Class DefaultProfileService

java.lang.Object

zeroecho.pki.impl.core.DefaultProfileService

All Implemented Interfaces:

ProfileService

public final class DefaultProfileService
extends Object
implements ProfileService

Store-backed implementation of the certificate-profile lifecycle.

Constructor Summary

Constructors

Constructor	Description
DefaultProfileService(PkiStore store, Clock clock, AuditSink auditSink)	Creates a profile service using one authoritative clock.
DefaultProfileService(PkiStore store, Clock clock, AuditSink auditSink, X509AlgorithmBindingRegistry algorithmBindings)	Creates a profile service bound to one immutable algorithm registry.
DefaultProfileService(PkiStore store, Clock clock, AuditSink auditSink, X509AlgorithmBindingRegistry algorithmBindings, boolean signingConfigured, Optional<String> certificateBinding, Optional<String> crlBinding, Optional<String> publicKeyBinding)	Creates a profile service with the session's explicit signing bindings.

Method Summary

Modifier and Type	Method	Description
CertificateProfileRef	activateProfile(String profileId, long profileVersion)	Explicitly activates one already imported version.
Optional<CertificateProfileRef>	getActiveReference(String profileId)	Retrieves the current active reference without activating anything.
Optional<ImportedCertificateProfileVersion>	getImportedVersion(String profileId, long profileVersion)	Retrieves one immutable imported version for administration.
CertificateProfileRef	importBuiltIn(BuiltInCertificateProfileTemplate template)	Imports a built-in provisioning template through the same document path.
CertificateProfileRef	importProfile(byte[] jsonDocument)	Imports a bounded strict JSON profile document without activating it.
CertificateProfileRef	importProfile(InputStream jsonDocument)	Imports a strict JSON profile document without taking ownership of the supplied stream.
List<ImportedCertificateProfileVersion>	listImportedVersions(String profileId)	Lists immutable imported versions for one logical profile.
ActiveCertificateProfile	requireActiveProfile(String profileId)	Resolves and validates the exact active profile.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DefaultProfileService

public DefaultProfileService(PkiStore store,
 Clock clock,
 AuditSink auditSink)

Creates a profile service using one authoritative clock.

Parameters:

store - authoritative PKI store

clock - authoritative lifecycle clock

auditSink - audit destination

DefaultProfileService

public DefaultProfileService(PkiStore store,
 Clock clock,
 AuditSink auditSink,
 X509AlgorithmBindingRegistry algorithmBindings)

Creates a profile service bound to one immutable algorithm registry.

Parameters:

store - authoritative PKI store

clock - authoritative clock

auditSink - audit sink

algorithmBindings - active immutable binding registry

DefaultProfileService

public DefaultProfileService(PkiStore store,
 Clock clock,
 AuditSink auditSink,
 X509AlgorithmBindingRegistry algorithmBindings,
 boolean signingConfigured,
 Optional<String> certificateBinding,
 Optional<String> crlBinding,
 Optional<String> publicKeyBinding)

Creates a profile service with the session's explicit signing bindings.

Parameters:

store - authoritative PKI store

clock - authoritative lifecycle clock

auditSink - audit destination

algorithmBindings - active immutable binding registry

signingConfigured - whether signing capabilities are enabled

certificateBinding - optional explicit certificate-signature binding

crlBinding - optional explicit CRL-signature binding

publicKeyBinding - optional explicit subject-public-key binding

Method Details

importProfile

public CertificateProfileRef importProfile(byte[] jsonDocument)

Description copied from interface: ProfileService

Imports a bounded strict JSON profile document without activating it.

Specified by:

importProfile in interface ProfileService

Parameters:

jsonDocument - canonical profile JSON bytes

Returns:

imported immutable profile reference

importProfile

public CertificateProfileRef importProfile(InputStream jsonDocument)

Description copied from interface: ProfileService

Imports a strict JSON profile document without taking ownership of the supplied stream.

Specified by:

importProfile in interface ProfileService

Parameters:

jsonDocument - bounded profile JSON stream, left open

Returns:

imported immutable profile reference

importBuiltIn

public CertificateProfileRef importBuiltIn(BuiltInCertificateProfileTemplate template)

Description copied from interface: ProfileService

Imports a built-in provisioning template through the same document path.

Specified by:

importBuiltIn in interface ProfileService

Parameters:

template - versioned built-in profile template

Returns:

imported immutable profile reference

activateProfile

public CertificateProfileRef activateProfile(String profileId,
 long profileVersion)

Description copied from interface: ProfileService

Explicitly activates one already imported version.

Specified by:

activateProfile in interface ProfileService

Parameters:

profileId - nonblank logical profile identifier

profileVersion - positive imported version

Returns:

exact newly active profile reference

requireActiveProfile

public ActiveCertificateProfile requireActiveProfile(String profileId)

Description copied from interface: ProfileService

Resolves and validates the exact active profile.

Specified by:

requireActiveProfile in interface ProfileService

Parameters:

profileId - nonblank logical profile identifier

Returns:

validated immutable active profile

getImportedVersion

public Optional<ImportedCertificateProfileVersion> getImportedVersion(String profileId,
 long profileVersion)

Description copied from interface: ProfileService

Retrieves one immutable imported version for administration.

Specified by:

getImportedVersion in interface ProfileService

Parameters:

profileId - nonblank logical profile identifier

profileVersion - positive imported version

Returns:

imported version, or empty when absent

listImportedVersions

public List<ImportedCertificateProfileVersion> listImportedVersions(String profileId)

Description copied from interface: ProfileService

Lists immutable imported versions for one logical profile.

Specified by:

listImportedVersions in interface ProfileService

Parameters:

profileId - nonblank logical profile identifier

Returns:

immutable versions in ascending version order

getActiveReference

public Optional<CertificateProfileRef> getActiveReference(String profileId)

Description copied from interface: ProfileService

Retrieves the current active reference without activating anything.

Specified by:

getActiveReference in interface ProfileService

Parameters:

profileId - nonblank logical profile identifier

Returns:

active reference, or empty when none is active