Interface ManagedKeyProofRequest

All Known Implementing Classes:
ManagedKeyProofRequest.CaSubject, ManagedKeyProofRequest.OcspResponder
public sealed interface ManagedKeyProofRequest permits ManagedKeyProofRequest.CaSubject, ManagedKeyProofRequest.OcspResponder
Immutable, thread-safe coordinates for a managed private-key possession proof. These values grant no authorization and perform no store lookup or algorithm selection. All identifiers must be nonblank strict UTF-8: PKI identifiers are limited to 4,096 bytes, profile identifiers to 256 bytes and key references to 1,048,576 bytes. The encoded command has its own aggregate size limit. Construction takes linear time in the supplied text and constant auxiliary memory.

  • Nested Class Summary

    Nested Classes
    Modifier and Type
    Interface
    Description
    static final record 
    ManagedKeyProofRequest.CaSubject
    Proof coordinates for a CA subject key.
    static final record 
    ManagedKeyProofRequest.OcspResponder
    Proof coordinates for a managed OCSP responder key.

  • Method Summary

    Modifier and Type
    Method
    Description
    KeyRef
    keyRef()
    Returns the exact managed key to prove.

  • Method Details

    • keyRef

      KeyRef keyRef()
      Returns the exact managed key to prove.
      Returns:
      immutable key reference, never private key material