Skip to content

Pending certificate operations and asynchronous authority flows#295

Open
3keyroman wants to merge 1 commit into
documentationfrom
feat/pending-cert-operations
Open

Pending certificate operations and asynchronous authority flows#295
3keyroman wants to merge 1 commit into
documentationfrom
feat/pending-cert-operations

Conversation

@3keyroman
Copy link
Copy Markdown
Contributor

@3keyroman 3keyroman commented May 10, 2026

Summary

Documents the certificate lifecycle for asynchronous authority operations — when a certification authority cannot complete issue, renew, or revoke synchronously and the certificate is parked in Pending Issue / Pending Revoke until an operator finalises it.

Closes #257.

What changed

  • certificate-key/concept-design/core-components/certificate.mdPending Issue and Pending Revoke are now first-class states with descriptions, transition diagram entries, and a new Asynchronous operations section covering Finalise Issue / Confirm Revoke / Cancel Pending operator actions and the operations blocked while a certificate is parked.
  • certificate-key/connectors/provider-interfaces/authority-provider-v2.md — added the Asynchronous certificate operations section: parking signal (200 / 202 / other), four new endpoints (cancelIssueCertificate, cancelRevokeCertificate, getIssueCertificateStatus, getRevokeCertificateStatus), and sequence diagrams for park-issue, park-revoke, manual finalise, manual confirm revoke, and cancel-pending flows. Updated the management functions list at the top.
  • certificate-key/connectors/available-connectors.md — added External Authority Provider connector row.
  • certificate-key/current-versions.md — added External Authority Provider 1.0.0 (unreleased; placeholder version that will be bumped at release).
  • certificate-key/protocols/cmp/overview.md — added pollReq / pollRep PKIBody types to the supported CMP messages table (the platform now handles the polling exchange when a certificate is parked; the polling response semantics themselves are RFC 4210 standard behaviour).
  • docusaurus.config.jsapiVersion set to main so the build resolves the unreleased API definitions; will be set back to a released version once 2.18.0 ships.

🤖 Generated with Claude Code

- Document Pending Issue and Pending Revoke certificate states with
  operator-driven Finalise / Confirm / Cancel actions and the operations
  that are blocked while a certificate is parked.
- Extend Authority Provider v2 with the asynchronous certificate
  operations section: 202 + meta parking signal, four new endpoints
  (cancelIssueCertificate, cancelRevokeCertificate,
  getIssueCertificateStatus, getRevokeCertificateStatus) and sequence
  diagrams for park / finalise / confirm / cancel flows.
- List External Authority Provider connector in available-connectors
  and current-versions.
- Add pollReq / pollRep PKIBody types to the supported CMP messages
  table.
- Point apiVersion at main so the build resolves the unreleased API
  definitions until the next release.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@CLAassistant
Copy link
Copy Markdown

CLAassistant commented May 10, 2026

CLA assistant check
All committers have signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Document certificate operations flows

2 participants