Interface CaKeyRotationCommand

All Known Implementing Classes:
CaKeyRotationCommand.Intermediate, CaKeyRotationCommand.Root
public sealed interface CaKeyRotationCommand permits CaKeyRotationCommand.Root, CaKeyRotationCommand.Intermediate
Command to rotate a CA key reference and issue new corresponding CA credentials.

Key rotation changes the underlying key material. Historical key references and credentials must remain discoverable for audit and validation of previously issued credentials. Profile selection comes from authoritative CA state. Construction validates structure only; it neither generates keys nor proves possession or authorizes rotation.

  • Nested Class Summary

    Nested Classes
    Modifier and Type
    Interface
    Description
    static final record 
    CaKeyRotationCommand.Intermediate
    Intermediate rotation with a new managed key.
    static final record 
    CaKeyRotationCommand.Root
    Root rotation with an explicitly provisioned new key.

  • Method Summary

    Modifier and Type
    Method
    Description
    AttributeSet
    attributes()
    Returns immutable universal attributes.
    PkiId
    caId()
    Returns CA entity identifier.
    KeyRef
    newKeyRef()
    Returns explicitly provisioned new managed key.

  • Method Details

    • caId

      PkiId caId()
      Returns CA entity identifier.
      Returns:
      CA entity identifier

    • newKeyRef

      KeyRef newKeyRef()
      Returns explicitly provisioned new managed key.
      Returns:
      explicitly provisioned new managed key

    • attributes

      AttributeSet attributes()
      Returns immutable universal attributes.
      Returns:
      immutable universal attributes