request

open suspend override fun request(requestId: String?, identity: ServerIdentity, nonce: ByteString, expiration: Instant): Enrollment.EnrollmentRequest

Initial step of a certificate issuance.

Remote server (that acts as a Certificate Authority) requests data for a new certificate.

Return

information to create a certificate

Parameters

requestId

if this server asked to be enrolled, this will indicate the enrollment request id; it is an error if the the request id is not null and not known to this server; this serves as protection against malicious enrollment requests.

identity

defines the purpose of the certificate that will be issued

nonce

nonce/challenge that will be associated with the private key in the SecureArea that holds it.

expiration

when the certificate will expire (so that private key expiration can be set to the same date/time)