tech.pisoft.teadmin.CodeSigningAdmin

The CodeSigningAdmin class manages code signing.

Since: 6.8.0

© Pi Soft, 2018-2026 · Tricryption Engine 8.1

Inheritance

• Inherits tech.pisoft.teagent.IConnection

Public Member Functions

Member	Description
CodeSigningAdmin()
CodeSigningInfo register(CodeSigningInfo info)
CodeSigningInfo[] getSignedCodeList()
void removeSignedCode(CodeSigningInfo info)	Only take ID or jar name to remove an entry.
int getCodePolicy()	The code-signing level the Key Service enforces.
int attestClientBuild(String artifactId, byte[] manifestDigest, byte[] signature, byte[] signerCertDer)	Attest THIS connection's client build.

Member Function Documentation

void removeSignedCode(CodeSigningInfo info)

Only take ID or jar name to remove an entry.

Parameters

Parameter	Description
info	A CodeSigningInfo object representing the object to be removed.

int getCodePolicy()

The code-signing level the Key Service enforces.

GET_CODE_POLICY: a bare package; the reply is ONE uint32. It is allowed on a connection that has not been admitted yet, and is exempt from role authorization.

Exceptions

Exception	Description
TEAgentException	if the request cannot be completed on the connection, or the Key Service returns an error for it (delivered as a TEServerException).

Returns: 0 off, 1 approved publisher, 2 approved release.

int attestClientBuild(String artifactId, byte[] manifestDigest, byte[] signature, byte[] signerCertDer)

Attest THIS connection's client build.

ATTEST_CLIENT_BUILD: four buffers, in order – the artifact id (UTF-8), the release manifest's SHA-256, the detached signature over the manifest's exact bytes, and the signer certificate (DER). The Key Service verifies them and admits the connection at the level the evidence satisfies; it never writes a registry row. Below the level in force it refuses with error code 0x0301 (ERR_CLIENT_BUILD_NOT_ADMITTED), delivered as a TEServerException.

Parameters

Parameter	Description
artifactId	The artifact id from the manifest header.
manifestDigest	The SHA-256 of the manifest's exact bytes (32 bytes).
signature	The detached signature bytes.
signerCertDer	The signer certificate, DER-encoded.

Exceptions

Exception	Description
TEAgentException	if the request cannot be completed on the connection, or the Key Service returns an error for it (delivered as a TEServerException).

Returns: the level this connection is admitted at.