This repository provides the core classes for a Spring Boot application that implements CA services based on the following base libraries:
The CA services functionality provided by this repository provides the basic beans and controllers that implements the following functionality:
- Service configuration structure for the CA services application
- CRL distribution controller
- OCSP responder controller
- CMC API support for CMC based clients and registration authorities.
- CA Audit logging
- CA service health check
- Basic error handling
- Basic CA service implementation
The underlying functionality in this library is specifically designed to allow deployment on multiple server instances. In order to enable this in practice, the implementation of repository must support synchronized data sharing of CA repository data as well as CRL metadata. This implementation use the repository and metadata API:s to ensure functionality over multiple servers when synchronized storage is used in the underlying data storage solution.
Note that the default JSON based repository provided in this library does not support synchronisation of data over multiple instances, but the implementation provided here: https://github.com/swedenconnect/ca-headless implements fully synchronized storage using database support.
Add this maven dependency to your project
<dependency>
<groupId>se.swedenconnect.ca</groupId>
<artifactId>ca-service-base/artifactId>
<version>${ca-service-base.version}</version>
</dependency>
A complete CA services application can be built using this code as a base but extending it in the following way:
- Implement the CA service by extending the abstract implementations provided by this project
- Provide a suitable CA repository implementation
- Extend health indication
- Extend audit logging
Examples of this are provided in the following code projects:
- https://github.com/swedenconnect/ca-headless
- https://github.com/swedenconnect/ca-signservice
Copyright © 2022, Myndigheten för digital förvaltning - Swedish Agency for Digital Government (DIGG). Licensed under version 2.0 of the Apache License.