Class RemoteSigningProviderFactory

java.lang.Object

zeroecho.pki.impl.crypto.remote.RemoteSigningProviderFactory

All Implemented Interfaces:

AlgorithmExecutionCapabilityProvider, ConfigurableProvider<SigningProvider>, SigningProviderFactory

public class RemoteSigningProviderFactory
extends Object
implements SigningProviderFactory, AlgorithmExecutionCapabilityProvider

Service-loadable factory that binds the PKI to a remote signing service through SigningProvider.

The remote service is attached by a unique endpoint identifier stating where it is remotely reachable; its internal implementation is free (any technology) and it may gate each signature behind an external operator. Private keys never leave the remote side: this provider requires no process-local keyring.

Configuration

• endpoint (required) — unique identifier/address of the remote service
• keyRefPrefix (optional, default "zeroecho-remote:")
• operationHorizon (optional ISO-8601, fixed at P90D)

Transport-specific keys (trust anchors, client credential) are consumed by the concrete RemoteSigningTransport opened for the endpoint.

Capability registration

This provider also declares its signature capabilities under a distinct implementation id (zeroecho-remote.signing-provider). Because the signing-plan resolver binds exactly one implementation per algorithm, the remote and local (zeroecho-lib) providers are mutually exclusive signing backends: a deployment registers this provider's AlgorithmExecutionCapabilityProvider entry in place of the local one, never alongside it.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DC_REMOTE_TRANSPORT_UNCONFIGURED	Stable failure code when no concrete transport is configured for the endpoint.
static final String	IMPLEMENTATION_ID	Stable implementation id for capability binding.

Constructor Summary

Constructors

Constructor	Description
RemoteSigningProviderFactory()	Creates a remote signing-provider factory.

Method Summary

Modifier and Type	Method	Description
SigningProvider	allocate(ProviderConfig config)	Allocates a new instance using the provided configuration.
SigningProvider	allocate(ProviderConfig config, SigningProviderRuntimeDependencies dependencies)	Allocates a provider with explicit process-local runtime dependencies.
List<AlgorithmExecutionCapability>	capabilities()
String	id()	Returns a stable backend identifier (e.g.
protected RemoteSigningTransport	openTransport(ProviderConfig config)	Opens the concrete transport for the configured remote endpoint.
Set<String>	supportedKeys()	Returns the configuration keys understood by this backend.
void	validateConfig(ProviderConfig config)	Validates the provided configuration before allocation.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

IMPLEMENTATION_ID

public static final String IMPLEMENTATION_ID

Stable implementation id for capability binding.

See Also:

• Constant Field Values

DC_REMOTE_TRANSPORT_UNCONFIGURED

public static final String DC_REMOTE_TRANSPORT_UNCONFIGURED

Stable failure code when no concrete transport is configured for the endpoint.

See Also:

• Constant Field Values

Constructor Details

RemoteSigningProviderFactory

public RemoteSigningProviderFactory()

Creates a remote signing-provider factory.

Method Details

id

public String id()

Description copied from interface: ConfigurableProvider

Returns a stable backend identifier (e.g. "fs", "jdbc").

Specified by:

id in interface ConfigurableProvider<SigningProvider>

Returns:

backend identifier (never null, never blank)

supportedKeys

public Set<String> supportedKeys()

Description copied from interface: ConfigurableProvider

Returns the configuration keys understood by this backend.

Keys are informational (diagnostics/validation/help). Unknown keys must be ignored by implementations for forward compatibility.

Specified by:

supportedKeys in interface ConfigurableProvider<SigningProvider>

Returns:

supported configuration keys (never null)

capabilities

public List<AlgorithmExecutionCapability> capabilities()

Specified by:

capabilities in interface AlgorithmExecutionCapabilityProvider

validateConfig

public void validateConfig(ProviderConfig config)

Description copied from interface: ConfigurableProvider

Validates the provided configuration before allocation.

Implementations should use this hook to enforce backend-specific invariants such as required keys and key formats. The default implementation already verifies that ProviderConfig.backendId() matches ConfigurableProvider.id(). Unknown keys should normally be ignored for forward compatibility, but may be reported through provider-local logging that names keys only and never logs values.

The default implementation performs a null check and verifies that the supplied backend id matches ConfigurableProvider.id(). Providers with additional requirements should override this method, invoke the default implementation, and then validate their own keys.

Specified by:

validateConfig in interface ConfigurableProvider<SigningProvider>

Parameters:

config - configuration to validate (never null)

allocate

public SigningProvider allocate(ProviderConfig config)

Description copied from interface: ConfigurableProvider

Allocates a new instance using the provided configuration.

Implementations must validate required keys and throw IllegalArgumentException if configuration is incomplete or invalid.

Specified by:

allocate in interface ConfigurableProvider<SigningProvider>

Parameters:

config - configuration (never null)

Returns:

new instance (never null)

allocate

public SigningProvider allocate(ProviderConfig config,
 SigningProviderRuntimeDependencies dependencies)

Description copied from interface: SigningProviderFactory

Allocates a provider with explicit process-local runtime dependencies.

Specified by:

allocate in interface SigningProviderFactory

Parameters:

config - validated persistent provider configuration

dependencies - process-local security capabilities

Returns:

opened signing provider owned by the caller

openTransport

protected RemoteSigningTransport openTransport(ProviderConfig config)

Opens the concrete transport for the configured remote endpoint.

The default binds the packaged mutually-authenticated HTTPS transport (HttpsRemoteSigningTransport), building its TLS context from the configured PKCS#12 client keystore and trust store. When no TLS keystore is configured the endpoint has no packaged transport and this fails with DC_REMOTE_TRANSPORT_UNCONFIGURED; deployments (or tests) may override this method to attach an alternative technology behind the endpoint identifier.

Parameters:

config - validated provider configuration

Returns:

an open transport to the remote signing service