Skip to main content

Module kra

Module kra 

Source
Expand description

KRA (Key Recovery Authority) operations for server-side key generation.

Supports kipuka’s /serverkeygen EST endpoint (RFC 7030 S4.4) by generating key pairs on the Dogtag KRA subsystem and archiving the private key for optional recovery.

The KRA communicates over a separate base URL from the CA and requires its own agent-level authentication.

Structs§

KeyGenResult
Result of a server-side key generation request.
KraClient
Client for Dogtag KRA REST API operations.