Expand description
Trust Anchor Support
Structs
- Requests for Trust Anchor Child.
- Contains all Trust Anchor objects, including the the TA certificate and TAL.
- Krill Trust Anchors are split into the following two components:
- A
TrustAnchorSignerRequest
and its signed message as base64 for (re-)validation. - A
TrustAnchorSignerResponse
and its signed message as base64 for (re-)validation. - The Trust Anchor Signer signs requests sent to it by its associated proxy, as long as it can verify that the proxy signed that request.
- Request for the Trust Anchor Signer to update the signed objects (new mft, crl). Can contain requests for one or more children to either issue a new certificate, or revoke a key. If there are no requests for a child, then it is assumed that the current issued certificate(s) to the child should not change.