocationExecutionEvidence.ActorType - Enum Class in zeroecho.pki.application: Stable evidence actor classifications.
RevocationExecutionEvidence.Authentication - Enum Class in zeroecho.pki.application: Stable evidence authentication classifications.
RevocationExecutionEvidence.Authorization - Enum Class in zeroecho.pki.application: Stable evidence authorization classifications.
RevocationExecutionEvidence.AuthorizationPath - Enum Class in zeroecho.pki.application: Administrative authorization path, with break-glass taking precedence.
RevocationExecutionEvidence.Outcome - Enum Class in zeroecho.pki.application: Outcome committed atomically with the transition.
RevocationHistory - Interface in zeroecho.pki.spi.store: Closeable one-pass history of one credential in credential-local revision order.
revocationHistoryPolicy() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the revocationHistoryPolicy record component.
RevocationInputs - Record Class in zeroecho.pki.api.revocation: Normalized inputs for revocation policy evaluation.
RevocationInputs(PkiId, RevocationReason, AttributeSet) - Constructor for record class zeroecho.pki.api.revocation.RevocationInputs: Creates revocation inputs.
RevocationQuery - Record Class in zeroecho.pki.api.revocation: Query constraints for searching revocation records.
RevocationQuery(Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.revocation.RevocationQuery: Creates a revocation query.
RevocationReason - Enum Class in zeroecho.pki.api.revocation: Revocation reason codes with PKIX-compatible semantics.
RevocationRecord - Record Class in zeroecho.pki.api.revocation: Immutable current revocation state for one credential.
RevocationRecord(PkiId, RevocationTransition) - Constructor for record class zeroecho.pki.api.revocation.RevocationRecord: Creates a current-state record.
revocationRevision() - Method in record class zeroecho.pki.application.OcspResponseService.Response: Returns the value of the revocationRevision record component.
revocations() - Method in interface zeroecho.pki.application.PkiSession: Returns the revocation service.
RevocationService - Interface in zeroecho.pki.api: Authoritative revocation transition, current-state, and history administration.
RevocationSnapshot - Interface in zeroecho.pki.spi.store: Stable, restartable ordered current-state view at one authoritative revision.
RevocationSnapshot.Cursor - Interface in zeroecho.pki.spi.store: One-pass current-state cursor.
RevocationState - Enum Class in zeroecho.pki.api.revocation: Effective state recorded by the authoritative global revocation log.
RevocationTransition - Record Class in zeroecho.pki.api.revocation: One committed transition in the authoritative global revocation log.
RevocationTransition(long, RevocationState, Instant, Optional, AttributeSet) - Constructor for record class zeroecho.pki.api.revocation.RevocationTransition: Validates structural transition fields.
RevocationTransitionFeed - Interface in zeroecho.pki.spi.store: Closeable append-ordered feed over one immutable captured revocation-log head.
RevocationTransitionFeed.Entry - Record Class in zeroecho.pki.spi.store: One authenticated append entry.
RevocationTransitionFeed.HighWatermark - Record Class in zeroecho.pki.spi.store: Immutable source head captured when the feed was opened.
RevocationTransitionFeed.Position - Record Class in zeroecho.pki.spi.store: Provider-defined opaque exclusive resume position.
RevocationView - Interface in zeroecho.pki.spi.store: Stable direct-lookup view of one authoritative revocation log revision.
RevokeCredential(PkiId, RevocationReason) - Constructor for record class zeroecho.pki.application.PkiOperation.RevokeCredential: Creates a revocation without justification.
RevokeCredential(PkiId, RevocationReason, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.RevokeCredential: Validates permanent revocation input.
REVOKED - Enum constant in enum class zeroecho.pki.api.credential.CredentialStatus: Credential is revoked.
revokedAfter() - Method in record class zeroecho.pki.api.revocation.RevocationQuery: Returns the value of the revokedAfter record component.
revokedBefore() - Method in record class zeroecho.pki.api.revocation.RevocationQuery: Returns the value of the revokedBefore record component.
revokedCount() - Method in record class zeroecho.pki.application.OcspResponseService.Response: Returns the value of the revokedCount record component.
revokeOverduePendingConfirmation(RevocationCommand.RevokePermanently) - Method in interface zeroecho.pki.api.RevocationService: Atomically re-evaluates and permanently revokes one overdue pending credential confirmation using the store's authoritative clock.
revokeOverduePendingConfirmation(RevocationCommand.RevokePermanently) - Method in class zeroecho.pki.impl.core.DefaultRevocationService
revokeOverduePendingCredentialConfirmation(RevocationCommand.RevokePermanently) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
revokeOverduePendingCredentialConfirmation(RevocationCommand.RevokePermanently) - Method in interface zeroecho.pki.spi.store.PkiStore: Permanently revokes one still-pending non-public credential strictly after its authoritative confirmation-review boundary.
RevokePendingCredentialConfirmation(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.RevokePendingCredentialConfirmation: Creates a revocation without justification.
RevokePendingCredentialConfirmation(PkiId, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.RevokePendingCredentialConfirmation: Validates bounded administrative input.
revokePermanently(RevocationCommand.RevokePermanently) - Method in interface zeroecho.pki.api.RevocationService: Permanently revokes a credential.
revokePermanently(RevocationCommand.RevokePermanently) - Method in class zeroecho.pki.impl.core.DefaultRevocationService
RevokePermanently(PkiId, RevocationReason, AttributeSet) - Constructor for record class zeroecho.pki.api.revocation.RevocationCommand.RevokePermanently: Validates and snapshots the command.
RFC822_NAME - Enum constant in enum class zeroecho.pki.api.profile.SubjectAlternativeNameType: RFC 822 mailbox name.
Rfc822Name(String) - Constructor for record class zeroecho.pki.api.request.SubjectAlternativeName.Rfc822Name: Canonicalizes and validates the mailbox.
role() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the role record component.
role() - Method in record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Returns the value of the role record component.
role() - Method in class zeroecho.pki.application.PkiRepositoryContent: Returns the representation role.
role() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRule: Returns the closed X.509 role.
ROLLOVER - Static variable in class zeroecho.pki.impl.core.continuation.IntermediateSigningCommand: Advances an existing intermediate authority to a new issuer generation.
ROLLOVER_INTERMEDIATE - Enum constant in enum class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.Operation: Rolls over or rotates an intermediate CA, advancing it to a new generation.
rolloverCaCertificate(CaRolloverCommand) - Method in interface zeroecho.pki.api.CaService: Performs a CA credential rollover while keeping the same key reference.
rolloverCaCertificate(CaRolloverCommand, CancellationSignal) - Method in interface zeroecho.pki.api.CaService: Rolls over a CA credential while carrying originating cancellation.
RolloverCaCertificate(PkiId, Optional) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.RolloverCaCertificate: Validates the rollover input.
Root(PkiId, Optional, AttributeSet) - Constructor for record class zeroecho.pki.api.ca.CaRolloverCommand.Root: Validates local structure without resolving authority state.
Root(PkiId, KeyRef, AttributeSet) - Constructor for record class zeroecho.pki.api.ca.CaKeyRotationCommand.Root: Validates local structure without resolving authority state.
ROOT - Enum constant in enum class zeroecho.pki.api.ca.CaKind: Root CA (initial credential is typically self-issued).
ROOT_CA - Enum constant in enum class zeroecho.pki.api.profile.CertificateProfileKind: Self-signed root certification-authority certificate.
rootAuthorityId(PkiId) - Static method in class zeroecho.pki.impl.core.continuation.DomainCommandEncoding: Derives the immutable authority identity for an internal root creation.
RootSigningPreparation - Class in zeroecho.pki.impl.core: Validates and stages one self-issued root TBS using borrowed session dependencies.
RootSigningPreparation(PkiStore, Clock, SigningProvider, X509AuthoritySnapshot, X509AlgorithmBindingRegistry, String, long) - Constructor for class zeroecho.pki.impl.core.RootSigningPreparation: Binds root preparation to the selected provider and its exact SIGN authority.
rotateCaKey(CaKeyRotationCommand) - Method in interface zeroecho.pki.api.CaService: Rotates the CA key reference and issues new corresponding CA credentials.
rotateCaKey(CaKeyRotationCommand, CancellationSignal) - Method in interface zeroecho.pki.api.CaService: Rotates a CA key while carrying originating cancellation.
RotateCaKey(PkiId, Optional, Optional) - Constructor for record class zeroecho.pki.application.PkiSigningOperation.RotateCaKey: Validates the rotation input.
RSA_PKCS1_DER - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.PublicKeyEncoding: Standard RSA PKCS#1 public-key DER.
RSA_PKCS1_DER - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.PublicKeyEncoding: Algorithm-defined PKCS#1 RSA public-key structure.
rsaMaximumModulusBits() - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteBinding: Returns the value of the rsaMaximumModulusBits record component.
ruleId() - Method in record class zeroecho.pki.api.policy.PolicyTraceStep: Returns the value of the ruleId record component.
rules() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns the value of the rules record component.
rules() - Method in record class zeroecho.pki.api.profile.SubjectPolicy: Returns the value of the rules record component.
rules() - Method in class zeroecho.pki.impl.framework.x509.X509BindingCatalog: Returns deterministic immutable binding rules.
rules() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRuleProvider: Returns immutable additive binding rules.
rules() - Method in interface zeroecho.pki.spi.algorithm.X509AlgorithmBindingProvider: Returns the contributed encoding rules.
RUNNING - Enum constant in enum class zeroecho.pki.util.async.AsyncState: The operation is currently being processed.
RUNTIME_CLOSING - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.CancellationReason: Runtime is closing.

S

sanFilter() - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Returns the value of the sanFilter record component.
sanFilter() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns the value of the sanFilter record component.
scan(MetadataSnapshot.KeyRange, CancellationSignal) - Method in interface zeroecho.pki.spi.store.MetadataSnapshot: Opens a lazy deterministic scan over this stable view.
SCEP_CMS - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authentication: Verified SCEP CMS message signature.
SCEP_SIGNER - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.ActorType: Verified SCEP CMS signer.
SCHEDULE_ADVANCED - Enum constant in enum class zeroecho.pki.api.schedule.StatusScheduleState.Phase: Next due instant committed; no regeneration is permitted.
scheduling() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DueCandidate: Returns the value of the scheduling record component.
SchedulingCoordinates(KeyRef, PkiId) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingCoordinates: Validates the required scheduling coordinates.
SchedulingPlan(SignWorkflowStore.SchedulingCoordinates, Optional) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingPlan: Validates both immutable coordinates.
SCHEMA_VERSION - Static variable in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Current certificate-profile document schema version.
schemaVersion() - Method in class zeroecho.pki.api.profile.ImportedCertificateProfileVersion: Returns the document schema version.
scope() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the scope record component.
scope(DomainCommandEncoding.Decoded, AccessContext, KeyRef) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Maps a validated prefix to disclosure scope using the retained envelope actor and exact signing key.
Scope - Section in class zeroecho.pki.impl.framework.x509.bc.OidAlgorithmMapper
Scope - Section in package zeroecho.pki.api.backup
Scope - Section in package zeroecho.pki.impl.audit
Scope - Section in package zeroecho.pki.impl.fs
Scope and responsibilities - Section in package zeroecho.pki.api.orch
scopeDigest() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the scopeDigest record component.
search(AuditQuery) - Method in interface zeroecho.pki.api.audit.AuditService: Searches audit events by query constraints.
search(AuditQuery) - Method in class zeroecho.pki.impl.audit.FileAuditSink
search(AuditQuery) - Method in class zeroecho.pki.impl.audit.InMemoryAuditSink
search(CredentialQuery) - Method in interface zeroecho.pki.api.CredentialInventoryService: Searches credentials by query constraints.
search(RequestQuery) - Method in interface zeroecho.pki.api.CertificationRequestService: Searches stored requests.
search(RequestQuery) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Searches stored certification requests matching the supplied query.
search(RevocationQuery) - Method in interface zeroecho.pki.api.RevocationService: Searches a stable ordered population view by current transition.
search(RevocationQuery) - Method in class zeroecho.pki.impl.core.DefaultRevocationService
searchCredentials(CredentialSearchQuery, Optional, int, Predicate, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
searchCredentials(CredentialSearchQuery, Optional, int, Predicate, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Searches current authoritative credentials using the configured derived index.
SearchCredentials(PkiId, int, Optional, Optional, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.SearchCredentials: Creates a search without a SAN constraint, preserving the original constructor.
SearchCredentials(PkiId, int, Optional, Optional, Optional, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.SearchCredentials: Validates the scope, page limit, exclusive cursor and optional filters.
searchRequests(RequestQuery, int) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
searchRequests(RequestQuery, int) - Method in interface zeroecho.pki.spi.store.PkiStore: Returns a bounded page of stored certification requests matching the query.
SECRET - Enum constant in enum class zeroecho.pki.api.attr.AttributeSensitivity: Secret value; must not be disclosed outside the strictest trust boundary.
Security - Section in class zeroecho.pki.PkiApplication
Security - Section in class zeroecho.pki.impl.async.FileBackedAsyncBusProvider
Security - Section in class zeroecho.pki.impl.audit.SyslogAuditSink
Security - Section in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory
Security - Section in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory
Security - Section in class zeroecho.pki.util.PkiIds
Security - Section in interface zeroecho.pki.spi.ConfigurableProvider
Security - Section in interface zeroecho.pki.spi.store.PkiStore
Security - Section in package zeroecho.pki.api.audit
Security - Section in package zeroecho.pki.impl.async
Security - Section in package zeroecho.pki.spi.async
Security - Section in package zeroecho.pki.util.async
Security - Section in package zeroecho.pki.util.async.codec
Security - Section in package zeroecho.pki.util.async.impl
Security - Section in record class zeroecho.pki.api.orch.WorkflowStateRecord
SECURITY_FLOOR - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: Non-overridable security floor rejected the identity.
Security and compliance requirements - Section in package zeroecho.pki.spi.audit
Security considerations - Section in class zeroecho.pki.impl.core.DefaultCertificationRequestService
Security considerations - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes
Security considerations - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework
Security considerations - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509FrameworkAttributeMapper
Security considerations - Section in class zeroecho.pki.impl.framework.x509.bc.OidAlgorithmMapper
Security considerations - Section in interface zeroecho.pki.impl.core.PublicKeyInfoResolver
Security considerations - Section in interface zeroecho.pki.spi.framework.CredentialIssuerBackend
Security considerations - Section in package zeroecho.pki.impl.core
Security considerations - Section in package zeroecho.pki.impl.core.attr
Security considerations - Section in package zeroecho.pki.impl.crypto.zeroecholib
Security considerations - Section in package zeroecho.pki.impl.framework.x509.bc
Security considerations - Section in package zeroecho.pki.impl.fs
Security constraints - Section in package zeroecho.pki.spi.crypto
Security Notes - Section in class zeroecho.pki.impl.fs.FilesystemPkiStore
Security properties - Section in class zeroecho.pki.impl.audit.DefaultAttributeGovernanceService
Security properties - Section in class zeroecho.pki.impl.audit.FileAuditSink
Security properties - Section in class zeroecho.pki.impl.audit.InMemoryAuditSink
Security properties - Section in class zeroecho.pki.impl.audit.StdoutAuditSink
Security properties - Section in package zeroecho.pki.impl.audit
Security properties - Section in record class zeroecho.pki.api.audit.AuditEvent
select(Class, String, SpiSelector.ProviderId) - Static method in class zeroecho.pki.spi.bootstrap.SpiSelector: Selects a provider for the given service type.
select(String, long) - Method in class zeroecho.pki.spi.crypto.SigningInputCapabilities: Selects prehash whenever advertised, otherwise checks the raw bound.
selectAuthoritiesPage(Optional, int, Predicate, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
selectAuthoritiesPage(Optional, int, Predicate, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Selects an authorized authority page before its limit is applied.
selectDueSignWorkflows(Instant, int) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
selectDueSignWorkflows(Instant, int) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Selects bounded reconciliation work ordered by its durable eligibility time.
selection() - Method in class zeroecho.pki.impl.framework.x509.X509ExecutionPlan: Returns the immutable semantic selection.
Selection - Section in package zeroecho.pki.spi.async
Selection(AlgorithmIdentity, AlgorithmSuite, X509AlgorithmIdentifier, AlgorithmExecutionCapability, AlgorithmExecutionCapability.Direction, String, String) - Constructor for record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Creates an immutable selection.
selectIssuancePath(PkiId, PkiId, PkiId, String) - Method in interface zeroecho.pki.api.CaService: Atomically selects the exact issuer generation and path used for future issuance and bundle construction.
SelectIssuancePath(PkiId, PkiId, PkiId, String) - Constructor for record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Creates an immutable issuance-selection request.
semanticCommitment() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the semanticCommitment record component.
semanticCommitment() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.BindingReference: Returns the value of the semanticCommitment record component.
semanticFingerprint() - Method in interface zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Policy: Returns stable non-secret policy semantics for snapshot provenance.
semanticFingerprint() - Method in class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Returns the stable snapshot fingerprint.
semanticFingerprint() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRule: Returns an immutable semantic fingerprint used for conflict diagnostics.
semanticFingerprint() - Method in class zeroecho.pki.impl.framework.x509.X509ComponentCatalog: Returns a deterministic semantic fingerprint.
semanticFingerprint() - Static method in class zeroecho.pki.impl.framework.x509.X509SecurityFloor: Returns immutable security-floor semantics for authority provenance.
semanticFingerprint() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the semanticFingerprint record component.
semanticFingerprint() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns the value of the semanticFingerprint record component.
Semantics - Section in package zeroecho.pki.impl.core.attr
semanticSigning() - Method in interface zeroecho.pki.application.PkiSession: Returns the semantic lifecycle facade sharing the configured signing runtime.
SemanticSigningKind - Enum Class in zeroecho.pki.api.signing: Finite domain namespaces for authoritative semantic signing correlation.
SemanticSigningOperation - Record Class in zeroecho.pki.api.signing: Immutable authoritative semantic observation.
SemanticSigningOperation(SigningSubmissionId, SemanticSigningScope, SigningOperationState, SemanticSigningState, long, long, Instant, Instant, Optional, Optional) - Constructor for record class zeroecho.pki.api.signing.SemanticSigningOperation: Validates and defensively snapshots the observed domain result.
SemanticSigningScope - Record Class in zeroecho.pki.api.signing: Immutable persisted coordinates for a caller's authorization cross-check.
SemanticSigningScope(SemanticSigningKind, String, AccessContext, KeyRef, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.signing.SemanticSigningScope: Validates immutable scope coordinates and the exact proof-kind combination.
SemanticSigningService - Interface in zeroecho.pki.api: Privileged, thread-safe lifecycle boundary for durably signed domain operations.
SemanticSigningState - Enum Class in zeroecho.pki.api.signing: Authoritative outer lifecycle, independent of the signature lifecycle.
SENSITIVE - Enum constant in enum class zeroecho.pki.api.attr.AttributeSensitivity: Sensitive value; disclosure may create security or privacy risk.
sensitivity() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns the value of the sensitivity record component.
sequence() - Method in record class zeroecho.pki.api.audit.AuditChainHead: Returns the value of the sequence record component.
sequence() - Method in record class zeroecho.pki.spi.store.AuditEvidenceFeed.Entry: Returns the value of the sequence record component.
SEQUENCE_GAP - Enum constant in enum class zeroecho.pki.api.audit.AuditIntegrityReport.Status: The sequence is not contiguous from zero (a record was deleted).
SEQUENCE_TAG - Static variable in class zeroecho.pki.impl.framework.x509.StreamingDerWriter: DER universal SEQUENCE tag.
sequenceNumber() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns the value of the sequenceNumber record component.
serial() - Method in record class zeroecho.pki.application.OcspResponseService.CertId: Returns the value of the serial record component.
serial() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the issuer-controlled serial.
serial() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the issuer-controlled serial.
SERIAL - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for an X.509 certificate serial number.
SERIAL_NUMBER - Enum constant in enum class zeroecho.pki.api.profile.SubjectRdnType: X.520 serial number attribute.
serialFilter() - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Returns the value of the serialFilter record component.
serialFilter() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns the value of the serialFilter record component.
SERIALIZABLE_MULTI_WRITER - Enum constant in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.WriterModel: Concurrent writers have serializable transaction outcomes.
serialNumber() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns the value of the serialNumber record component.
serialNumber() - Method in record class zeroecho.pki.spi.framework.CrlEntry: Returns the value of the serialNumber record component.
serialOrUniqueId() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the serialOrUniqueId record component.
serverAudience() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns the value of the serverAudience record component.
serverAudience() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns the value of the serverAudience record component.
serverAudience() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Returns the value of the serverAudience record component.
ServiceLoader compatibility - Section in class zeroecho.pki.impl.audit.FileAuditSink
Service registration - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFrameworkProvider
setCaState(PkiId, CaState, String) - Method in interface zeroecho.pki.api.CaService: Updates CA operational state.
SetStatusSchedule(PkiId, StatusObjectType, FormatId, Duration, long, boolean, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Validates the schedule configuration.
SHA1 - Enum constant in enum class zeroecho.pki.application.OcspResponseService.CertIdHash: SHA-1 CertID digest used by the mandatory OCSP interoperability profile.
sha256() - Method in interface zeroecho.pki.api.backup.BackupSource: Returns the commitment to the complete archive bytes.
sha256() - Method in interface zeroecho.pki.api.content.DurableContentReference: Returns the canonical lowercase SHA-256 integrity value.
sha256() - Method in class zeroecho.pki.application.PkiRepositoryContent: Returns the immutable content commitment.
sha256() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.ContentCommitment: Returns the value of the sha256 record component.
sha256() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns the value of the sha256 record component.
sha256() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CandidateBinding: Returns the value of the sha256 record component.
sha256(byte[]) - Static method in record class zeroecho.pki.spi.crypto.SigningProvider.ContentCommitment: Computes a SHA-256 commitment for materialized bytes.
SHA256 - Enum constant in enum class zeroecho.pki.application.OcspResponseService.CertIdHash: SHA-256 CertID digest.
SHA256_V1 - Static variable in record class zeroecho.pki.spi.crypto.SigningProvider.ContentCommitment: Current commitment version.
shortFingerprint() - Method in class zeroecho.pki.api.profile.CertificateProfileRef: Returns a short non-authoritative fingerprint suitable for audit metadata.
SHUTDOWN_TIMEOUT - Enum constant in enum class zeroecho.pki.api.SigningExecutionException.Classification: A non-cooperative execution step outlived forced shutdown.
SHUTTING_DOWN - Enum constant in enum class zeroecho.pki.api.SigningExecutionException.Classification: Admission has stopped because the runtime is shutting down.
sign(KeyRef, String, byte[]) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
sign(KeyRef, String, byte[]) - Method in interface zeroecho.pki.spi.crypto.AltSigningCapability: Signs the given content using the specified key and algorithm.
signature() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns the value of the signature record component.
signature() - Method in record class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator.CertificateBindings: Returns the value of the signature record component.
signature() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningStatus: Returns the value of the signature record component.
signature() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Returns the value of the signature record component.
SIGNATURE_ALGORITHM - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmRole: Signature algorithm on a certificate, CRL, or certification request.
SIGNATURE_INVALID - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionReason: The proof-of-possession signature was present but did not verify.
signatureAlgorithm() - Method in record class zeroecho.pki.api.signing.SigningRequest: Returns the value of the signatureAlgorithm record component.
signatureAlgorithm() - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Returns the value of the signatureAlgorithm record component.
signatureAlgorithm() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the signatureAlgorithm record component.
signatureAlgorithm() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Returns the value of the signatureAlgorithm record component.
signatureAlgorithm() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the signatureAlgorithm record component.
signatureBinding() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the signatureBinding record component.
signatureBindingId() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the signatureBindingId record component.
signatureEncoding() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns the value of the signatureEncoding record component.
signatureEncoding() - Method in record class zeroecho.pki.api.signing.SigningRequest: Returns the value of the signatureEncoding record component.
signatureEncoding() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns the value of the signatureEncoding record component.
signatureEncoding() - Method in interface zeroecho.pki.impl.framework.x509.X509BindingRule: Returns the exact signature-byte encoding rule.
signatureEncoding() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningStatus: Returns the value of the signatureEncoding record component.
signatureEncoding() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns the value of the signatureEncoding record component.
signatureEncoding() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns the value of the signatureEncoding record component.
signatureIdentifier() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the signatureIdentifier record component.
signatureLength() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the signatureLength record component.
signatureOffset() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the signatureOffset record component.
SIGNED - Enum constant in enum class zeroecho.pki.application.SigningExecutionEvidence.Outcome: The signing operation produced a signature.
SIGNED - Enum constant in enum class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningState: A signature has been produced.
SIGNED - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Signature was produced.
SignedObjectCompletion - Interface in zeroecho.pki.spi.framework: Read-only gate-produced signed status completion.
SignedObjectLayout(long, long, long, long, long, long, long, long, long, long, long, long, Optional, Optional) - Constructor for record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Creates an immutable layout for one validated signed object.
signing() - Method in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Returns the value of the signing record component.
signing() - Method in interface zeroecho.pki.application.PkiSession: Returns the configured durable signing service, if enabled.
signing() - Method in record class zeroecho.pki.application.PkiSessionConfiguration: Returns the value of the signing record component.
SIGNING - Enum constant in enum class zeroecho.pki.api.signing.SemanticSigningState: The domain continuation is waiting for signing or terminal reconciliation.
SIGNING - Enum constant in enum class zeroecho.pki.spi.store.DomainContinuationStore.State: Exact command and signing input are durably linked to live signing.
SIGNING_OPERATION - Enum constant in enum class zeroecho.pki.api.content.DurableContentOwner.Category: Pending or recoverable signing operation.
SigningAcceptanceDisposition - Enum Class in zeroecho.pki.api.signing: Finite durable signing-acceptance disposition.
SigningAcceptanceReceipt - Class in zeroecho.pki.api.signing: Immutable redacted receipt for resolving a possibly uncertain acceptance.
SigningAcceptanceResolution - Enum Class in zeroecho.pki.api.signing: Authoritative resolution of a possibly uncertain acceptance.
SigningAcceptanceResult - Record Class in zeroecho.pki.api.signing: Result of one durable acceptance attempt.
SigningAcceptanceResult(SigningAcceptanceDisposition, SigningAcceptanceReceipt) - Constructor for record class zeroecho.pki.api.signing.SigningAcceptanceResult: Validates the result.
signingCommands() - Method in interface zeroecho.pki.application.PkiSession: Returns shared signing-command preparation and completed-result projection.
signingCompactionTransientBudgetBytes() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the signingCompactionTransientBudgetBytes record component.
SigningComposition(SigningProvider, List) - Constructor for record class zeroecho.pki.spi.bootstrap.PkiBootstrap.SigningComposition: Captures an allocation and a defensive snapshot of its contribution.
SigningConfiguration(ProviderConfig, String, Duration, Optional, PkiSessionConfiguration.SigningTopology, OptionalLong) - Constructor for record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Validates and snapshots provider/domain configuration.
signingContent() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the signingContent record component.
SigningCoordinatorLimits(int, Duration, Duration, Duration, Duration) - Constructor for record class zeroecho.pki.application.PkiSessionConfiguration.SigningCoordinatorLimits: Validates explicit finite coordinator and duration bounds.
signingEvidenceAudit() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the signingEvidenceAudit record component.
SigningExecutionEvidence - Record Class in zeroecho.pki.application: Immutable, server-derived evidence for the terminal outcome of one signing operation (CA private-key usage).
SigningExecutionEvidence(String, String, String, String, Optional, SigningExecutionEvidence.Outcome) - Constructor for record class zeroecho.pki.application.SigningExecutionEvidence: Validates the closed evidence model.
SigningExecutionEvidence.Outcome - Enum Class in zeroecho.pki.application: Terminal signing outcomes.
SigningExecutionException - Exception Class in zeroecho.pki.api: Stable typed failure raised by the bounded signing execution runtime.
SigningExecutionException(SigningExecutionException.Classification, String) - Constructor for exception class zeroecho.pki.api.SigningExecutionException: Creates a stable signing execution failure.
SigningExecutionException(SigningExecutionException.Classification, String, Throwable) - Constructor for exception class zeroecho.pki.api.SigningExecutionException: Creates a stable signing execution failure with an internal lifecycle cause.
SigningExecutionException.Classification - Enum Class in zeroecho.pki.api: Small Increment 11 execution failure taxonomy.
signingHorizon() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
signingHorizon() - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Returns configured retention/identity horizon.
signingIdPermittedSkew() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the signingIdPermittedSkew record component.
SigningInputCapabilities - Class in zeroecho.pki.spi.crypto: Immutable, thread-safe input contract for a configured signing provider.
SigningInputCapabilities(long, Map) - Constructor for class zeroecho.pki.spi.crypto.SigningInputCapabilities: Creates a finite capability contract.
SigningInputCapabilities.Mode - Enum Class in zeroecho.pki.spi.crypto: Meaning of the transmitted signing input.
SigningKeyGroup(List, PkiSessionConfiguration.SigningLanePool) - Constructor for record class zeroecho.pki.application.PkiSessionConfiguration.SigningKeyGroup: Validates and snapshots one exact-key group without exposing key values.
signingKeyRef() - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns the value of the signingKeyRef record component.
signingKeyRef() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the signingKeyRef record component.
signingKeyRef() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the signingKeyRef record component.
SigningLanePool(int, int) - Constructor for record class zeroecho.pki.application.PkiSessionConfiguration.SigningLanePool: Validates explicit finite per-pool bounds.
signingMaximumGroupSize() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the signingMaximumGroupSize record component.
signingNamespace() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
signingNamespace() - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Returns the stable trusted namespace owned by this store.
signingNow() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
signingNow() - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Returns store-authoritative time.
signingOperation(PkiId) - Static method in record class zeroecho.pki.api.content.DurableContentOwner: Creates the canonical owner for one signing operation.
SigningOperation - Record Class in zeroecho.pki.api.signing: Immutable authoritative signing-operation snapshot.
SigningOperation(SigningSubmissionId, SigningOperationState, long, Instant, Instant, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.signing.SigningOperation: Validates and snapshots one public operation.
signingOperationHorizon() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the signingOperationHorizon record component.
signingOperationId() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns the value of the signingOperationId record component.
SigningOperationState - Enum Class in zeroecho.pki.api.signing: Public signing lifecycle projection.
SigningOuterTerminalDriver - Class in zeroecho.pki.impl.core.continuation: Idempotent local CA-proof verification and terminal-signing publication driver.
SigningOuterTerminalDriver(PkiStore) - Constructor for class zeroecho.pki.impl.core.continuation.SigningOuterTerminalDriver: Creates a driver borrowing the authoritative store.
SigningOuterTerminalDriver(PkiStore, X509AuthoritySnapshot, BcX509VerificationExecutor, long) - Constructor for class zeroecho.pki.impl.core.continuation.SigningOuterTerminalDriver: Creates the session driver with the exact selected verification authority.
SigningOuterTerminalDriver(PkiStore, X509BindingCatalog, long) - Constructor for class zeroecho.pki.impl.core.continuation.SigningOuterTerminalDriver: Creates a driver using the session's exact binding catalog and resolved EdDSA bound.
SigningPendingException() - Constructor for exception class zeroecho.pki.application.OcspResponseService.SigningPendingException: Creates the fixed safe pending disposition.
signingPermittedSkew() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
signingPermittedSkew() - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Returns the accepted future clock skew for signing identifiers.
SigningProvider - Interface in zeroecho.pki.spi.crypto: Stateless execution boundary for one configured signing provider.
SigningProvider.CallControl - Record Class in zeroecho.pki.spi.crypto: Per-invocation deadline and cooperative cancellation.
SigningProvider.CancellationReason - Enum Class in zeroecho.pki.spi.crypto: Finite non-sensitive reasons accepted by provider cancellation.
SigningProvider.ConfigurationCommitment - Class in zeroecho.pki.spi.crypto: Immutable 256-bit commitment to effective provider configuration.
SigningProvider.ContentCommitment - Record Class in zeroecho.pki.spi.crypto: Exact commitment to candidate bytes consumed by the provider.
SigningProvider.DetailCode - Enum Class in zeroecho.pki.spi.crypto: Finite safe detail codes; raw provider reasons never cross this boundary.
SigningProvider.ObservationState - Enum Class in zeroecho.pki.spi.crypto: Finite, non-sensitive provider observation taxonomy.
SigningProvider.OperationObservation - Record Class in zeroecho.pki.spi.crypto: Bounded observation returned directly by one provider call.
SigningProvider.SignRequest - Record Class in zeroecho.pki.spi.crypto: Exact immutable request for an already durably claimed dispatch.
SigningProviderExecutor - Class in zeroecho.pki.spi.crypto: Bound call executor that validates authoritative store/provider identity before every provider dispatch, reconciliation, or cancellation invocation.
SigningProviderExecutor(SignWorkflowStore, SigningProvider, Duration) - Constructor for class zeroecho.pki.spi.crypto.SigningProviderExecutor: Creates an O(1)-memory executor for one exact store/provider binding.
SigningProviderFactory - Interface in zeroecho.pki.spi.crypto: ServiceLoader factory for a configured SigningProvider.
SigningProviderRuntimeDependencies - Class in zeroecho.pki.spi.crypto: Immutable process-local capabilities and clock supplied to a signing factory.
signingProviders() - Method in record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Returns the value of the signingProviders record component.
SigningReactor - Class in zeroecho.pki.impl.core.signing: Bounded topology-aware pull reactor over the authoritative signing backlog.
SigningReactor(PkiStore, SigningProvider, PkiSessionConfiguration.SigningTopology, SigningStepExecutor.OuterTerminalDriver) - Constructor for class zeroecho.pki.impl.core.signing.SigningReactor: Creates a stopped topology reactor borrowing its store and provider.
SigningRequest - Record Class in zeroecho.pki.api.signing: Immutable privileged input for one sign-only operation.
SigningRequest(SigningSubmissionId, AccessContext, KeyRef, PkiId, AlgorithmIdentity, Encoding, Encoding) - Constructor for record class zeroecho.pki.api.signing.SigningRequest: Validates required components and the signature identity's semantic kind.
signingResidentIndexBudgetBytes() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the signingResidentIndexBudgetBytes record component.
signingRevision() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the signingRevision record component.
SigningService - Interface in zeroecho.pki.api: Privileged, session-owned application boundary for durable signing.
signingState() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the signingState record component.
SigningStepExecutor - Class in zeroecho.pki.impl.core.signing: Executes one durable signing step on the calling thread without scheduling work.
SigningStepExecutor(PkiStore, SigningProvider, Duration, SigningStepExecutor.OuterTerminalDriver) - Constructor for class zeroecho.pki.impl.core.signing.SigningStepExecutor: Creates an inline executor borrowing all execution dependencies.
SigningStepExecutor.OuterTerminalDriver - Interface in zeroecho.pki.impl.core.signing: Idempotently verifies a claimed CA proof or advances terminal outer publication.
SigningSubmissionId - Record Class in zeroecho.pki.api.orch: Versioned ZeroEcho signing-submission identifier.
SigningSubmissionId(PkiId, String, Instant) - Constructor for record class zeroecho.pki.api.orch.SigningSubmissionId: Validates and preserves the exact submission identity components.
SigningTopology(PkiSessionConfiguration.SigningCoordinatorLimits, List, PkiSessionConfiguration.SigningLanePool) - Constructor for record class zeroecho.pki.application.PkiSessionConfiguration.SigningTopology: Validates aggregate bounds, routing uniqueness, and snapshots groups.
signingTtl() - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Returns the value of the signingTtl record component.
signingTtl() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Returns the value of the signingTtl record component.
SignRequest(PkiId, String, String, SigningProvider.ConfigurationCommitment, long, AccessContext, KeyRef, String, SigningProvider.ContentCommitment, RepeatableContent, Optional, Optional, CancellationSignal) - Constructor for record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Validates structure and the constant-time canonical fingerprint.
SignWorkflowStore - Interface in zeroecho.pki.spi.store: Authoritative durable state machine for signing submissions.
SignWorkflowStore.AcceptanceCommand - Record Class in zeroecho.pki.spi.store: Transport-neutral immutable input consumed by one atomic acceptance.
SignWorkflowStore.AcceptanceCommitment - Class in zeroecho.pki.spi.store: Canonical, non-secret commitment to one complete acceptance command.
SignWorkflowStore.AcceptanceCommitments - Class in zeroecho.pki.spi.store: Canonical streaming encoder for the immutable acceptance commitment.
SignWorkflowStore.AcceptanceEnvelope - Record Class in zeroecho.pki.spi.store: Once-written immutable signing envelope.
SignWorkflowStore.AcceptanceResolution - Enum Class in zeroecho.pki.spi.store: Authoritative resolution of a potentially uncertain acceptance commit.
SignWorkflowStore.AcceptanceResult - Enum Class in zeroecho.pki.spi.store: Atomic durable acceptance disposition.
SignWorkflowStore.CandidateBinding - Record Class in zeroecho.pki.spi.store: Unique immutable candidate identity retained through the signing identity horizon.
SignWorkflowStore.CaSubjectProofOutcome - Record Class in zeroecho.pki.spi.store: Small immutable terminal provider evidence for an internal proof.
SignWorkflowStore.CaSubjectProofStep - Record Class in zeroecho.pki.spi.store: Immutable structural descriptor of a parent-owned internal CA proof step.
SignWorkflowStore.DueCandidate - Record Class in zeroecho.pki.spi.store: One lightweight reconciliation candidate.
SignWorkflowStore.DuePage - Record Class in zeroecho.pki.spi.store: One bounded identity-ordered page of lightweight reconciliation candidates.
SignWorkflowStore.InitialAttemptPhase - Enum Class in zeroecho.pki.spi.store: Persisted budget of the bounded initial attempt, separate from cleanup retries.
SignWorkflowStore.Mode - Enum Class in zeroecho.pki.spi.store: Immutable execution policy selected at acceptance.
SignWorkflowStore.MutableState - Record Class in zeroecho.pki.spi.store: Separately replaced mutable signing state.
SignWorkflowStore.OuterCommand - Record Class in zeroecho.pki.spi.store: Immutable outer-operation input paired atomically with signing acceptance.
SignWorkflowStore.Page - Record Class in zeroecho.pki.spi.store: One bounded snapshot page ordered by canonical submission identifier.
SignWorkflowStore.PageCandidate - Record Class in zeroecho.pki.spi.store: One ordered signing-record scan result.
SignWorkflowStore.ReconciliationFailureClass - Enum Class in zeroecho.pki.spi.store: Durable classification for one deferred reconciliation retry.
SignWorkflowStore.SchedulingCoordinates - Record Class in zeroecho.pki.spi.store: Immutable scheduling identity used to route one signing workflow.
SignWorkflowStore.SchedulingPlan - Record Class in zeroecho.pki.spi.store: Both immutable scheduling coordinates reserved at acceptance.
SignWorkflowStore.Stage - Enum Class in zeroecho.pki.spi.store: Durable stage of a parent-owned CA subject proof or ordinary signing.
SignWorkflowStore.State - Enum Class in zeroecho.pki.spi.store: Signing orchestration states.
SignWorkflowStore.Workflow - Record Class in zeroecho.pki.spi.store: Read-only aggregate assembled from one immutable envelope and mutable state.
SimpleAttributeSet - Class in zeroecho.pki.impl.framework.x509.bc: Minimal immutable AttributeSet implementation used by the Bouncy Castle backed X.509 framework adapter.
SimpleAttributeSet - Record Class in zeroecho.pki.impl.core.attr: Minimal immutable AttributeSet implementation used by PKI core runtime services.
SimpleAttributeSet() - Constructor for record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Creates an empty attribute set.
SimpleAttributeSet() - Constructor for class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet: Creates an empty attribute set.
SimpleAttributeSet(List) - Constructor for record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Creates an immutable attribute set from the supplied ordered entries.
SimpleAttributeSet.Builder - Class in zeroecho.pki.impl.core.attr: Mutable builder for SimpleAttributeSet.
SimpleAttributeSet.Builder - Class in zeroecho.pki.impl.framework.x509.bc: Mutable builder for SimpleAttributeSet.
SimpleAttributeSet.Entry - Record Class in zeroecho.pki.impl.core.attr: Immutable representation of one attribute entry.
SINGLE - Enum constant in enum class zeroecho.pki.api.profile.IssuanceApprovalRequirement: Issuance requires exactly one attributable administrative approval.
SINGLE - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: One ordinary signing step, including root self-signatures.
snapshot() - Method in interface zeroecho.pki.application.DashboardLiveSource: Collects each legacy getter independently; custom four-getter sources remain compatible.
snapshot() - Method in class zeroecho.pki.impl.audit.InMemoryAuditSink: Returns an immutable snapshot of all currently retained events in insertion order (oldest to newest).
snapshot() - Static method in class zeroecho.pki.impl.framework.x509.X509BuiltInDefaults: Returns a semantic fingerprint of all immutable defaults.
snapshot() - Method in class zeroecho.pki.impl.fs.DurableTransactionalMetadataStore: Opens a stable snapshot of the latest committed store revision.
snapshot() - Method in interface zeroecho.pki.spi.store.TransactionalMetadataStore: Opens a stable snapshot of the latest committed store revision.
snapshot() - Method in record class zeroecho.pki.util.async.AsyncEvent: Returns the value of the snapshot record component.
snapshot(OpId) - Method in interface zeroecho.pki.util.async.AsyncBus: Returns immutable operation metadata if present.
snapshot(OpId) - Method in class zeroecho.pki.util.async.impl.DurableAsyncBus: Returns the currently active snapshot for an operation.
snapshotBoundary() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the snapshotBoundary record component.
snapshotCommitment() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the snapshotCommitment record component.
snapshotId() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the snapshotId record component.
snapshotId() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot: Returns stable non-secret snapshot provenance.
snapshotRevision() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the snapshotRevision record component.
SnapshotRevocations(int) - Constructor for record class zeroecho.pki.application.PkiOperation.SnapshotRevocations: Validates the limit.
snapshotSourceStoreId() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the snapshotSourceStoreId record component.
SOURCE_ID - Static variable in record class zeroecho.pki.application.PublicationExecutionEvidence: Evidence attribute vocabulary.
SOURCE_TYPE - Static variable in record class zeroecho.pki.application.PublicationExecutionEvidence: Evidence attribute vocabulary.
sourceBackupId() - Method in record class zeroecho.pki.api.backup.RestoreIdentity: Returns the value of the sourceBackupId record component.
sourceId() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the sourceId record component.
sourceId() - Method in record class zeroecho.pki.api.publication.PublicationRequest: Returns the value of the sourceId record component.
sourceId() - Method in record class zeroecho.pki.application.PkiOperation.RegisterPublication: Returns the value of the sourceId record component.
sourceId() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns the value of the sourceId record component.
sourceId() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns the value of the sourceId record component.
sourceStoreId() - Method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Returns the value of the sourceStoreId record component.
sourceStoreId() - Method in interface zeroecho.pki.spi.store.RevocationSnapshot: Returns the durable source-store identity captured with this snapshot.
sourceStoreId() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Entry: Returns the value of the sourceStoreId record component.
sourceStoreId() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.HighWatermark: Returns the value of the sourceStoreId record component.
sourceType() - Method in record class zeroecho.pki.api.publication.PublicationQuery: Returns the value of the sourceType record component.
sourceType() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the sourceType record component.
sourceType() - Method in record class zeroecho.pki.api.publication.PublicationRequest: Returns the value of the sourceType record component.
sourceType() - Method in record class zeroecho.pki.application.PkiOperation.RegisterPublication: Returns the value of the sourceType record component.
sourceType() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns the value of the sourceType record component.
sourceType() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns the value of the sourceType record component.
SpiSelector - Class in zeroecho.pki.spi.bootstrap: Utility for selecting ServiceLoader providers by a stable identifier.
SpiSelector.ProviderId<T> - Interface in zeroecho.pki.spi.bootstrap: Provider id accessor used by the selector.
SpiSystemProperties - Class in zeroecho.pki.spi.bootstrap: Reads component configuration from system properties using a prefix convention.
spki() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Returns a defensive copy of the subject public-key encoding.
stability() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns the value of the stability record component.
Stability note - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes
STABLE - Enum constant in enum class zeroecho.pki.api.attr.AttributeStability: Attribute is stable and recommended for general use.
stage() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the stage record component.
stage() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the durable provider/local-verification stage.
stage(OneShotContent, Encoding, DurableContentReference.Lifecycle, CancellationSignal) - Method in interface zeroecho.pki.spi.store.StagedContentStore: Stages a one-shot input incrementally.
STAGED - Enum constant in enum class zeroecho.pki.api.backup.RestoreStatus.State: Prepared durably; closing and reopening the store is required.
stagedContent() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
stagedContent() - Method in interface zeroecho.pki.spi.store.PkiStore: Returns the runtime-owned durable streaming-content store.
stagedContentBytes() - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Returns the value of the stagedContentBytes record component.
StagedContentStore - Interface in zeroecho.pki.spi.store: Durable, runtime-owned staging boundary for signed-object content.
stageRestore(BackupSource) - Method in interface zeroecho.pki.api.BackupService: Durably stages a verified local replacement for activation on the next store open.
stageRestore(BackupSource) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Stages a verified replacement for cold activation on the next open.
stageRestore(BackupSource) - Method in interface zeroecho.pki.spi.store.PkiStore: Stages a verified replacement for cold activation on the next open.
stageRestore(BackupSource, PkiId) - Method in interface zeroecho.pki.api.BackupService: Stages a restore with a caller-persisted correlation identifier.
stageRestore(BackupSource, PkiId) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Stages a restore with a caller-persisted correlation identifier.
stageRestore(BackupSource, PkiId) - Method in interface zeroecho.pki.spi.store.PkiStore: Stages a restore with a caller-persisted correlation identifier.
standard(AlgorithmIdentity, X509AlgorithmBinding.Role) - Method in interface zeroecho.pki.api.algorithm.X509AlgorithmBindingRegistry: Resolves the standard default for one identity and role.
standard(AlgorithmIdentity, X509AlgorithmBinding.Role) - Method in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry
STANDARD - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Origin: Published standards assignment.
STANDARD_INTEROPERABLE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Interoperability: Published standards ecosystems.
STANDARD_ONLY - Enum constant in enum class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.Mode: Only sealed official bindings may be selected.
standardOnly() - Static method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Creates a standard-only policy with no private fallback.
StandardX509Bindings - Class in zeroecho.pki.impl.framework.x509: Immutable authoritative standard X.509 bootstrap bindings.
start() - Method in class zeroecho.pki.impl.core.signing.SigningReactor: Starts the scanner and every configured lane exactly once.
state() - Method in record class zeroecho.pki.api.backup.RestoreStatus: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.api.ca.CaQuery: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns the state derived exclusively from revision and confirmation requirement.
state() - Method in record class zeroecho.pki.api.revocation.RevocationTransition: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.application.DashboardLiveSource.Metric: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.application.PkiOperation.TransitionAuthority: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningStatus: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns the value of the state record component.
state() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the durable lifecycle state.
state() - Method in record class zeroecho.pki.util.async.AsyncStatus: Returns the value of the state record component.
STATE_OR_PROVINCE_NAME - Enum constant in enum class zeroecho.pki.api.profile.SubjectRdnType: X.520 state or province name.
status() - Method in record class zeroecho.pki.api.audit.AuditIntegrityReport: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.api.backup.RestoreIdentity: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.api.credential.CredentialQuery: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.api.policy.PolicyDecision: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.api.publication.PublicationResult: Returns the value of the status record component.
status() - Method in enum class zeroecho.pki.api.request.ProofOfPossessionReason: Returns the single verification status that corresponds to this reason.
status() - Method in record class zeroecho.pki.api.request.ProofOfPossessionResult: Returns the verification status implied by this result's reason.
status() - Method in record class zeroecho.pki.api.transfer.ExportQuery: Returns the value of the status record component.
status() - Method in record class zeroecho.pki.util.async.AsyncEvent: Returns the value of the status record component.
status(String, RemoteSigningTransport.RemoteCallControl) - Method in class zeroecho.pki.impl.crypto.remote.http.HttpsRemoteSigningTransport
status(String, RemoteSigningTransport.RemoteCallControl) - Method in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport: Reads the authoritative current status of one remote operation.
status(OpId) - Method in interface zeroecho.pki.util.async.AsyncBus: Retrieves the latest known status for an operation.
status(OpId) - Method in interface zeroecho.pki.util.async.AsyncEndpoint: Returns a best-effort current status for a known operation.
status(OpId) - Method in class zeroecho.pki.util.async.impl.DurableAsyncBus: Returns the last known status for an operation.
STATUS - Enum constant in enum class zeroecho.pki.api.signing.SemanticSigningKind: Signed certificate-status production.
STATUS - Enum constant in enum class zeroecho.pki.spi.store.DomainContinuationStore.Kind: CRL or another persisted status object.
STATUS_OBJECT - Enum constant in enum class zeroecho.pki.api.publication.PublicationSourceType: An immutable committed status object, such as a CRL or OCSP response.
STATUS_OBJECT - Enum constant in enum class zeroecho.pki.application.PkiRepositoryContent.Role: Other immutable status-object representation.
STATUS_OBJECT_ISSUER - Enum constant in enum class zeroecho.pki.api.credential.CredentialUse: Issuer credential used to sign a status object.
STATUS_OBJECT_RECORD - Enum constant in enum class zeroecho.pki.api.content.DurableContentOwner.Category: Persisted status-object record; integration is deferred.
STATUS_TARGET_NOT_FOUND - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A referenced status-generation target does not exist.
STATUS_TYPE - Static variable in record class zeroecho.pki.application.StatusGenerationEvidence: Evidence attribute vocabulary.
STATUS_UNAVAILABLE - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.ReconciliationFailureClass: Provider status could not be obtained.
statusFilter() - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Returns the value of the statusFilter record component.
statusFilter() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns the value of the statusFilter record component.
StatusGenerationEvidence - Record Class in zeroecho.pki.application: Immutable, server-derived evidence co-committed with a successfully generated status object (CRL, delta CRL, or persistent OCSP response).
StatusGenerationEvidence(String, String, String, String, Optional, StatusGenerationEvidence.Outcome) - Constructor for record class zeroecho.pki.application.StatusGenerationEvidence: Validates the closed evidence model.
StatusGenerationEvidence.Outcome - Enum Class in zeroecho.pki.application: Outcome committed with the status object.
Status mapping - Section in class zeroecho.pki.impl.crypto.remote.http.HttpsRemoteSigningTransport
statusObject() - Method in class zeroecho.pki.impl.framework.x509.X509SignedObjectCompletion: Returns the completed immutable status-object metadata.
statusObject() - Method in interface zeroecho.pki.spi.framework.SignedObjectCompletion: Returns the completed immutable status-object metadata.
statusObject(PkiId) - Method in interface zeroecho.pki.application.PkiRepository: Returns an exact status-object metadata record.
StatusObject - Record Class in zeroecho.pki.api.status: Generated status object used for revocation distribution.
StatusObject(PkiId, FormatId, PkiId, StatusObjectType, Instant, Optional, DurableContentReference, AttributeSet) - Constructor for record class zeroecho.pki.api.status.StatusObject: Creates a status object.
statusObjectAuthority(PkiId) - Method in interface zeroecho.pki.application.PkiResourceScopeResolver: Returns the exact logical issuer authority of one committed status object.
StatusObjectGenerateCommand - Record Class in zeroecho.pki.api.status: Command to generate a new status object for an issuer CA.
StatusObjectGenerateCommand(PkiId, StatusObjectType, FormatId, AttributeSet) - Constructor for record class zeroecho.pki.api.status.StatusObjectGenerateCommand: Creates a status generation command.
statusObjectGenerator() - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework: Returns the status-object generator used by this framework instance.
statusObjectGenerator() - Method in interface zeroecho.pki.spi.framework.CredentialFramework: Returns the status object generator for this framework.
StatusObjectGenerator - Interface in zeroecho.pki.spi.framework: Generates status objects for a credential framework (e.g., CRL/delta CRL/OCSP for X.509).
statusObjectId() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns the value of the statusObjectId record component.
statusObjectId() - Method in record class zeroecho.pki.api.status.StatusObject: Returns the value of the statusObjectId record component.
statusObjectId() - Method in record class zeroecho.pki.application.PkiOperation.InspectStatus: Returns the value of the statusObjectId record component.
statusObjectId() - Method in record class zeroecho.pki.impl.core.DeltaCrlBase: Returns the value of the statusObjectId record component.
StatusObjectQuery - Record Class in zeroecho.pki.api.status: Query constraints for listing status objects.
StatusObjectQuery(PkiId, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.status.StatusObjectQuery: Creates a status object query.
StatusObjectService - Interface in zeroecho.pki.api: Status object generation and retrieval.
statusObjectType() - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Returns the value of the statusObjectType record component.
StatusObjectType - Enum Class in zeroecho.pki.api.status: Identifies the kind of published status object.
StatusSchedule - Record Class in zeroecho.pki.api.schedule: Configures the automatic generation interval for one status-object family.
StatusSchedule(PkiId, StatusObjectType, FormatId, Duration, long, boolean, Optional, Instant, Instant, long) - Constructor for record class zeroecho.pki.api.schedule.StatusSchedule: Validates the schedule.
StatusScheduleCoordinator - Interface in zeroecho.pki.api.schedule: Borrowed session service for durable recurring status generation and recovery.
statusScheduleCursor(StatusSchedule) - Static method in interface zeroecho.pki.spi.store.PkiStore: Encodes an unambiguous configuration pagination cursor.
statusSchedules() - Method in interface zeroecho.pki.application.PkiSession: Returns the borrowed durable status-scheduling coordinator when signing and store support are configured.
StatusScheduleState - Record Class in zeroecho.pki.api.schedule: Immutable durable scheduling progress, separate from configuration revision.
StatusScheduleState(StatusSchedule, Instant, long, Optional) - Constructor for record class zeroecho.pki.api.schedule.StatusScheduleState: Validates the progress snapshot.
StatusScheduleState.Execution - Record Class in zeroecho.pki.api.schedule: Immutable claim and its current durable outcome.
StatusScheduleState.Phase - Enum Class in zeroecho.pki.api.schedule: Durable execution stages.
statusType() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the statusType record component.
statusType() - Method in record class zeroecho.pki.application.PkiOperation.InspectStatusSchedule: Returns the value of the statusType record component.
statusType() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Returns the value of the statusType record component.
StdoutAuditSink - Class in zeroecho.pki.impl.audit: Reference AuditSink provider writing a deterministic summary line to standard output.
StdoutAuditSink() - Constructor for class zeroecho.pki.impl.audit.StdoutAuditSink: Public no-arg constructor required for ServiceLoader.
StdoutAuditSinkProvider - Class in zeroecho.pki.impl.audit: AuditSinkProvider for the standard-output audit sink.
StdoutAuditSinkProvider() - Constructor for class zeroecho.pki.impl.audit.StdoutAuditSinkProvider: Creates a standard-output audit-sink provider descriptor.
steadyCurrentReservedBytes() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns the value of the steadyCurrentReservedBytes record component.
steadyHighWaterReservedBytes() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns the value of the steadyHighWaterReservedBytes record component.
steadyMaximumBytes() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns the value of the steadyMaximumBytes record component.
steps() - Method in record class zeroecho.pki.api.policy.PolicyTrace: Returns the value of the steps record component.
STORAGE_FAILURE - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Durable storage or content I/O failed.
Storage format - Section in class zeroecho.pki.impl.fs.ct.FsCtJournalStore
Storage layout - Section in class zeroecho.pki.impl.audit.FileAuditSink
Storage model - Section in record class zeroecho.pki.api.orch.WorkflowStateRecord
store() - Method in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Returns the value of the store record component.
store() - Method in record class zeroecho.pki.application.PkiSessionConfiguration: Returns the value of the store record component.
store(ParsedCertificationRequest, RequestStorePolicy) - Method in interface zeroecho.pki.api.CertificationRequestService: Stores a parsed request for later correlation and audit.
store(ParsedCertificationRequest, RequestStorePolicy) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Persists a parsed certification request according to the supplied storage policy.
STORE_ALWAYS - Enum constant in enum class zeroecho.pki.api.request.RequestStorePolicy: Always persist parsed requests.
STORE_DURABILITY_UNCONFIRMED - Enum constant in enum class zeroecho.pki.api.PkiFailureReason: A store mutation's durable outcome is unknown, so authoritative recovery must complete before processing continues.
STORE_ON_ISSUE - Enum constant in enum class zeroecho.pki.api.request.RequestStorePolicy: Persist parsed requests only after successful issuance.
StoreBackedEffectiveCredentialStatusResolver - Class in zeroecho.pki.impl.core: Store-backed authoritative resolver for runtime credential status.
StoreBackedEffectiveCredentialStatusResolver(PkiStore, Clock) - Constructor for class zeroecho.pki.impl.core.StoreBackedEffectiveCredentialStatusResolver: Creates a resolver using the supplied authoritative store and clock.
storeId() - Method in interface zeroecho.pki.api.content.DurableContentReference: Returns the canonical logical identity of the owning store.
storeId() - Method in interface zeroecho.pki.spi.store.MetadataSnapshot: Returns the issuing store identity.
storeId() - Method in record class zeroecho.pki.spi.store.MetadataTransactionId: Returns the value of the storeId record component.
StreamingCrlSignatureVerifier - Class in zeroecho.pki.impl.framework.x509: Stateless streaming signature verification shared by CRL preparation and publication.
StreamingDerReader - Class in zeroecho.pki.impl.framework.x509: Focused incremental canonical-DER structural validator.
StreamingDerReader() - Constructor for class zeroecho.pki.impl.framework.x509.StreamingDerReader: Creates a stateless canonical-DER reader.
StreamingDerReader.CertificateTbsLayout - Record Class in zeroecho.pki.impl.framework.x509: Immutable complete-TLV spans within one validated unsigned certificate TBS.
StreamingDerReader.CrlSemanticLayout - Record Class in zeroecho.pki.impl.framework.x509: Resource-free semantic projection of a structurally valid CRL.
StreamingDerReader.SignedObjectKind - Enum Class in zeroecho.pki.impl.framework.x509: Supported signed-object grammar.
StreamingDerReader.SignedObjectLayout - Record Class in zeroecho.pki.impl.framework.x509: Exact offsets into the validated original DER.
StreamingDerWriter - Class in zeroecho.pki.impl.framework.x509: Focused canonical DER streaming primitives used by signed-object adapters.
StreamingX509CrlTbsWriter - Class in zeroecho.pki.impl.framework.x509: Two-pass definite-length DER writer for a full RFC 5280 v2 TBSCertList.
StreamingX509CrlTbsWriter(X509AlgorithmIdentifier, byte[], byte[], Instant, Instant) - Constructor for class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter: Captures the exact selected algorithm and issuer Name.
StreamingX509CrlTbsWriter(X509AlgorithmIdentifier, byte[], byte[], Instant, Instant, Optional) - Constructor for class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter: Captures full or delta CRL fields before either streaming pass.
StreamingX509CrlTbsWriter.Measurement - Record Class in zeroecho.pki.impl.framework.x509: Constant-size first-pass evidence, containing no entries or encoded content.
STRICT_ABORT_ON_RESTART - Enum constant in enum class zeroecho.pki.api.orch.OrchestrationDurabilityPolicy: Fail-closed behavior.
strictSnapshotExport() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the strictSnapshotExport record component.
STRING - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: UTF-8 string value.
STRING - Static variable in class zeroecho.pki.impl.async.PkiCodecs: Codec for endpoint ids represented as strings.
StringValue(String) - Constructor for record class zeroecho.pki.api.attr.AttributeValue.StringValue: Creates a string value.
STRUCT - Enum constant in enum class zeroecho.pki.api.attr.AttributeValueType: Structured composite value.
STRUCTURED_DER - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.ParameterRule: Parameters are a binding-owned canonical DER structure.
subject(List) - Static method in class zeroecho.pki.impl.framework.x509.bc.BcX509ProfileSupport: Builds the exact ordered subject name.
SUBJECT_DN - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for the authoritative X.509 subject distinguished name.
SUBJECT_PUBLIC_KEY - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Role: SubjectPublicKeyInfo algorithm and public-key BIT STRING.
SUBJECT_PUBLIC_KEY_ALGORITHM - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmRole: Public-key algorithm in SubjectPublicKeyInfo.
SUBJECT_SPKI_DER - Static variable in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes: Attribute identifier for DER-encoded subject SubjectPublicKeyInfo data.
SubjectAlternativeName - Interface in zeroecho.pki.api.request: Closed immutable canonical Subject Alternative Name representation.
SubjectAlternativeName.DnsName - Record Class in zeroecho.pki.api.request: Canonical DNS A-label name.
SubjectAlternativeName.IpAddress - Record Class in zeroecho.pki.api.request: Canonical raw IPv4 or IPv6 address.
SubjectAlternativeName.Rfc822Name - Record Class in zeroecho.pki.api.request: Canonical ASCII RFC 822 mailbox.
SubjectAlternativeName.UriName - Record Class in zeroecho.pki.api.request: Canonical ASCII hierarchical absolute URI.
subjectAlternativeNameCritical() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the profile-derived SAN criticality.
subjectAlternativeNameCritical() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the profile-derived SAN criticality.
subjectAlternativeNamePolicy() - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Returns the value of the subjectAlternativeNamePolicy record component.
SubjectAlternativeNamePolicy - Record Class in zeroecho.pki.api.profile: Deny-by-default Subject Alternative Name policy.
SubjectAlternativeNamePolicy(int, int, List, boolean, Set, boolean, boolean, boolean) - Constructor for record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Validates and constructs the policy.
subjectAlternativeNamePresent() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the subjectAlternativeNamePresent record component.
SubjectAlternativeNameRule - Record Class in zeroecho.pki.api.profile: Occurrence and IP-family rule for one supported SAN type.
SubjectAlternativeNameRule(SubjectAlternativeNameType, int, int, boolean, boolean) - Constructor for record class zeroecho.pki.api.profile.SubjectAlternativeNameRule: Validates and constructs the rule.
subjectAlternativeNames() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the subjectAlternativeNames record component.
subjectAlternativeNames() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the approved subject alternative names.
subjectAlternativeNames() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the approved subject alternative names.
SubjectAlternativeNameType - Enum Class in zeroecho.pki.api.profile: Closed set of requester-supplied Subject Alternative Name types.
subjectAltPublicKeyInfo(byte[]) - Static method in class zeroecho.pki.impl.hybrid.AltSignatureExtensions: Creates a SubjectAltPublicKeyInfo extension from DER-encoded SPKI bytes.
subjectAuthorityId() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.CaSubject: Returns the value of the subjectAuthorityId record component.
subjectAuthorityId() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns the value of the subjectAuthorityId record component.
subjectCaId() - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Returns the value of the subjectCaId record component.
subjectCaId() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Returns the value of the subjectCaId record component.
subjectCaId() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the subject CA identifier.
subjectCaId() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the subject CA identifier.
subjectFilter() - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Returns the value of the subjectFilter record component.
subjectFilter() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns the value of the subjectFilter record component.
subjectKeyRef() - Method in record class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.FrozenPublication: Returns the value of the subjectKeyRef record component.
subjectKeyRef() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Returns the value of the subjectKeyRef record component.
subjectPolicy() - Method in record class zeroecho.pki.api.profile.CertificateProfile: Returns the value of the subjectPolicy record component.
subjectPolicy() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns the value of the subjectPolicy record component.
SubjectPolicy - Record Class in zeroecho.pki.api.profile: Deny-by-default subject distinguished-name policy.
SubjectPolicy(boolean, List) - Constructor for record class zeroecho.pki.api.profile.SubjectPolicy: Validates and constructs the policy.
subjectPublicKey() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Returns the value of the subjectPublicKey record component.
subjectPublicKey() - Method in record class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator.CertificateBindings: Returns the value of the subjectPublicKey record component.
subjectPublicKeyInfoDer() - Method in class zeroecho.pki.impl.core.CrlScope: Returns defensive copy of the canonical DER SPKI.
subjectPublicKeyInfoLength() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CertificateTbsLayout: Returns the value of the subjectPublicKeyInfoLength record component.
subjectPublicKeyInfoLength() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the subjectPublicKeyInfoLength record component.
subjectPublicKeyInfoOffset() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CertificateTbsLayout: Returns the value of the subjectPublicKeyInfoOffset record component.
subjectPublicKeyInfoOffset() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the subjectPublicKeyInfoOffset record component.
SubjectRdn - Record Class in zeroecho.pki.api.request: One ordered, single-valued, typed subject distinguished-name component.
SubjectRdn(SubjectRdnType, String) - Constructor for record class zeroecho.pki.api.request.SubjectRdn: Validates and constructs the component.
SubjectRdnRule - Record Class in zeroecho.pki.api.profile: Immutable occurrence and ownership rule for one supported subject RDN type.
SubjectRdnRule(SubjectRdnType, int, int, int, Optional, boolean) - Constructor for record class zeroecho.pki.api.profile.SubjectRdnRule: Validates and constructs a rule.
subjectRdns() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the subjectRdns record component.
subjectRdns() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the ordered canonical subject components.
subjectRdns() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the approved subject name.
subjectRdns() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the ordered canonical subject components.
subjectRdns() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the approved subject name.
SubjectRdnType - Enum Class in zeroecho.pki.api.profile: Closed set of X.509 subject distinguished-name attributes supported by end-entity certificate profiles.
subjectRef() - Method in record class zeroecho.pki.api.ca.CaCreateCommand: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.api.ca.CaQuery: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.api.ca.IntermediateCreateCommand: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.api.credential.CredentialQuery: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.api.request.RequestQuery: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.api.transfer.ExportQuery: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority: Returns the value of the subjectRef record component.
subjectRef() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Returns the value of the subjectRef record component.
subjectRef() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the canonical subject reference.
subjectRef() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the canonical inventory subject reference.
subjectRef() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the canonical subject reference.
subjectRef() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the canonical inventory subject reference.
SubjectRef - Record Class in zeroecho.pki.api: Framework-agnostic subject identifier.
SubjectRef(String) - Constructor for record class zeroecho.pki.api.SubjectRef: Creates a subject reference.
subjectRefString(List) - Static method in class zeroecho.pki.impl.framework.x509.bc.BcX509ProfileSupport: Renders the ordered subject name as its canonical string form, matching the representation used for SubjectRef identity throughout the runtime.
submission() - Method in record class zeroecho.pki.application.PkiOperation.CompleteCredentialConfirmationProof: Returns the value of the submission record component.
SUBMISSION_UNCERTAIN - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.ReconciliationFailureClass: Submission may have been accepted.
submissionId() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns the value of the submissionId record component.
submissionId() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns the value of the submissionId record component.
submissionId() - Method in record class zeroecho.pki.api.signing.SigningRequest: Returns the value of the submissionId record component.
submissionId() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns the value of the submissionId record component.
submissionId() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns the accepted operation identity, also used as its submission identity.
submit(OpId, String, Owner, EndpointId, Instant, Duration) - Method in interface zeroecho.pki.util.async.AsyncBus: Creates a new operation record and sets initial status to AsyncState.SUBMITTED.
submit(OpId, String, Owner, EndpointId, Instant, Duration) - Method in class zeroecho.pki.util.async.impl.DurableAsyncBus: Submits a new async operation.
submit(RemoteSigningTransport.RemoteSignRequest, RemoteSigningTransport.RemoteCallControl) - Method in class zeroecho.pki.impl.crypto.remote.http.HttpsRemoteSigningTransport
submit(RemoteSigningTransport.RemoteSignRequest, RemoteSigningTransport.RemoteCallControl) - Method in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport: Submits one signing request to the remote service.
SUBMITTED - Enum constant in enum class zeroecho.pki.util.async.AsyncState: The operation has been created and is awaiting processing.
subscribe(RemoteSigningTransport.RemoteSigningCallback) - Method in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport: Subscribes to best-effort remote status-change notifications.
subscribe(AsyncHandler) - Method in interface zeroecho.pki.util.async.AsyncBus: Subscribes a handler to status change events.
subscribe(AsyncHandler) - Method in class zeroecho.pki.util.async.impl.DurableAsyncBus: Subscribes an event handler to async bus events.
SUCCEEDED - Enum constant in enum class zeroecho.pki.api.publication.PublicationStatus: The exact attempted operation has a confirmed successful outcome.
SUCCEEDED - Enum constant in enum class zeroecho.pki.api.signing.SigningOperationState: A BINARY signature is retained.
SUCCEEDED - Enum constant in enum class zeroecho.pki.application.PublicationExecutionEvidence.Outcome: Publication completed successfully.
SUCCEEDED - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.ObservationState: Provider produced a signature.
SUCCEEDED - Enum constant in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Provider completed successfully with a trustworthy result.
SUCCEEDED - Enum constant in enum class zeroecho.pki.util.async.AsyncState: The operation completed successfully and the result is available for retrieval.
success() - Method in record class zeroecho.pki.api.backup.RestoreReport: Returns the value of the success record component.
SUCCESS - Enum constant in enum class zeroecho.pki.spi.publish.PublicationOutcome: The exact attempt completed successfully.
suite() - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Returns the value of the suite record component.
suiteId() - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteRef: Returns the value of the suiteId record component.
suiteId() - Method in interface zeroecho.pki.spi.confirmation.KeyPossessionProofProvider: Returns the canonical suite identity served by this provider.
SUPERSEDED - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: Credential has been superseded by a newer one.
supersededCredentialId(AttributeSet) - Static method in class zeroecho.pki.api.credential.CredentialLineage: Reads the predecessor credential identity a credential supersedes, if any.
SUPERSEDES_CREDENTIAL_ID - Static variable in class zeroecho.pki.api.credential.CredentialLineage: Metadata attribute carrying the predecessor credential identity superseded by this credential.
SUPERSESSION_REASON - Static variable in class zeroecho.pki.api.credential.CredentialLineage: Metadata attribute carrying the trusted REPLACE_END_ENTITY or REISSUE_END_ENTITY discriminator.
supportedAlgorithms() - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProvider
supportedAlgorithms() - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider
supportedAlgorithms() - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
supportedAlgorithms() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Returns the value of the supportedAlgorithms record component.
supportedAlgorithms() - Method in interface zeroecho.pki.spi.crypto.SigningProvider: Returns the immutable informational set of supported algorithm identities.
supportedKeys() - Method in class zeroecho.pki.impl.async.FileBackedAsyncBusProvider
supportedKeys() - Method in class zeroecho.pki.impl.audit.FileAuditSinkProvider
supportedKeys() - Method in class zeroecho.pki.impl.audit.InMemoryAuditSinkProvider
supportedKeys() - Method in class zeroecho.pki.impl.audit.StdoutAuditSinkProvider
supportedKeys() - Method in class zeroecho.pki.impl.audit.SyslogAuditSinkProvider
supportedKeys() - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory
supportedKeys() - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory
supportedKeys() - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory
supportedKeys() - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFrameworkProvider: Returns the provider-specific configuration keys supported by this provider.
supportedKeys() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStoreProvider
supportedKeys() - Method in class zeroecho.pki.impl.publish.FilesystemPublisherProvider
supportedKeys() - Method in class zeroecho.pki.impl.publish.HttpsPublisherProvider
supportedKeys() - Method in interface zeroecho.pki.spi.ConfigurableProvider: Returns the configuration keys understood by this backend.
supportingObjects() - Method in record class zeroecho.pki.api.credential.CredentialBundle: Returns the value of the supportingObjects record component.
supports(String) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Tests whether the exact operation uses this streaming CRL schema.
supports(String) - Static method in class zeroecho.pki.impl.core.continuation.IntermediateSigningCommand: Identifies the closed set sharing this exact 23-field schema.
supportsBackup() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
supportsBackup() - Method in interface zeroecho.pki.spi.store.PkiStore: Reports whether this store supports backup export and verification.
supportsCallbacks() - Method in interface zeroecho.pki.spi.crypto.remote.RemoteSigningTransport: Indicates whether the remote service pushes status changes to subscribers.
supportsHoldTransitions() - Method in interface zeroecho.pki.application.RevocationEvidenceExecutor: Reports whether both evidence-aware hold transition methods are implemented.
supportsSigningEvidenceFeed() - Method in interface zeroecho.pki.application.PkiSession: Reports whether optional terminal signing and internal-proof evidence is enabled.
supportsSigningEvidenceFeed() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
supportsSigningEvidenceFeed() - Method in interface zeroecho.pki.spi.store.PkiStore: Reports whether optional terminal signing and internal-proof evidence is enabled.
supportsStatusScheduling() - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
supportsStatusScheduling() - Method in interface zeroecho.pki.spi.store.PkiStore: Reports support for atomic schedule claims, signing acceptance and effects.
sweep(Instant) - Method in interface zeroecho.pki.util.async.AsyncBus: Performs periodic maintenance: expires operations past their deadline, polls endpoints for open operations (restart recovery), dispatches any discovered transitions.
sweep(Instant) - Method in class zeroecho.pki.util.async.impl.DurableAsyncBus: Performs one maintenance and polling sweep.
SyslogAuditSink - Class in zeroecho.pki.impl.audit: AuditSink that forwards audit events to a remote syslog server using RFC 5424 framing.
SyslogAuditSink(InetAddress, int, SyslogAuditSink.Protocol, String) - Constructor for class zeroecho.pki.impl.audit.SyslogAuditSink: Opens a syslog sink.
SyslogAuditSink.Protocol - Enum Class in zeroecho.pki.impl.audit: Syslog protocol selection.
SyslogAuditSinkProvider - Class in zeroecho.pki.impl.audit: AuditSinkProvider that creates a SyslogAuditSink.
SyslogAuditSinkProvider() - Constructor for class zeroecho.pki.impl.audit.SyslogAuditSinkProvider: Creates a syslog audit-sink provider descriptor.
system(String, String, String, String, Optional) - Static method in record class zeroecho.pki.application.StatusGenerationEvidence: Creates authoritative system status-generation evidence.
System property conventions - Section in class zeroecho.pki.spi.bootstrap.PkiBootstrap
systemUtc() - Static method in class zeroecho.pki.spi.store.PkiStoreRuntimeDependencies: Returns dependencies using the production system UTC clock.

T

tags() - Method in record class zeroecho.pki.api.attr.AttributeMeta: Returns the value of the tags record component.
target() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the target record component.
target() - Method in record class zeroecho.pki.api.publication.PublicationRequest: Returns the value of the target record component.
target() - Method in record class zeroecho.pki.application.PkiOperation.RegisterPublication: Returns the value of the target record component.
target() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns the value of the target record component.
target() - Method in interface zeroecho.pki.spi.publish.Publisher: Returns the exact administrator-configured destination served by this instance.
TARGET_ID - Static variable in record class zeroecho.pki.application.PublicationExecutionEvidence: Evidence attribute vocabulary.
TARGET_TYPE - Static variable in record class zeroecho.pki.application.PublicationExecutionEvidence: Evidence attribute vocabulary.
targetAuthorityId() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns the value of the targetAuthorityId record component.
targetId() - Method in record class zeroecho.pki.api.publication.PublicationTarget: Returns the value of the targetId record component.
targetId() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns the value of the targetId record component.
targetType() - Method in record class zeroecho.pki.api.publication.PublicationQuery: Returns the value of the targetType record component.
targetType() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns the value of the targetType record component.
tbsAlgorithmLength() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the tbsAlgorithmLength record component.
tbsAlgorithmOffset() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the tbsAlgorithmOffset record component.
tbsContent() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the tbsContent record component.
tbsLength() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the tbsLength record component.
tbsOffset() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the tbsOffset record component.
TCP - Enum constant in enum class zeroecho.pki.impl.audit.SyslogAuditSink.Protocol: Sends octet-counted records over a TCP connection.
template(String, String, List) - Static method in class zeroecho.pki.impl.core.continuation.IntermediateSigningCommand: Bounds exact framed size before encoding a prospective command.
template(PreparedFullCrlTbs) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Freezes bounded provenance for an already staged, validated TBS.
template(DomainContinuationStore.Kind, String, String...) - Static method in class zeroecho.pki.impl.core.continuation.DomainCommandEncoding: Encodes one exact prepared domain command from stable canonical fields.
TEMPORARY - Enum constant in enum class zeroecho.pki.api.content.DurableContentReference.Lifecycle: Content eligible for release after its immediate operation.
temporaryStorageBytes() - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Returns the value of the temporaryStorageBytes record component.
TemporaryUniqueIndex - Interface in zeroecho.pki.spi.store: Runtime-owned file-backed uniqueness index for bounded individual values.
terminal(String, String, String, String, long, Optional, Optional, PublicationExecutionEvidence.Outcome) - Static method in record class zeroecho.pki.application.PublicationExecutionEvidence: Creates authoritative terminal publication evidence.
terminal(String, String, String, String, Optional, SigningExecutionEvidence.Outcome) - Static method in record class zeroecho.pki.application.SigningExecutionEvidence: Creates authoritative terminal signing evidence.
TERMINAL_FAILURE - Enum constant in enum class zeroecho.pki.api.publication.PublicationStatus: The operation definitively failed and is terminal.
TERMINAL_FAILURE - Enum constant in enum class zeroecho.pki.application.PublicationExecutionEvidence.Outcome: Publication ended in a non-retryable failure.
TERMINAL_FAILURE - Enum constant in enum class zeroecho.pki.spi.publish.PublicationOutcome: The exact attempt definitively failed and must not be retried.
Terminology - Section in package zeroecho.pki.api.revocation
Text(String) - Constructor for record class zeroecho.pki.application.PkiOperationValue.Text: Validates the value.
THIS_UPDATE - Static variable in record class zeroecho.pki.application.StatusGenerationEvidence: Evidence attribute vocabulary.
thisUpdate() - Method in record class zeroecho.pki.api.status.StatusObject: Returns the value of the thisUpdate record component.
thisUpdate() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns the value of the thisUpdate record component.
thisUpdate() - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Returns the value of the thisUpdate record component.
thisUpdate() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the thisUpdate record component.
thisUpdate() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns the value of the thisUpdate record component.
Thread safety - Section in class zeroecho.pki.impl.audit.SyslogAuditSink
Thread safety - Section in class zeroecho.pki.impl.fs.ct.FsCtJournalStore
Thread safety - Section in class zeroecho.pki.spi.audit.CompositeAuditSink
Thread safety - Section in interface zeroecho.pki.spi.audit.AuditSink
Thread safety - Section in interface zeroecho.pki.spi.audit.AuditSinkProvider
Thread safety - Section in interface zeroecho.pki.spi.ct.CtJournalStore
Thread-safety - Section in class zeroecho.pki.impl.audit.InMemoryAuditSink
Thread-safety - Section in class zeroecho.pki.impl.core.DefaultCertificationRequestService
Thread-safety - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509CertificationRequestParser
Thread-safety - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFramework
Thread-safety - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFrameworkProvider
Thread-safety - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509FrameworkAttributeMapper
Thread-safety - Section in class zeroecho.pki.impl.framework.x509.bc.SimpleAttributeSet
Thread-safety - Section in class zeroecho.pki.util.async.impl.DurableAsyncBus
Thread-safety - Section in interface zeroecho.pki.impl.core.PublicKeyInfoResolver
Thread-safety - Section in interface zeroecho.pki.spi.framework.CredentialIssuerBackend
Thread-safety - Section in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet
Thread-safety and lifecycle - Section in package zeroecho.pki.spi.audit
THRESHOLD - Enum constant in enum class zeroecho.pki.api.profile.IssuanceApprovalRequirement: Issuance requires a multi-party (M-of-N) approval threshold.
time() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns the value of the time record component.
time() - Method in record class zeroecho.pki.api.revocation.RevocationTransition: Returns the value of the time record component.
timeliness() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns confirmation timeliness derived from the authoritative times.
TIMELY - Enum constant in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.Timeliness: Confirmation occurred at or before the timeliness review boundary.
timestamp() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns the value of the timestamp record component.
timeToLive() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns the value of the timeToLive record component.
Time travel and snapshots - Section in package zeroecho.pki.impl.fs
token() - Method in record class zeroecho.pki.spi.store.MetadataTransactionId: Returns the value of the token record component.
toLib(X509AlgorithmIdentifier) - Static method in class zeroecho.pki.impl.framework.x509.bc.BcX509AlgorithmAdapter: Converts a provider-neutral identifier to the PKIX library value type.
topology() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Returns the value of the topology record component.
toString() - Method in record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.attr.AttributeAccessPolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.attr.AttributeId: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.attr.AttributeMeta: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.attr.AttributeValue.BooleanValue: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.attr.AttributeValue.BytesValue: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.attr.AttributeValue.InstantValue: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.attr.AttributeValue.IntegerValue: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.attr.AttributeValue.StringValue: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.audit.AccessContext: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.audit.AuditChainHead: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.audit.AuditEvent: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.audit.AuditIntegrityReport: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.audit.AuditQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.audit.Principal: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.audit.Purpose: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.backup.BackupArtifact: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.backup.BackupLimits: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.backup.BackupRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.backup.BackupVerificationReport: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.backup.RestoreIdentity: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.backup.RestoreReport: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.backup.RestoreRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.backup.RestoreStatus: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.ca.CaCreateCommand: Returns a diagnostic representation without command coordinates or attributes.
toString() - Method in record class zeroecho.pki.api.ca.CaImportCommand: Returns a diagnostic representation without command coordinates, content or attributes.
toString() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Intermediate: Returns a diagnostic representation without command coordinates or attributes.
toString() - Method in record class zeroecho.pki.api.ca.CaKeyRotationCommand.Root: Returns a diagnostic representation without command coordinates or attributes.
toString() - Method in record class zeroecho.pki.api.ca.CaQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.ca.CaRecord: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Intermediate: Returns a diagnostic representation without command coordinates or attributes.
toString() - Method in record class zeroecho.pki.api.ca.CaRolloverCommand.Root: Returns a diagnostic representation without command coordinates or attributes.
toString() - Method in record class zeroecho.pki.api.ca.IntermediateCertIssueCommand: Returns a diagnostic representation without command coordinates or attributes.
toString() - Method in record class zeroecho.pki.api.ca.IntermediateCreateCommand: Returns a diagnostic representation without command coordinates or attributes.
toString() - Method in record class zeroecho.pki.api.ca.IssuerChainPath: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteBinding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.ConfirmationProofSuiteRef: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.ConfirmationRealmBinding: Returns the canonical realm identity.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallenge: Returns a safe structural description without disclosing raw challenge bytes.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationChallengeIssuance: Returns a structural description without disclosing nonce bytes.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationInitialization: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationPolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofCas: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallenge: Returns a structural description without presentation bytes.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofChallengeRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationProofSubmission: Returns a structural description without response bytes.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReview: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewCursor: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewPage: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.content.DeploymentResourcePolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.content.DurableContentOwner: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.content.ResourceLimit.LimitedTo: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.content.ResourceLimit.UnrestrictedByDeployment: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.credential.CaProfileBinding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.credential.Credential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.credential.CredentialBundle: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.credential.CredentialQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.credential.CredentialSearchQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.credential.EndEntityProfileBinding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.ct.CtLogDescriptor: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.EncodedObject: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.FormatId: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.AltSignature: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.Composite: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.None: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.hybrid.HybridCertificateMode.TwinCertificate: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.BundleCommand: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityIssuanceRequest: Returns a safe diagnostic description without requester or correlation values.
toString() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityRenewalRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.CorrelatedEndEntityReplacementRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Existing: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.CorrelatedIssuancePreparation.Prepared: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Returns a safe diagnostic representation.
toString() - Method in record class zeroecho.pki.api.issuance.EndEntityReissueRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.EndEntityRenewalRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.EndEntityReplacementRequest: Returns a redacted diagnostic representation.
toString() - Method in record class zeroecho.pki.api.issuance.IssuanceInputs: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.IssuanceIntent: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.ReissueCommand: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.RenewCommand: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.ReplaceCommand: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.issuance.RetainedIssuanceBinding: Returns a representation without privileged correlation or issuance coordinates.
toString() - Method in record class zeroecho.pki.api.issuance.VerificationPolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.IssuerRef: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.KeyRef: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.orch.SigningSubmissionId: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.PkiFailure: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.PkiId: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.policy.PolicyDecision: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.policy.PolicyTrace: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.policy.PolicyTraceStep: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.ActiveCertificateProfile: Returns a string representation of this record class.
toString() - Method in class zeroecho.pki.api.profile.BuiltInCertificateProfileTemplate
toString() - Method in record class zeroecho.pki.api.profile.CaCertificatePolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.CertificateProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.CertificateProfileDefinition: Returns a string representation of this record class.
toString() - Method in class zeroecho.pki.api.profile.CertificateProfileRef
toString() - Method in record class zeroecho.pki.api.profile.ExtendedKeyUsageId: Returns a string representation of this record class.
toString() - Method in class zeroecho.pki.api.profile.ImportedCertificateProfileVersion
toString() - Method in record class zeroecho.pki.api.profile.LeafCertificatePolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.ProfileQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNamePolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNameRule: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.SubjectPolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.SubjectRdnRule: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.BindingReference: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.publication.PublicationQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.publication.PublicationRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.publication.PublicationResult: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.publication.PublicationTarget: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.CertificationRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.ParsedCertificationRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.ProofOfPossessionResult: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.RequestQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.DnsName: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.IpAddress: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.Rfc822Name: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.UriName: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.SubjectRdn: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.request.X509EnrollmentPayload: Returns a diagnostic representation without request data.
toString() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Hold: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.RevokePermanently: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.revocation.RevocationCommand.Unhold: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.revocation.RevocationInputs: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.revocation.RevocationQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.revocation.RevocationRecord: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.revocation.RevocationTransition: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState.Execution: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.CaSubject: Returns a diagnostic representation without privileged coordinates.
toString() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofRequest.OcspResponder: Returns a diagnostic representation without privileged coordinates.
toString() - Method in record class zeroecho.pki.api.signing.ManagedKeyProofScope: Returns a diagnostic representation without privileged coordinates.
toString() - Method in record class zeroecho.pki.api.signing.SemanticSigningOperation: Returns a representation that omits privileged operation data.
toString() - Method in record class zeroecho.pki.api.signing.SemanticSigningScope: Returns a representation that omits privileged scope coordinates.
toString() - Method in class zeroecho.pki.api.signing.SigningAcceptanceReceipt
toString() - Method in record class zeroecho.pki.api.signing.SigningAcceptanceResult: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.signing.SigningOperation: Returns a deliberately redacted representation.
toString() - Method in record class zeroecho.pki.api.signing.SigningRequest: Returns a representation that omits privileged request metadata.
toString() - Method in record class zeroecho.pki.api.status.DeltaCrlRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.status.FullCrlRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.status.StatusObject: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.status.StatusObjectGenerateCommand: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.status.StatusObjectQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.SubjectRef: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.transfer.ExportArtifact: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.transfer.ExportQuery: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.transfer.ImportPolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.api.Validity: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.CredentialConfirmationProofAudience: Returns the exact public audience value.
toString() - Method in record class zeroecho.pki.application.CredentialConfirmationProofRuntimePolicy: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.DashboardLiveSource.Metric: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.IssuanceExecutionEvidence: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.LocalPkiSessionConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.LocalSigningResult.Completed: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.LocalSigningResult.Failed: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.OcspResponseService.CertId: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.OcspResponseService.Command: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.OcspResponseService.Response: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiConfigurationChoicesSource.Choices: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ActivateProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.CompleteCredentialConfirmationProof: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.HoldCredential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ImportRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectAlgorithmBinding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectAuthority: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectCredential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerChainPath: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectIssuerGeneration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectPublication: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectRevocation: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectStatus: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.InspectStatusSchedule: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.IssueCredentialConfirmationChallenge: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListAlgorithmBindings: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListAuthorities: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerChainPaths: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListIssuerGenerations: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListPendingCredentialConfirmations: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListProfiles: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListProfileVersions: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListPublications: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListRequests: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListStatus: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ListStatusSchedules: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ProcessPublication: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.QueryAuthorityMetrics: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.QueryCertificateMetrics: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.QueryPublicationMetrics: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.QueryRevocationMetrics: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.QueryServerMetrics: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ReadRevocationHistory: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ReconcilePublication: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.RegisterIssuerChainPath: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.RegisterProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.RegisterPublication: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.RetryPublication: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.RevokeCredential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.RevokePendingCredentialConfirmation: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.SearchCredentials: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.SelectIssuancePath: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.SetStatusSchedule: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.SnapshotRevocations: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.TransitionAuthority: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.UnholdCredential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ValidateAlgorithmBindings: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ValidateConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.ValidateProfile: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperation.VerifyRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Completed: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Failed: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperationOutcome.Pending: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperationResult: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperationValue.BooleanValue: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperationValue.IntegerValue: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperationValue.ListValue: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperationValue.ObjectValue: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiOperationValue.Text: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiResourceScopeResolver.CredentialScope: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.BindingProviderConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningCoordinatorLimits: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningKeyGroup: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningLanePool: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningTopology: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSessionConfiguration: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateAuthority: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.CreateIntermediate: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.GenerateStatus: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueCredential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.IssueIntermediateCertificate: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReissueCredential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.RenewCredential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.ReplaceCredential: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.RolloverCaCertificate: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PkiSigningOperation.RotateCaKey: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.PublicationExecutionEvidence: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.RevocationExecutionEvidence: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.SigningExecutionEvidence: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.application.StatusGenerationEvidence: Returns a string representation of this record class.
toString() - Method in class zeroecho.pki.impl.audit.InMemoryAuditSink
toString() - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet.Entry: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.continuation.DomainCommandEncoding.Decoded: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.continuation.DomainContinuationTemplate: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.continuation.FullCrlSnapshotProvenance: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.CaContext: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.continuation.ManagedKeyProofChallenge.Decoded: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.CorrelatedIssuanceIdentity: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.DeltaCrlBase: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns a string representation of this record class.
toString() - Method in class zeroecho.pki.impl.core.signing.DefaultPreparedSemanticSigningRequest: Returns a representation that omits prepared operation data.
toString() - Method in class zeroecho.pki.impl.core.signing.DefaultPreparedSigningRequest
toString() - Method in record class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.FrozenPublication: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.core.ValidatedCertificateRequest.FrozenIssuance: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator.CertificateBindings: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CertificateTbsLayout: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.CrlSemanticLayout: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectLayout: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter.Measurement: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Selection: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Component: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningWriterMetrics: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions.CredentialSearch: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.bootstrap.PkiBootstrap.SigningComposition: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofChallengeContext: Returns a structural description with nonce bytes redacted.
toString() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofCredential: Returns a structural description without public-key encoding or implementation details.
toString() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofDescriptor: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofPresentation: Returns a redacted structural description.
toString() - Method in record class zeroecho.pki.spi.confirmation.KeyPossessionProofResponse: Returns a redacted structural description.
toString() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCallControl: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteCapabilities: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningStatus: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.CallControl: Returns a string representation of this record class.
toString() - Method in class zeroecho.pki.spi.crypto.SigningProvider.ConfigurationCommitment
toString() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.ContentCommitment: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.SignRequest: Returns a deliberately redacted representation of the signing request.
toString() - Method in record class zeroecho.pki.spi.ct.CtJournalEntry: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.ct.CtJournalVerificationResult: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.framework.CrlEntry: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.ProviderConfig: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.publish.PublicationAttempt: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.AuditEvidenceFeed.Entry: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.MetadataCommitResult: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.MetadataKey: Returns the canonical serialized representation.
toString() - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.Integrity: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.MetadataStoreCapabilities: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.MetadataStoreId: Returns the canonical identity.
toString() - Method in record class zeroecho.pki.spi.store.MetadataTransactionId: Returns the complete current canonical representation.
toString() - Method in record class zeroecho.pki.spi.store.PkiStore.RequestSelection: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Entry: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.HighWatermark: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Position: Returns the opaque value.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommand: Returns a string representation of this record class.
toString() - Method in class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceCommitment
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceEnvelope: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CandidateBinding: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofOutcome: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.CaSubjectProofStep: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DueCandidate: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.DuePage: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.MutableState: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.OuterCommand: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Page: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.PageCandidate: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingCoordinates: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.SchedulingPlan: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.util.async.AsyncEvent: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.util.async.AsyncOperationSnapshot: Returns a string representation of this record class.
toString() - Method in record class zeroecho.pki.util.async.AsyncStatus: Returns a string representation of this record class.
totalLaneCount() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningTopology: Returns the maximum number of concurrent provider calls owned by this topology.
toZeroEchoAlgorithmId(String, X509AuthoritySnapshot) - Static method in class zeroecho.pki.impl.framework.x509.bc.OidAlgorithmMapper: Maps a dotted-decimal signature algorithm OID string to a ZeroEcho canonical signature algorithm identifier.
toZeroEchoAlgorithmId(AlgorithmIdentifier, X509AuthoritySnapshot) - Static method in class zeroecho.pki.impl.framework.x509.bc.OidAlgorithmMapper: Maps an ASN.1 signature AlgorithmIdentifier to a ZeroEcho canonical signature algorithm identifier.
TRANSACTION_NOT_ISSUED - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Transaction identity was never issued by this store.
TransactionalMetadataStore - Interface in zeroecho.pki.spi.store: Provider-neutral authority for finite transactional control metadata.
transactionId() - Method in record class zeroecho.pki.spi.store.MetadataCommitResult: Returns the value of the transactionId record component.
transientCurrentReservedBytes() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns the value of the transientCurrentReservedBytes record component.
transientHighWaterReservedBytes() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns the value of the transientHighWaterReservedBytes record component.
transientMaximumBytes() - Method in record class zeroecho.pki.impl.fs.FilesystemPkiStore.LocalSigningIndexCapacityMetrics: Returns the value of the transientMaximumBytes record component.
transition() - Method in record class zeroecho.pki.api.revocation.RevocationRecord: Returns the value of the transition record component.
TransitionAuthority(PkiId, CaState, String) - Constructor for record class zeroecho.pki.application.PkiOperation.TransitionAuthority: Creates an immutable state-transition request.
transitionCommitment() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Entry: Returns the value of the transitionCommitment record component.
transitionCommitment() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.HighWatermark: Returns the value of the transitionCommitment record component.
transitionDomainContinuation(PkiId, long, DomainContinuationStore.State, Optional, Optional) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
transitionDomainContinuation(PkiId, long, DomainContinuationStore.State, Optional, Optional) - Method in interface zeroecho.pki.spi.store.DomainContinuationStore: Replaces one continuation using its exact revision as the fence.
transitionRevocation(RevocationCommand, Instant) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
transitionRevocation(RevocationCommand, Instant) - Method in interface zeroecho.pki.spi.store.PkiStore: Atomically validates and appends one legal revocation transition.
transitionSign(PkiId, long, long, SignWorkflowStore.State, Optional, Optional, Optional) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
transitionSign(PkiId, long, long, SignWorkflowStore.State, Optional, Optional, Optional) - Method in interface zeroecho.pki.spi.store.SignWorkflowStore: Atomically transitions state when revision and fence are current.
transitionTime() - Method in record class zeroecho.pki.spi.framework.CrlEntry: Returns the value of the transitionTime record component.
Transport - Section in class zeroecho.pki.impl.audit.SyslogAuditSink
Trust boundary - Section in package zeroecho.pki.spi.crypto
TRUSTED_REVERSE_PROXY - Enum constant in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authentication: Identity asserted by a trusted reverse proxy.
TRUSTED_REVERSE_PROXY - Enum constant in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authentication: Identity asserted by a trusted reverse proxy.
ttl() - Method in record class zeroecho.pki.impl.core.continuation.DomainSigningRequest: Returns the value of the ttl record component.
TwinCertificate() - Constructor for record class zeroecho.pki.api.hybrid.HybridCertificateMode.TwinCertificate: Creates an instance of a TwinCertificate record class.
type() - Method in record class zeroecho.pki.api.audit.Principal: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.api.profile.SubjectAlternativeNameRule: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.api.profile.SubjectRdnRule: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.api.publication.PublicationTarget: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.DnsName
type() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.IpAddress
type() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.Rfc822Name
type() - Method in interface zeroecho.pki.api.request.SubjectAlternativeName: Returns the exact SAN type.
type() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.UriName
type() - Method in record class zeroecho.pki.api.request.SubjectRdn: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.api.status.StatusObject: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.api.status.StatusObjectGenerateCommand: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.api.status.StatusObjectQuery: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.application.PkiSigningOperation.GenerateStatus: Returns the value of the type record component.
type() - Method in record class zeroecho.pki.util.async.AsyncOperationSnapshot: Returns the value of the type record component.
Typical responsibilities - Section in package zeroecho.pki.api.attr

U

UDP - Enum constant in enum class zeroecho.pki.impl.audit.SyslogAuditSink.Protocol: Sends one datagram per record without delivery acknowledgement.
UI - Enum constant in enum class zeroecho.pki.api.attr.AttributeExportTarget: Export for UI rendering.
unavailable(String) - Static method in record class zeroecho.pki.application.DashboardLiveSource.Metric: Creates an explicit unavailable measurement without a numeric value.
UNAVAILABLE - Enum constant in enum class zeroecho.pki.application.DashboardLiveSource.State: No source is configured for this measurement.
UNCERTAIN - Enum constant in enum class zeroecho.pki.api.backup.RestoreStatus.State: Publication was not acknowledged; cold reconciliation must determine its outcome.
unhold(RevocationCommand.Unhold) - Method in interface zeroecho.pki.api.RevocationService: Removes an existing hold.
unhold(RevocationCommand.Unhold) - Method in class zeroecho.pki.impl.core.DefaultRevocationService
Unhold(PkiId, AttributeSet) - Constructor for record class zeroecho.pki.api.revocation.RevocationCommand.Unhold: Validates and snapshots the command.
UnholdCredential(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.UnholdCredential: Creates a release without justification.
UnholdCredential(PkiId, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.UnholdCredential: Validates the exact target and bounded optional justification.
UNKNOWN - Enum constant in enum class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningState: Remote service cannot currently determine whether the operation exists.
UNKNOWN - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.Outcome: The immediate caller cannot yet determine the fixed durable outcome.
UNKNOWN_IMPLEMENTATION - Enum constant in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: Explicit implementation is unavailable for the tuple.
UnknownAlgorithmIdentityException - Exception Class in zeroecho.pki.impl.framework.x509: Signals that an algorithm identity string could not be resolved to any known canonical identity or approved alias.
UnknownAlgorithmIdentityException(String) - Constructor for exception class zeroecho.pki.impl.framework.x509.UnknownAlgorithmIdentityException: Creates the exception with a non-sensitive message.
unknownCount() - Method in record class zeroecho.pki.application.OcspResponseService.Response: Returns the value of the unknownCount record component.
unlockEnvironmentVariable() - Method in record class zeroecho.pki.application.LocalSigningConfiguration: Returns the value of the unlockEnvironmentVariable record component.
unlockEnvironmentVariable() - Method in record class zeroecho.pki.application.PkiSessionConfiguration.SigningConfiguration: Returns the value of the unlockEnvironmentVariable record component.
UNRECOVERABLE - Enum constant in enum class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningState: Remote service guarantees the operation outcome cannot be recovered.
UNRECOVERABLE - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.ObservationState: Outcome cannot be recovered and execution must not be repeated.
UnrestrictedByDeployment() - Constructor for record class zeroecho.pki.api.content.ResourceLimit.UnrestrictedByDeployment: Creates an instance of a UnrestrictedByDeployment record class.
UNSPECIFIED - Enum constant in enum class zeroecho.pki.api.revocation.RevocationReason: Reason not specified.
UNSUPPORTED_ALGORITHM - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionReason: The request's algorithm is not supported for proof-of-possession verification.
UNSUPPORTED_CAPABILITY - Enum constant in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Adapter lacks an optional requested capability.
UNSUPPORTED_SIGNATURE_ENCODING - Enum constant in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Requested signature encoding is unsupported.
UNTIL_ACKNOWLEDGED - Enum constant in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.OutcomeRetention: Known terminal outcomes may be released after acknowledgement.
unwrap(byte[]) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509PublicKeyAdapter: Returns provider-native SPKI DER for verification or key import.
update(OpId, AsyncStatus, Optional) - Method in interface zeroecho.pki.util.async.AsyncBus: Updates status and optional result for an operation.
update(OpId, AsyncStatus, Optional) - Method in class zeroecho.pki.util.async.impl.DurableAsyncBus: Applies a status update and an optional result to an existing operation.
updatedAt() - Method in record class zeroecho.pki.api.orch.WorkflowStateRecord: Returns the value of the updatedAt record component.
updatedAt() - Method in record class zeroecho.pki.api.publication.PublicationRecord: Returns the value of the updatedAt record component.
updatedAt() - Method in record class zeroecho.pki.api.schedule.StatusSchedule: Returns the value of the updatedAt record component.
updatedAt() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningStatus: Returns the value of the updatedAt record component.
updatedAt() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.OperationObservation: Returns the value of the updatedAt record component.
updatedAt() - Method in record class zeroecho.pki.util.async.AsyncStatus: Returns the value of the updatedAt record component.
upperExclusive() - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.KeyRange: Returns the value of the upperExclusive record component.
URI - Enum constant in enum class zeroecho.pki.api.profile.SubjectAlternativeNameType: Hierarchical absolute URI.
UriName(String) - Constructor for record class zeroecho.pki.api.request.SubjectAlternativeName.UriName: Canonicalizes and validates the URI.
USABLE - Enum constant in enum class zeroecho.pki.api.credential.EffectiveCredentialStatus: The credential is issued, unrevoked, and within its validity interval.
Use cases - Section in package zeroecho.pki.api.transfer
usesProofKey() - Method in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: Returns whether scheduling still uses the proof key.
utf8Length() - Method in record class zeroecho.pki.api.KeyRef: Returns the exact byte length produced by UTF-8 encoding without allocating an encoded byte array.

V

valid() - Method in record class zeroecho.pki.api.backup.BackupVerificationReport: Returns the value of the valid record component.
validAt() - Method in record class zeroecho.pki.api.credential.CredentialQuery: Returns the value of the validAt record component.
validate(byte[], int) - Method in class zeroecho.pki.impl.framework.x509.StreamingDerReader: Validates one complete canonical DER object held in an explicitly bounded byte array.
validate(String, Instant, Duration, Duration) - Method in record class zeroecho.pki.api.orch.SigningSubmissionId: Validates namespace and lifetime against store-authoritative time.
validate(RepeatableContent, CancellationSignal) - Method in class zeroecho.pki.impl.framework.x509.StreamingDerReader: Validates one complete canonical DER object.
validate(PkiId, DomainContinuationStore.Record, int) - Static method in class zeroecho.pki.impl.core.continuation.DomainContinuationValidation: Validates one decoded continuation against its authoritative metadata key.
validate(DomainCommandEncoding.Decoded) - Static method in class zeroecho.pki.impl.core.continuation.FullCrlSigningCommand: Validates the canonical scalar schema without opening any content.
validate(DomainCommandEncoding.Decoded) - Static method in class zeroecho.pki.impl.core.continuation.IntermediateSigningCommand: Validates frozen proof coordinates and canonical provenance only.
validate(DomainContinuationTemplate) - Static method in class zeroecho.pki.impl.core.continuation.DomainContinuationValidation: Validates an internal preparation template with the same canonical schema rules used for durable continuations.
validate(RemoteSigningTransport.RemoteCapabilities) - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Validates against server-captured capabilities, never trusting the client's mode or semantic fingerprint.
validateAlgorithm(DomainCommandEncoding.Decoded, X509AuthoritySnapshot) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Resolves signature semantics separately from configuration-independent durable structure validation.
ValidateAlgorithmBindings(Optional, Optional) - Constructor for record class zeroecho.pki.application.PkiOperation.ValidateAlgorithmBindings: Validates paired optional values.
validateAuditConfiguration(ProviderConfig) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Validates an explicit audit configuration without allocating a sink.
validateBeforeImport() - Method in record class zeroecho.pki.api.transfer.ImportPolicy: Returns the value of the validateBeforeImport record component.
validateCertificate(RepeatableContent, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator: Validates one complete canonical certificate and its exact bindings.
validateComplete(DomainCommandEncoding.Decoded) - Static method in class zeroecho.pki.impl.core.continuation.ManagedKeyProofCommand: Validates the complete 14-field internal preparation schema and aggregate encoded size before command allocation.
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.async.FileBackedAsyncBusProvider: Validates configuration for the durable file-backed async bus provider.
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.audit.FileAuditSinkProvider: Validates configuration for the file-backed audit sink provider.
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.audit.InMemoryAuditSinkProvider: Validates configuration for the in-memory audit sink provider.
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.audit.StdoutAuditSinkProvider: Validates configuration for the standard-output audit sink provider.
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.audit.SyslogAuditSinkProvider
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.crypto.pkcs11.Pkcs11SigningProviderFactory: Validates configuration for the PKCS#11 signing provider.
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory: Validates configuration for the ZeroEcho-lib signing provider.
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509CredentialFrameworkProvider: Validates configuration for the Bouncy Castle backed X.509 credential framework provider.
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStoreProvider: Validates configuration for the filesystem-backed PKI store provider.
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.publish.FilesystemPublisherProvider
validateConfig(ProviderConfig) - Method in class zeroecho.pki.impl.publish.HttpsPublisherProvider
validateConfig(ProviderConfig) - Method in interface zeroecho.pki.spi.ConfigurableProvider: Validates the provided configuration before allocation.
ValidateConfiguration() - Constructor for record class zeroecho.pki.application.PkiOperation.ValidateConfiguration: Creates an instance of a ValidateConfiguration record class.
validateCredential(KeyPossessionProofCredential) - Method in interface zeroecho.pki.spi.confirmation.KeyPossessionProofProvider: Validates the request-local authoritative public key against the exact configured suite binding and key profile before any caller performs a mutation.
validateCredentialFrameworkConfiguration(ProviderConfig) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Validates one explicit credential-framework provider configuration without constructing a framework instance.
ValidatedCaCertificateRequest - Class in zeroecho.pki.impl.core: Immutable gate-produced CA certificate request accepted by the issuer backend.
ValidatedCaCertificateRequest.FrozenPublication - Record Class in zeroecho.pki.impl.core: Exact parent issuance selection and subject managed-key binding.
ValidatedCaCertificateRequest.Operation - Enum Class in zeroecho.pki.impl.core: Closed CA certificate operations authorized by this gate.
ValidatedCaRequest - Interface in zeroecho.pki.spi.framework: Read-only gate-produced validated certificate request.
ValidatedCertificateRequest - Class in zeroecho.pki.impl.core: Immutable gate-produced end-entity certificate construction authority.
ValidatedCertificateRequest.FrozenIssuance - Record Class in zeroecho.pki.impl.core: Exact issuer generation, chain path, and optional caller idempotency binding.
ValidatedLeafRequest - Interface in zeroecho.pki.spi.framework: Read-only gate-produced validated certificate request.
validateEvidence(Optional, AccessContext, String, String) - Static method in class zeroecho.pki.impl.core.EndEntitySigningPreparation: Checks trusted evidence against the actor and already frozen issuance scope.
validateGeneratedCertificate(RepeatableContent, X509ExecutionPlan, CancellationSignal) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator: Validates a generated certificate against its exact live signing plan.
validateGeneratedCrl(RepeatableContent, X509ExecutionPlan, X509Certificate, Instant, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator: Validates a generated CRL against its exact live signing plan and issuer certificate.
validateGeneratedOcsp(RepeatableContent, X509ExecutionPlan, X509Certificate, Instant, Optional, CancellationSignal) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509SignedObjectValidator: Validates a generated persistent OCSP status object at the service boundary: the plan is re-authorized, the DER parses as a SUCCESSFUL OCSP response, its responder id and single-response update times bind to the expected metadata, and its signature verifies under the responder (issuer) public key.
validateNamespace() - Method in interface zeroecho.pki.spi.store.TemporaryUniqueIndex: Validates every committed entry before the namespace is trusted.
ValidateProfile(byte[]) - Constructor for record class zeroecho.pki.application.PkiOperation.ValidateProfile: Defensively copies the document.
validatePublisherConfiguration(ProviderConfig) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Validates one explicitly enabled publication destination without opening it.
validateSigningBinding(PkiId, PkiId, KeyRef, String, Optional) - Method in interface zeroecho.pki.application.OcspResponseService: Proves that one configured confined key capability signs as the exact responder certificate before a durable responder is activated.
validateSigningBinding(PkiId, PkiId, KeyRef, String, Optional, CancellationSignal) - Method in interface zeroecho.pki.application.OcspResponseService: Validates responder signing while carrying originating cancellation.
validateSigningDomain(String, Duration, Duration) - Method in class zeroecho.pki.impl.crypto.remote.RemoteSigningProvider
validateSigningDomain(String, Duration, Duration) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider
validateSigningDomain(String, Duration, Duration) - Method in interface zeroecho.pki.spi.crypto.SigningProvider: Validates the authoritative store/provider signing domain.
validateSigningProviderConfiguration(ProviderConfig) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Validates one explicit signing-provider configuration without allocating key access or provider resources.
validateStoreConfiguration(ProviderConfig) - Static method in class zeroecho.pki.spi.bootstrap.PkiBootstrap: Validates an explicit store configuration without allocating a store.
validateSubjectPublicKeyInfo(byte[], int) - Method in class zeroecho.pki.impl.framework.x509.StreamingDerReader: Validates one canonical DER SubjectPublicKeyInfo value, including the X.509 requirement that its public-key BIT STRING have zero unused bits.
Validation - Section in record class zeroecho.pki.api.audit.AuditEvent
VALIDATION_FAILURE - Enum constant in enum class zeroecho.pki.api.PkiFailureClassification: Caller-controlled input is malformed, incomplete, or otherwise invalid.
VALIDATION_FAILURE - Enum constant in enum class zeroecho.pki.api.PkiFailureCode: Generic invalid-input failure.
VALIDATION_FAILURE - Enum constant in enum class zeroecho.pki.application.PkiOperationFailure: Typed input or operation precondition is malformed.
validity() - Method in record class zeroecho.pki.api.credential.Credential: Returns the value of the validity record component.
validity() - Method in record class zeroecho.pki.api.status.DeltaCrlRequest: Returns the value of the validity record component.
validity() - Method in record class zeroecho.pki.api.status.FullCrlRequest: Returns the value of the validity record component.
validity() - Method in class zeroecho.pki.impl.core.ValidatedCaCertificateRequest: Returns the approved exact validity.
validity() - Method in class zeroecho.pki.impl.core.ValidatedCertificateRequest: Returns the approved issuer-time validity.
validity() - Method in interface zeroecho.pki.spi.framework.ValidatedCaRequest: Returns the approved exact validity.
validity() - Method in interface zeroecho.pki.spi.framework.ValidatedLeafRequest: Returns the approved issuer-time validity.
Validity - Record Class in zeroecho.pki.api: Validity interval for an issued credential.
Validity(Instant, Instant) - Constructor for record class zeroecho.pki.api.Validity: Creates a validity interval.
validityOverride() - Method in record class zeroecho.pki.api.issuance.EndEntityIssuanceRequest: Returns the value of the validityOverride record component.
validityOverride() - Method in record class zeroecho.pki.api.issuance.EndEntityRenewalRequest: Returns the value of the validityOverride record component.
validityOverride() - Method in record class zeroecho.pki.api.issuance.IssueEndEntityCommand: Returns the value of the validityOverride record component.
validityOverride() - Method in record class zeroecho.pki.api.issuance.RenewCommand: Returns the value of the validityOverride record component.
validityOverride() - Method in class zeroecho.pki.impl.core.VerifiedIssuanceCandidate: Returns the optional validated validity override.
value() - Method in record class zeroecho.pki.api.attr.AttributeId: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.attr.AttributeValue.BooleanValue: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.attr.AttributeValue.BytesValue: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.attr.AttributeValue.InstantValue: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.attr.AttributeValue.IntegerValue: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.attr.AttributeValue.StringValue: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.audit.Purpose: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.confirmation.ConfirmationRealmBinding: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.confirmation.CredentialConfirmationReviewCursor: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.FormatId: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.KeyRef: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.PkiId: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.DnsName: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.Rfc822Name: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.request.SubjectAlternativeName.UriName: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.request.SubjectRdn: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.api.SubjectRef: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.application.CredentialConfirmationProofAudience: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.application.DashboardLiveSource.Metric: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.application.PkiOperationValue.BooleanValue: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.application.PkiOperationValue.IntegerValue: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.application.PkiOperationValue.Text: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.spi.store.MetadataSnapshot.Integrity: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.spi.store.MetadataStoreId: Returns the value of the value record component.
value() - Method in record class zeroecho.pki.spi.store.RevocationTransitionFeed.Position: Returns the value of the value record component.
valueOf(String) - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Interoperability: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Origin: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.ParameterRule: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.PublicKeyEncoding: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Role: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.SignatureEncoding: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.attr.AttributeExportTarget: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.attr.AttributeSensitivity: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.attr.AttributeStability: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.attr.AttributeValueType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.audit.AccessAction: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.audit.AccessDecision: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.audit.AuditIntegrityReport.Status: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.backup.RestoreStatus.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.ca.CaKind: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.ca.CaState: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.ca.IssuerGenerationState: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.Timeliness: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.confirmation.CredentialConfirmationProofResult: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.content.DurableContentOwner.Category: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.content.DurableContentReference.Lifecycle: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.credential.CredentialStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.credential.CredentialUse: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.credential.EffectiveCredentialStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.Encoding: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.orch.OrchestrationDurabilityPolicy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.PkiFailureClassification: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.PkiFailureCode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.PkiFailureReason: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.policy.PolicyDecisionStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.profile.CaKeyUsage: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.profile.CertificateProfileKind: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.profile.IssuanceApprovalRequirement: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.profile.LeafKeyUsage: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.profile.SubjectAlternativeNameType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.profile.SubjectRdnType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.Mode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.publication.PublicationEvidence: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.publication.PublicationFailure: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.publication.PublicationSourceType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.publication.PublicationStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.publication.PublicationTargetType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.request.ProofOfPossessionReason: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.request.ProofOfPossessionStatus: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.request.RequestStorePolicy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.request.X509EnrollmentPayload.Kind: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.revocation.RevocationReason: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.revocation.RevocationState: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.schedule.StatusScheduleState.Phase: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.signing.ManagedKeyProofPurpose: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.signing.SemanticSigningKind: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.signing.SemanticSigningState: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.signing.SigningAcceptanceDisposition: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.signing.SigningAcceptanceResolution: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.signing.SigningOperationState: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.SigningExecutionException.Classification: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.status.StatusObjectType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.api.transfer.ExportFormat: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.DashboardLiveSource.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.ActorType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authentication: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authorization: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.AuthorizationPath: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Outcome: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.OcspResponseService.CertIdHash: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.OcspResponseService.ResponderId: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.PkiOperationFailure: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.PkiRepositoryContent.Role: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.PublicationExecutionEvidence.Outcome: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.ActorType: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authentication: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authorization: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.AuthorizationPath: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.Outcome: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.SigningExecutionEvidence.Outcome: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.application.StatusGenerationEvidence.Outcome: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.audit.SyslogAuditSink.Protocol: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.Operation: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectKind: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier.ParameterForm: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmRole: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.PublicKeyEncoding: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.SignatureEncoding: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Kind: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.fs.FsHistoryPolicy.CleanupStrategy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.impl.secrets.PublisherSecretsProtection: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.confirmation.KeyPossessionProofVerification: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningState: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.crypto.SigningInputCapabilities.Mode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.crypto.SigningProvider.CancellationReason: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.crypto.SigningProvider.ObservationState: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.publish.PublicationOutcome: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.DomainContinuationStore.Kind: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.DomainContinuationStore.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.MetadataCommitResult.Outcome: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.ContentLengthModel: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.OptionalFeature: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.OutcomeRetention: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.WriterModel: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResolution: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResult: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.Mode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.ReconciliationFailureClass: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class zeroecho.pki.util.async.AsyncState: Returns the enum constant of this class with the specified name.
values() - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Interoperability: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Origin: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.ParameterRule: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.PublicKeyEncoding: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Role: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.SignatureEncoding: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.attr.AttributeExportTarget: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.attr.AttributeSensitivity: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.attr.AttributeStability: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.attr.AttributeValueType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.audit.AccessAction: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.audit.AccessDecision: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.audit.AuditIntegrityReport.Status: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.backup.RestoreStatus.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.ca.CaKind: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.ca.CaState: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.ca.IssuerGenerationState: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.confirmation.ConfirmationDisclosurePolicy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.confirmation.CredentialConfirmationLifecycle.Timeliness: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.confirmation.CredentialConfirmationProofResult: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.content.DurableContentOwner.Category: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.content.DurableContentReference.Lifecycle: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.credential.CredentialStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.credential.CredentialUse: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.credential.EffectiveCredentialStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.Encoding: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.orch.OrchestrationDurabilityPolicy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.PkiFailureClassification: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.PkiFailureCode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.PkiFailureReason: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.policy.PolicyDecisionStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.profile.CaKeyUsage: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.profile.CertificateProfileKind: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.profile.IssuanceApprovalRequirement: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.profile.LeafKeyUsage: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.profile.SubjectAlternativeNameType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.profile.SubjectRdnType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy.Mode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.publication.PublicationEvidence: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.publication.PublicationFailure: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.publication.PublicationSourceType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.publication.PublicationStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.publication.PublicationTargetType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.request.ProofOfPossessionReason: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.request.ProofOfPossessionStatus: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.request.RequestStorePolicy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.request.X509EnrollmentPayload.Kind: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.revocation.RevocationReason: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.revocation.RevocationState: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.schedule.StatusScheduleState.Phase: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.signing.ManagedKeyProofPurpose: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.signing.SemanticSigningKind: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.signing.SemanticSigningState: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.signing.SigningAcceptanceDisposition: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.signing.SigningAcceptanceResolution: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.signing.SigningOperationState: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.SigningExecutionException.Classification: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.status.StatusObjectType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.api.transfer.ExportFormat: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.DashboardLiveSource.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.ActorType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authentication: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Authorization: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.AuthorizationPath: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.IssuanceExecutionEvidence.Outcome: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.OcspResponseService.CertIdHash: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.OcspResponseService.ResponderId: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.PkiOperationFailure: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Method in record class zeroecho.pki.application.PkiOperationValue.ListValue: Returns the value of the values record component.
values() - Static method in enum class zeroecho.pki.application.PkiRepositoryContent.Role: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.PublicationExecutionEvidence.Outcome: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.ActorType: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authentication: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.Authorization: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.AuthorizationPath: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.RevocationExecutionEvidence.Outcome: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.SigningExecutionEvidence.Outcome: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.application.StatusGenerationEvidence.Outcome: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.audit.SyslogAuditSink.Protocol: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Method in record class zeroecho.pki.impl.core.attr.SimpleAttributeSet.Entry: Returns the value of the values record component.
values() - Static method in enum class zeroecho.pki.impl.core.ValidatedCaCertificateRequest.Operation: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.framework.x509.StreamingDerReader.SignedObjectKind: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmIdentifier.ParameterForm: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver.Failure: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.framework.x509.X509AlgorithmRole: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.PublicKeyEncoding: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.framework.x509.X509BindingRule.SignatureEncoding: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.framework.x509.X509ComponentCatalog.Kind: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.fs.FsHistoryPolicy.CleanupStrategy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.ProfileLifecycleFailure.Code: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.impl.secrets.PublisherSecretsProtection: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.confirmation.KeyPossessionProofVerification: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSigningState: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.crypto.SigningInputCapabilities.Mode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.crypto.SigningProvider.CancellationReason: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.crypto.SigningProvider.DetailCode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.crypto.SigningProvider.ObservationState: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.publish.PublicationOutcome: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.DomainContinuationStore.Kind: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.DomainContinuationStore.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.MetadataCommitResult.FailureCategory: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.MetadataCommitResult.Outcome: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.ContentLengthModel: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.OptionalFeature: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.OutcomeRetention: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.MetadataStoreCapabilities.WriterModel: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResolution: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.AcceptanceResult: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.InitialAttemptPhase: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.Mode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.ReconciliationFailureClass: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.Stage: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.spi.store.SignWorkflowStore.State: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class zeroecho.pki.util.async.AsyncState: Returns an array containing the constants of this enum class, in the order they are declared.
valueType() - Method in record class zeroecho.pki.api.attr.AttributeDefinition: Returns the value of the valueType record component.
Value typing - Section in class zeroecho.pki.impl.framework.x509.bc.BcX509Attributes
VerificationPolicy - Record Class in zeroecho.pki.api.issuance: Constraints for certification request verification.
VerificationPolicy(boolean, Optional) - Constructor for record class zeroecho.pki.api.issuance.VerificationPolicy: Creates a verification policy.
VERIFIED - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionReason: Proof-of-possession evidence was successfully verified.
VERIFIED - Enum constant in enum class zeroecho.pki.api.request.ProofOfPossessionStatus: Proof-of-possession has been successfully verified.
VERIFIED - Enum constant in enum class zeroecho.pki.spi.confirmation.KeyPossessionProofVerification: The proof cryptographically verifies for the authoritative context.
VerifiedIssuanceCandidate - Class in zeroecho.pki.impl.core: Immutable internal authority for a request that passed the issuance PoP gate.
verify(long, long) - Method in class zeroecho.pki.impl.fs.ct.FsCtJournalStore
verify(long, long) - Method in interface zeroecho.pki.spi.ct.CtJournalStore: Re-computes and validates the hash chain for the specified sequence range.
verify(RepeatableContent, String, X509Certificate, byte[], X509BindingCatalog, CancellationSignal) - Static method in class zeroecho.pki.impl.framework.x509.StreamingCrlSignatureVerifier: Verifies exact TBS bytes against the supplied issuer and returns their SHA-256.
verify(ParsedCertificationRequest, VerificationPolicy) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509ProofOfPossessionVerifier: Verifies the retained request's original self-signature or signing-key PoP.
verify(ParsedCertificationRequest, VerificationPolicy) - Method in interface zeroecho.pki.spi.framework.ProofOfPossessionVerifier: Verifies proof-of-possession for the requested public key.
verify(X509AuthoritySnapshot, X509ExecutionPlan, byte[], AlgorithmIdentifier, RepeatableContent, byte[]) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509VerificationExecutor: Verifies one signature using an already-authorized exact plan.
verify(KeyPossessionProofChallengeContext, KeyPossessionProofCredential, KeyPossessionProofResponse) - Method in interface zeroecho.pki.spi.confirmation.KeyPossessionProofProvider: Verifies one bounded response against the complete authoritative context.
verifyAnchoredPrefix(AuditChainHead) - Method in interface zeroecho.pki.api.audit.AuditIntegrityService: Verifies internal chain consistency and that anchor is an authentic prefix of the log.
verifyAnchoredPrefix(AuditChainHead) - Method in class zeroecho.pki.impl.audit.FileAuditSink
verifyAndComplete(CredentialConfirmationProofSubmission) - Method in interface zeroecho.pki.api.confirmation.CredentialConfirmationService: Resolves one bounded key-possession response against its exact confirmation lifecycle.
verifyAndComplete(CredentialConfirmationProofSubmission) - Method in class zeroecho.pki.impl.core.DefaultCredentialConfirmationService
verifyBackup(BackupArtifact) - Method in interface zeroecho.pki.api.BackupService: Verifies a backup artifact for structural validity and integrity.
verifyBackup(BackupArtifact) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Verifies a bounded legacy archive using the same verifier as streaming input.
verifyBackup(BackupArtifact) - Method in interface zeroecho.pki.spi.store.PkiStore: Verifies integrity and offline recoverability of a bounded legacy backup.
verifyBackupSource(BackupSource) - Method in interface zeroecho.pki.api.BackupService: Checks an untrusted streaming archive after bounded file-backed ingestion.
verifyBackupSource(BackupSource) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore: Checks an untrusted streaming archive after bounded file-backed ingestion.
verifyBackupSource(BackupSource) - Method in interface zeroecho.pki.spi.store.PkiStore: Checks an untrusted streaming archive after bounded file-backed ingestion.
verifyIntegrity(Optional) - Method in interface zeroecho.pki.api.audit.AuditIntegrityService: Verifies the audit-log hash chain, optionally against a trusted head.
verifyIntegrity(Optional) - Method in class zeroecho.pki.impl.audit.FileAuditSink: Verifies the tamper-evident hash chain over the entire durable audit log.
verifyProofOfPossession(ParsedCertificationRequest, VerificationPolicy) - Method in interface zeroecho.pki.api.CertificationRequestService: Verifies proof-of-possession (PoP) for the private key corresponding to the requested public key.
verifyProofOfPossession(ParsedCertificationRequest, VerificationPolicy) - Method in class zeroecho.pki.impl.core.DefaultCertificationRequestService: Verifies proof of possession for a previously parsed certification request.
VerifyRequest(PkiId) - Constructor for record class zeroecho.pki.application.PkiOperation.VerifyRequest: Validates the identifier.
version() - Method in record class zeroecho.pki.application.PkiSessionConfiguration: Returns the value of the version record component.
version() - Method in record class zeroecho.pki.spi.crypto.SigningProvider.ContentCommitment: Returns the value of the version record component.
version() - Method in record class zeroecho.pki.spi.store.DomainContinuationStore.Record: Returns the value of the version record component.
visitAuthorityKeyReferences(Consumer, CancellationSignal) - Method in class zeroecho.pki.impl.fs.FilesystemPkiStore
visitAuthorityKeyReferences(Consumer, CancellationSignal) - Method in interface zeroecho.pki.spi.store.PkiStore: Visits known issuing-key references from authoritative CA metadata without collecting all CAs.
visitKnownKeyReferences(Consumer) - Method in class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProvider: Visits private-key references already known by this local keyring without opening private key material.

W

wake() - Method in class zeroecho.pki.impl.core.signing.SigningReactor: Coalesces a nonblocking durable-work notification.
warnings() - Method in record class zeroecho.pki.api.backup.RestoreReport: Returns the value of the warnings record component.
wireFingerprint() - Method in record class zeroecho.pki.spi.crypto.remote.RemoteSigningTransport.RemoteSignRequest: Computes a server-owned replay commitment over every wire coordinate and payload.
Wiring model - Section in package zeroecho.pki.impl.framework.x509.bc
withAuditSink(AuditSink) - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns a dependency set using one lifecycle-owned shared audit sink.
withClock(Clock) - Static method in class zeroecho.pki.spi.crypto.SigningProviderRuntimeDependencies: Supplies the clock shared with signing submission and recovery validation.
withCredentialConfirmationProofPolicy(CredentialConfirmationProofRuntimePolicy) - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns dependencies containing one exact server-controlled proof runtime policy.
withCredentialSearch(Optional) - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns a copy with explicitly selected credential-search resources.
withDashboardLiveSource(DashboardLiveSource) - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns dependencies wired to one explicit server-layer live counter source.
withInitialCrlNumber(BigInteger) - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns an immutable copy with the initial number for new CRL scope counters.
withKeyPossessionProofProviders(List) - Method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Returns dependencies containing the exact explicitly trusted proof providers.
withKeyringUnlockProvider(KeyringUnlockProvider) - Static method in record class zeroecho.pki.application.PkiSessionRuntimeDependencies: Creates dependencies containing one explicit process-local unlock provider.
withKeyringUnlockProvider(KeyringUnlockProvider) - Static method in class zeroecho.pki.spi.crypto.SigningProviderRuntimeDependencies: Returns dependencies carrying one explicit keyring unlock provider.
withKeyringUnlockProvider(KeyringUnlockProvider, Clock) - Static method in class zeroecho.pki.spi.crypto.SigningProviderRuntimeDependencies: Supplies an unlock provider and the session clock.
withSigningCompactionTransientBudgetBytes(long) - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns a copy using the supplied detached-compaction resident budget.
withSigningEvidenceAudit(boolean) - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns a copy enabling or disabling best-effort terminal signing and internal-proof evidence.
withSigningMaximumGroupSize(int) - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns a copy using the supplied maximum signing durability-group size.
withSigningResidentIndexBudgetBytes(long) - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns a copy using the supplied shared resident signing-index budget.
workerRevision() - Method in record class zeroecho.pki.api.schedule.StatusScheduleState: Returns the value of the workerRevision record component.
Workflow(SignWorkflowStore.AcceptanceEnvelope, SignWorkflowStore.MutableState) - Constructor for record class zeroecho.pki.spi.store.SignWorkflowStore.Workflow: Validates shared operation identity and accepted-mode/phase invariants.
workflowHistoryPolicy() - Method in record class zeroecho.pki.impl.fs.FsPkiStoreOptions: Returns the value of the workflowHistoryPolicy record component.
WorkflowStateRecord - Record Class in zeroecho.pki.api.orch: Persisted continuation state for an orchestrated workflow.
WorkflowStateRecord(PkiId, String, Principal, OrchestrationDurabilityPolicy, Instant, Instant, Instant, Encoding, Optional) - Constructor for record class zeroecho.pki.api.orch.WorkflowStateRecord: Validates the complete persisted workflow snapshot.
wrap(byte[], AlgorithmIdentity, String) - Method in class zeroecho.pki.impl.framework.x509.bc.BcX509PublicKeyAdapter: Wraps canonical native SPKI DER under one explicit binding.
write(AttributeCatalogue, AttributeSet, AttributeId, AttributeValue, AccessContext) - Method in interface zeroecho.pki.api.audit.AttributeGovernanceService: Writes an attribute value after applying access control.
write(AttributeCatalogue, AttributeSet, AttributeId, AttributeValue, AccessContext) - Method in class zeroecho.pki.impl.audit.DefaultAttributeGovernanceService
write(CrlEntrySource, StreamingX509CrlTbsWriter.Measurement, BigInteger, OutputStream, CancellationSignal) - Method in class zeroecho.pki.impl.framework.x509.StreamingX509CrlTbsWriter: Streams the second pass and verifies exact entry byte and count totals.
WRITE - Enum constant in enum class zeroecho.pki.api.audit.AccessAction: Write or modify an attribute value.
writeCanonical(CertificateProfileDefinition) - Static method in class zeroecho.pki.api.profile.CertificateProfileDocumentCodec: Writes the canonical UTF-8 JSON representation.
writerModel() - Method in record class zeroecho.pki.spi.store.MetadataStoreCapabilities: Returns the value of the writerModel record component.
writeTagAndLength(OutputStream, int, long) - Static method in class zeroecho.pki.impl.framework.x509.StreamingDerWriter: Writes one canonical DER tag and definite length.

X

X509AlgorithmBinding - Record Class in zeroecho.pki.api.algorithm: Immutable safe descriptor of one role-specific X.509 algorithm binding.
X509AlgorithmBinding(String, AlgorithmIdentity, X509AlgorithmBinding.Role, String, X509AlgorithmBinding.Origin, int, X509AlgorithmBinding.ParameterRule, X509AlgorithmBinding.PublicKeyEncoding, X509AlgorithmBinding.SignatureEncoding, X509AlgorithmBinding.Interoperability, Optional, String) - Constructor for record class zeroecho.pki.api.algorithm.X509AlgorithmBinding: Validates and snapshots one descriptor.
X509AlgorithmBinding.Interoperability - Enum Class in zeroecho.pki.api.algorithm: Relying-party interoperability expectation.
X509AlgorithmBinding.Origin - Enum Class in zeroecho.pki.api.algorithm: Authority that owns the OID assignment.
X509AlgorithmBinding.ParameterRule - Enum Class in zeroecho.pki.api.algorithm: Canonical AlgorithmIdentifier parameter representation.
X509AlgorithmBinding.PublicKeyEncoding - Enum Class in zeroecho.pki.api.algorithm: Subject-public-key BIT STRING representation.
X509AlgorithmBinding.Role - Enum Class in zeroecho.pki.api.algorithm: X.509 locations whose representations are independently authorized.
X509AlgorithmBinding.SignatureEncoding - Enum Class in zeroecho.pki.api.algorithm: Signature BIT STRING representation.
X509AlgorithmBindingPolicy - Record Class in zeroecho.pki.api.profile: Immutable explicit X.509 representation policy persisted with a certificate profile.
X509AlgorithmBindingPolicy(X509AlgorithmBindingPolicy.Mode, Optional, Optional, Optional, Optional) - Constructor for record class zeroecho.pki.api.profile.X509AlgorithmBindingPolicy: Validates and snapshots the policy.
X509AlgorithmBindingPolicy.BindingReference - Record Class in zeroecho.pki.api.profile: Stable reference to one immutable binding contract.
X509AlgorithmBindingPolicy.Mode - Enum Class in zeroecho.pki.api.profile: Selection mode.
X509AlgorithmBindingProvider - Interface in zeroecho.pki.spi.algorithm: Installed-code provider of deployer-owned immutable X.509 bindings.
X509AlgorithmBindingRegistry - Interface in zeroecho.pki.api.algorithm: Immutable active X.509 algorithm-binding registry shared by one PKI session.
X509AlgorithmIdentifier - Class in zeroecho.pki.impl.framework.x509: Provider-neutral canonical X.509 AlgorithmIdentifier representation.
X509AlgorithmIdentifier.ParameterForm - Enum Class in zeroecho.pki.impl.framework.x509: Exact parameter representation.
X509AlgorithmResolver - Class in zeroecho.pki.impl.framework.x509: Provider-independent intersection of exact identity, binding, installed execution capability, immutable security floor, configured policy, and key compatibility.
X509AlgorithmResolver(X509BindingCatalog, AlgorithmExecutionCapabilities, X509AlgorithmResolver.Policy) - Constructor for class zeroecho.pki.impl.framework.x509.X509AlgorithmResolver: Creates an immutable resolver snapshot.
X509AlgorithmResolver.Failure - Enum Class in zeroecho.pki.impl.framework.x509: Stable resolution failure categories.
X509AlgorithmResolver.Policy - Interface in zeroecho.pki.impl.framework.x509: Policy decision over exact identity data.
X509AlgorithmResolver.ResolutionException - Exception Class in zeroecho.pki.impl.framework.x509: Resolution exception with a stable non-sensitive category.
X509AlgorithmResolver.Selection - Record Class in zeroecho.pki.impl.framework.x509: Immutable effective selection.
X509AlgorithmRole - Enum Class in zeroecho.pki.impl.framework.x509: Closed semantic role of an algorithm representation in X.509.
X509AuthoritySnapshot - Class in zeroecho.pki.impl.framework.x509: One immutable internally consistent runtime authority snapshot.
X509AuthoritySnapshot(AlgorithmIdentityCatalog, X509ComponentCatalog, X509BindingCatalog, AlgorithmExecutionCapabilities, X509AlgorithmResolver.Policy) - Constructor for class zeroecho.pki.impl.framework.x509.X509AuthoritySnapshot: Creates a consistent authority snapshot.
X509AuthoritySnapshot.ExecutorBinding - Class in zeroecho.pki.impl.framework.x509: Immutable process-local executor contribution.
X509BindingCatalog - Class in zeroecho.pki.impl.framework.x509: Deeply immutable snapshot of authoritative X.509 binding rules.
x509BindingCommitment() - Method in record class zeroecho.pki.api.ca.IssuerGeneration: Returns the value of the x509BindingCommitment record component.
x509BindingCommitment() - Method in record class zeroecho.pki.impl.core.PreparedFullCrlTbs: Returns the value of the x509BindingCommitment record component.
X509BindingRule - Interface in zeroecho.pki.impl.framework.x509: Immutable trusted-code rule between exact ZeroEcho identities and X.509 representations.
X509BindingRule.PublicKeyEncoding - Enum Class in zeroecho.pki.impl.framework.x509: Subject-public-key bit-string representation.
X509BindingRule.SignatureEncoding - Enum Class in zeroecho.pki.impl.framework.x509: Signature byte representation owned by a signature rule.
X509BindingRuleProvider - Interface in zeroecho.pki.impl.framework.x509: Trusted installed-code contribution of additive X.509 binding rules.
X509BuiltInDefaults - Class in zeroecho.pki.impl.framework.x509: Immutable code-owned PKI defaults.
X509ComponentCatalog - Class in zeroecho.pki.impl.framework.x509: Immutable additive catalog of X.509 component identities used inside parameterized binding rules.
X509ComponentCatalog.Component - Record Class in zeroecho.pki.impl.framework.x509: Immutable component binding.
X509ComponentCatalog.Kind - Enum Class in zeroecho.pki.impl.framework.x509: Closed component role.
X509EnrollmentPayload - Record Class in zeroecho.pki.api.request: Immutable, explicitly typed original X.509 enrollment request.
X509EnrollmentPayload(X509EnrollmentPayload.Kind, byte[]) - Constructor for record class zeroecho.pki.api.request.X509EnrollmentPayload: Validates syntax and bounds before copying the caller-owned bytes.
X509EnrollmentPayload.Kind - Enum Class in zeroecho.pki.api.request: Closed X.509 enrollment request syntaxes.
X509ExecutionPlan<E> - Class in zeroecho.pki.impl.framework.x509: Immutable process-local authorization to execute one resolved X.509 operation.
X509SecurityFloor - Class in zeroecho.pki.impl.framework.x509: Non-overridable PKI algorithm security floor.
X509SignedObjectCompletion - Class in zeroecho.pki.impl.framework.x509: Non-forgeable live completion of one X.509 signed status-object operation.
X509SuiteCompatibility - Class in zeroecho.pki.impl.framework.x509: Contextual compatibility validation for current classic X.509 suites.

Z

ZEROECHO_ASSIGNMENT_ROOT - Static variable in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry: Frozen ZeroEcho private assignment branch.
ZEROECHO_DEPLOYMENT_ROOT - Static variable in class zeroecho.pki.impl.framework.x509.ImmutableX509AlgorithmBindingRegistry: Deployment-local experimental branch.
ZEROECHO_ECOSYSTEM - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Interoperability: Relying parties with matching ZeroEcho bindings.
ZEROECHO_PRIVATE - Enum constant in enum class zeroecho.pki.api.algorithm.X509AlgorithmBinding.Origin: Frozen ZeroEcho assignment under the Egothor PEN.
zeroecho.pki - module zeroecho.pki: ZeroEcho PKI domain: API, SPI, application services, and the default filesystem/BouncyCastle backends discovered via ServiceLoader.
zeroecho.pki - package zeroecho.pki
zeroecho.pki.api - package zeroecho.pki.api: Public, framework-agnostic PKI API.
zeroecho.pki.api.algorithm - package zeroecho.pki.api.algorithm
zeroecho.pki.api.attr - package zeroecho.pki.api.attr: Attribute catalogue and attribute-level modeling.
zeroecho.pki.api.audit - package zeroecho.pki.api.audit: Audit and governance API.
zeroecho.pki.api.backup - package zeroecho.pki.api.backup: Backup and restore domain model.
zeroecho.pki.api.ca - package zeroecho.pki.api.ca: Certificate Authority (CA) domain model.
zeroecho.pki.api.confirmation - package zeroecho.pki.api.confirmation: Immutable credential-confirmation lifecycle and proof-challenge values.
zeroecho.pki.api.content - package zeroecho.pki.api.content
zeroecho.pki.api.credential - package zeroecho.pki.api.credential: Credential inventory domain model.
zeroecho.pki.api.ct - package zeroecho.pki.api.ct
zeroecho.pki.api.hybrid - package zeroecho.pki.api.hybrid
zeroecho.pki.api.issuance - package zeroecho.pki.api.issuance: Credential issuance domain model.
zeroecho.pki.api.orch - package zeroecho.pki.api.orch: Orchestration and workflow durability API for ZeroEcho PKI.
zeroecho.pki.api.policy - package zeroecho.pki.api.policy: Policy decision and trace model.
zeroecho.pki.api.profile - package zeroecho.pki.api.profile: Certificate and credential profiles.
zeroecho.pki.api.publication - package zeroecho.pki.api.publication: Publication domain model.
zeroecho.pki.api.request - package zeroecho.pki.api.request: Certification request domain model.
zeroecho.pki.api.revocation - package zeroecho.pki.api.revocation: Revocation and suspension domain model.
zeroecho.pki.api.schedule - package zeroecho.pki.api.schedule
zeroecho.pki.api.signing - package zeroecho.pki.api.signing: Immutable application carriers for durable signing.
zeroecho.pki.api.status - package zeroecho.pki.api.status: Status objects domain model.
zeroecho.pki.api.transfer - package zeroecho.pki.api.transfer: Import/export transfer domain model.
zeroecho.pki.application - package zeroecho.pki.application: Lifecycle-owned synchronous PKI sessions and transport-neutral typed operations.
zeroecho.pki.impl - package zeroecho.pki.impl
zeroecho.pki.impl.async - package zeroecho.pki.impl.async: Default implementations for the PKI async bus SPI.
zeroecho.pki.impl.audit - package zeroecho.pki.impl.audit: Audit logging reference implementations for ZeroEcho PKI.
zeroecho.pki.impl.core - package zeroecho.pki.impl.core: Default store-backed PKI core service implementations and supporting internal contracts.
zeroecho.pki.impl.core.attr - package zeroecho.pki.impl.core.attr: Internal attribute-set implementation support for PKI core runtime services.
zeroecho.pki.impl.core.continuation - package zeroecho.pki.impl.core.continuation
zeroecho.pki.impl.core.signing - package zeroecho.pki.impl.core.signing
zeroecho.pki.impl.crypto.pkcs11 - package zeroecho.pki.impl.crypto.pkcs11
zeroecho.pki.impl.crypto.remote - package zeroecho.pki.impl.crypto.remote
zeroecho.pki.impl.crypto.remote.http - package zeroecho.pki.impl.crypto.remote.http
zeroecho.pki.impl.crypto.zeroecholib - package zeroecho.pki.impl.crypto.zeroecholib: ZeroEcho-lib backed signing-provider implementation.
zeroecho.pki.impl.framework.x509 - package zeroecho.pki.impl.framework.x509
zeroecho.pki.impl.framework.x509.bc - package zeroecho.pki.impl.framework.x509.bc: Internal Bouncy Castle backed X.509 credential framework implementation for the PKI runtime.
zeroecho.pki.impl.fs - package zeroecho.pki.impl.fs: Filesystem-based reference implementation of the PKI persistence layer.
zeroecho.pki.impl.fs.ct - package zeroecho.pki.impl.fs.ct
zeroecho.pki.impl.hybrid - package zeroecho.pki.impl.hybrid
zeroecho.pki.impl.publish - package zeroecho.pki.impl.publish
zeroecho.pki.impl.secrets - package zeroecho.pki.impl.secrets
zeroecho.pki.spi - package zeroecho.pki.spi: Service Provider Interfaces (SPIs) for the PKI module.
zeroecho.pki.spi.algorithm - package zeroecho.pki.spi.algorithm
zeroecho.pki.spi.async - package zeroecho.pki.spi.async: Asynchronous operation bus SPI.
zeroecho.pki.spi.audit - package zeroecho.pki.spi.audit: Service Provider Interfaces (SPI) for PKI audit event persistence.
zeroecho.pki.spi.bootstrap - package zeroecho.pki.spi.bootstrap: Bootstrap utilities for ServiceLoader-based components in the PKI module.
zeroecho.pki.spi.confirmation - package zeroecho.pki.spi.confirmation: Trusted request-stateless key-possession proof provider contracts.
zeroecho.pki.spi.crypto - package zeroecho.pki.spi.crypto: Crypto boundary SPI for the PKI module.
zeroecho.pki.spi.crypto.remote - package zeroecho.pki.spi.crypto.remote
zeroecho.pki.spi.ct - package zeroecho.pki.spi.ct
zeroecho.pki.spi.framework - package zeroecho.pki.spi.framework: Credential framework SPI.
zeroecho.pki.spi.publish - package zeroecho.pki.spi.publish: Publishing SPI for distributing PKI artifacts.
zeroecho.pki.spi.store - package zeroecho.pki.spi.store: Persistence SPI for PKI state.
zeroecho.pki.util - package zeroecho.pki.util: Utility types and helper functions for ZeroEcho PKI.
zeroecho.pki.util.async - package zeroecho.pki.util.async: Generic asynchronous operation bus with durable tracking and callback dispatch.
zeroecho.pki.util.async.codec - package zeroecho.pki.util.async.codec: Codecs for persisting identifiers and (optionally) results of async operations.
zeroecho.pki.util.async.impl - package zeroecho.pki.util.async.impl: Reference implementations for the generic async bus.
ZeroEchoLibSigningProvider - Class in zeroecho.pki.impl.crypto.zeroecholib: Inline ZeroEcho-lib signing provider.
ZeroEchoLibSigningProviderFactory - Class in zeroecho.pki.impl.crypto.zeroecholib: Production signing-provider factory bridging PKI requests to ZeroEcho lib based on KeyringStore.
ZeroEchoLibSigningProviderFactory() - Constructor for class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory: Creates a service-loadable provider without unlock material.
ZeroEchoLibSigningProviderFactory(KeyringUnlockProvider) - Constructor for class zeroecho.pki.impl.crypto.zeroecholib.ZeroEchoLibSigningProviderFactory: Creates a provider with an explicit headless unlock source.
ZeroEchoPrivateX509Bindings - Class in zeroecho.pki.impl.framework.x509: Loads and locks the version-one ZeroEcho-owned private X.509 assignments.

A B C D E F G H I J K L M N O P Q R S T U V W X Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form