Submission message for adding a node to a private network.

Response message from doorman for adding a node to a private network.

All required parameters to generate a Amazon CloudHSM key using a AmazonCloudHsmCryptoService.

Approved certificate revocation requests response.

Approved certificate revocation requests retrieval message.

Response message from doorman for the certificate signing requests retrieval message.

Approved certificate signing requests retrieval message.

Interface for all Authentication Credentials. Classes implementing this represent a full set of credentials that can be used to authenticate a crypto service.

Implementation of a CryptoService that is backed by an Azure Key Vault cloud HSM.

These tests need to be run manually. They require an Amazon KeyVault (and the associated service principal) to be set up and will perform operations that are not free of charge.

All required parameters to generate a Azure Key Vault HSM key using a AzureKeyVaultCryptoService.

Basic implementation of a CryptoService that uses BouncyCastle for cryptographic operations and a local Java KeyStore in the form of KeyStore to store private keys.

All required parameters to generate a local key using a BCCryptoService.

This certificate path checkers validates the certificate path by checking whether at least one path consists of the certificate type from the set of valid ones and ends with the root certificate passed in rootCert. Additionally, there is a support for the certificate revocation status validation that can be enabled by setting the checkRevocation flag.

This data class is intended to be used internally by certificate revocation request service.

This data class is intended to be used by the certificate revocation request (CRR) service client to create a new CRR submission.

Certificate signing request rejection reason

Encapsulates certificate signing logic

Bundle the Certificate Signing Request with the private network map identifier.

Response message from doorman for the certificate signing requests retrieval message.

Response message from doorman for the certificate submission message.

CRL retrieval message type

The response to a CrlRetrievalMessage

CRL submission message type

CRL submission response.

Crypto service that encompasses certain cryptographic operations such as signing of data.

Class responsible for handling authentication of the cryptoService. Supports the ability to prompt the user for required credentials as well as resetting of the cryptoService authentication state once the desired tasks have been run.

Class responsible for creating the implementation specific Crypto Service object that can be used to interact with the HSM/underlying provider. Note that most of the HSM specific java libraries are proprietary and hence cannot be bundled with our release. Instead, these Jars are provided by the user and hot-loaded at runtime. See static make method.

This is a base class, containing the tests that consist the specification for CryptoService

Response message for the current network parameters update.

Retrieval message for the current network parameters update.

Ping message sent to Doorman service.

Ping response message from Doorman service.

Extension of the Java Timer util class that schedules tasks with exponential backoff, as well as the ability to cancel the currently running task as well as future scheduled tasks. It also enables asynchronous cancellation

Implementation of a CryptoService that is backed by a Gemalto Luna HSM.

All required parameters to generate a Gemalto HSM key using a GemaltoLunaCryptoService.

Defines the protocol used by the doorman service

Exception explicitly for handling the case where a user selects an invalid/non-existent option from the menu.

This is the base class that facilitates easy integration of further HSM vendors that provide a JCA provider. For every vendor we want to support there has to be a new CryptoService that implements CryptoService and optionally inherits from this class if it makes sense. Not all vendors fully implement the JCA API and some of the methods of this class will have to be overridden with vendor-specific implementations.

Interface representing all required parameters for generating a key using a CryptoService.

Response message for the latest network parameters message.

Retrieval message for the latest network parameters.

Response message for the latest unsigned network map message.

Retrieval message for the latest unsigned network map.

Response message for the latest unsigned network parameters message.

Retrieval message for the latest unsigned network parameters.

This local signer is intended to be used in testing environment where hardware signing module is not available.

Pipes messages to the provided logging context ctx and reads input from the standard console.

A generic menu class for console based interactions with user. Inspired by https://github.com/bryandh/genericmenu, but adjusted to our the particular needs of this project.

Single menu item described by the selection key, label associated with this item, action to be executed on response to the item selection and termination flag used to decide whether to loop after action completion.

This data class is a more readable wrapper for a list of pairs of a command label and the associated action which should be invoked upon calling that command.

Manages the migration status.

This class inherits the core functionality of the DefaultExceptionHandler provided by picocli, with a few tweaks. When a return code on error is specified, the DefaultExceptionHandler has the exception's stacktrace printed to console instead of being rethrown, causing our NetworkServicesUncaughtExceptionHandler to not catch anything and the console output to be incorrect.

Ping message sent to Network Map service.

Ping response message from Network Map service.

Defines the protocol used by the network map service

Submission message for the network map.

Network map submission response.

Response message for the network maps.

Retrieval message for network maps.

Submission message for the network parameters.

Network parameters submission response.

Submission message for a new private network.

Response message from doorman for a new private network message.

Response message for the node info hashes.

Retrieval message for the node info hashes.

Encapsulates all the info about the private network.

An interface defining rejection reason

Interface for the class responsible for handling messages, errors and user input. Depending on the implementation, can either pipe messages to a log file or some other output (e.g. shell console).

Interface that contains common properties for both certificate signing request and certificate revocation request.

Retrieval message for the private network mapping.

Retrieval message response for the private network mapping.

Retrieval message for the valid (approved, signed and not revoked) CSR with the given legalEntityName.

Retrieval message response for valid (approved and signed) CSR.

Ping message sent to Revocation service.

Ping response message from Revocation service.

Defines the protocol used by the revocation service

All required parameters to generate a Securosys HSM key using a SecurosysPrimusXCryptoService.

This test can be run against the cloud HSM provided by Securosys. It has the @Ignore annotation by default as the placeholder values have to be filled out in order to run it (see wiki page for credentials).

This class allows for interacting with an interactive shell by invoking external methods, as well as retrieving user input.

Shell commands interface allowing for interacting with a shell by retrieving user inputs and rendering menus.

An interface for arbitrary data signing functionality.

Signer which connects to a crypto service using the given authenticator to sign bytes.

Exception thrown whenever any exception is thrown during actual material signing.

This is a super class for certificate signing request submission and certificate revocation request submission.

Switch flag message.

Switch flag response.

Implementation of a CryptoService that is backed by a Utimaco HSM.

All required parameters to generate a Utimaco HSM key using a UtimacoCryptoService.

Custom version printing when command is called with --version or -V flag.

Ping message sent to Zone service.

Ping response message from Zone service.

Defines the protocol used by the Zone service RPC.