CA Web Application - dogtagpki/pki GitHub Wiki

CA Web Listener

CA web listener is defined in CAWebListener.java.

CA Engine

CA engine is defined in CAEngine.java.

CMS Engine Objects

  • password store

  • security domain session table

  • timer

  • plugin registry

  • server socket listener

  • log subsystem

  • JSS subsystem

  • database subsystem

  • request repository

  • request queue

  • user group subsystem

  • OID loader subsystem

  • X.500 name subsystem

  • request subsystem

  • authentication subsystem

  • authorization subsystem

  • request notifier

  • pending notifier

  • subsystem listeners

CA Engine Objects

  • subsystems

    • CA subsystem

    • profile subsystem

    • selftest subsystem

    • cross cert pair subsystem

    • stats subsystem

  • job scheduler

    • cert renewal notifier

    • publish certs

    • request in queue notifier

    • unpublish expired certs

    • pruning

  • certificate repository

  • CRL repository

  • replica ID repository

  • CA policy

  • CA service

  • listener plugins

  • CRL publisher

  • CA publisher processor

  • CRL issuing points

  • cert issued listener

  • cert revoked listener

  • request in queue listener

  • retrieve modifications task

  • cert status update task

  • serial number update task

  • authorities

  • key retrievers

  • entry USNs

  • nsUniqueIds

  • deletedNsUniqueIds

  • loader

  • authority monitor

CA Application

CA application is defined in CAApplication.java.

Services

  • AccountService

  • AuditService

  • CAInstallerService

  • AuthorityService

  • CertService

  • CertRequestService

  • ProfileService

  • JobService

  • SelfTestService

  • GroupService

  • UserService

  • CASystemCertService

  • KRAConnectorService

  • FeatureService

  • CAInfoService

  • CASecurityDomainService

Interceptors

  • SessionContextInterceptor

  • AuthMethodInterceptor

  • ACLInterceptor

  • MessageFormatInterceptor

Other

  • PKIExceptionMapper

Persistent Searches

  • ACME’s LDAPConfigMonitor

  • CA’s AuthorityMonitor

  • CA’s LDAPProfileSubsystem

  • CA’s RetrieveModificationsTask

Threads

  • LDAPConnSetupMgr

  • LDAPConnThread

  • EventService

  • ACME’s LDAPDatabase → LDAPConfigMonitor

  • ACME’s PostgreSQLDatabase → PostgreSQLConfigMonitor

  • ACMEScheduler → ACMETask

  • ACMEChallengeService → ACMEChallengeProcessor

  • ACMEEngineConfigFileSource

  • CRLIssuingPoint

  • CertStatusUpdateTask

  • RetrieveModificationsTask

  • SerialNumberUpdateTask

  • LDAPProfileSubsystem

  • CAEngine → AuthorityManager

  • CAEngine → KeyRetrieverRunner

  • JssSSLSocketFactory → ConnectAsync

  • RecoverBySerial → WaitApprovalThread

  • KeyStatusUpdateTask

  • DefStore → DeleteOldCRLsThread

  • DefStore → DefStoreCRLUpdater

  • LDAPStore → CRLUpdater

  • AddCRLServlet → UpdateCRLThread

  • LogFile → FlushThread

  • RollingLogFile → RolloverThread

  • RollingLogFile → ExpirationThread

  • HttpConnector → Resender

  • JobsScheduler → Job

  • RequestQueue → RecoverThread

  • RequestNotifier → RunListeners

⚠️ **GitHub.com Fallback** ⚠️