CA Web Application

CA Web Listener

CA web listener is defined in CAWebListener.java.

CA Engine

CA engine is defined in CAEngine.java.

CMS Engine Objects

• password store

• security domain session table

• timer

• plugin registry

• server socket listener

• log subsystem

• JSS subsystem

• database subsystem

• request repository

• request queue

• user group subsystem

• OID loader subsystem

• X.500 name subsystem

• request subsystem

• authentication subsystem

• authorization subsystem

• request notifier

• pending notifier

• subsystem listeners

CA Engine Objects

• subsystems

  • CA subsystem

  • profile subsystem

  • selftest subsystem

  • cross cert pair subsystem

  • stats subsystem

• job scheduler

  • cert renewal notifier

  • publish certs

  • request in queue notifier

  • unpublish expired certs

  • pruning

• certificate repository

• CRL repository

• replica ID repository

• CA policy

• CA service

• listener plugins

• CRL publisher

• CA publisher processor

• CRL issuing points

• cert issued listener

• cert revoked listener

• request in queue listener

• retrieve modifications task

• cert status update task

• serial number update task

• authorities

• key retrievers

• entry USNs

• nsUniqueIds

• deletedNsUniqueIds

• loader

• authority monitor

CA Application

CA application is defined in CAApplication.java.

Services

• AccountService

• AuditService

• CAInstallerService

• AuthorityService

• CertService

• CertRequestService

• ProfileService

• JobService

• SelfTestService

• GroupService

• UserService

• CASystemCertService

• KRAConnectorService

• FeatureService

• CAInfoService

• CASecurityDomainService

Interceptors

• SessionContextInterceptor

• AuthMethodInterceptor

• ACLInterceptor

• MessageFormatInterceptor

Other

• PKIExceptionMapper

Persistent Searches

• ACME’s LDAPConfigMonitor

• CA’s AuthorityMonitor

• CA’s LDAPProfileSubsystem

• CA’s RetrieveModificationsTask

Threads

• LDAPConnSetupMgr

• LDAPConnThread

• EventService

• ACME’s LDAPDatabase → LDAPConfigMonitor

• ACME’s PostgreSQLDatabase → PostgreSQLConfigMonitor

• ACMEScheduler → ACMETask

• ACMEChallengeService → ACMEChallengeProcessor

• ACMEEngineConfigFileSource

• CRLIssuingPoint

• CertStatusUpdateTask

• RetrieveModificationsTask

• SerialNumberUpdateTask

• LDAPProfileSubsystem

• CAEngine → AuthorityManager

• CAEngine → KeyRetrieverRunner

• JssSSLSocketFactory → ConnectAsync

• RecoverBySerial → WaitApprovalThread

• KeyStatusUpdateTask

• DefStore → DeleteOldCRLsThread

• DefStore → DefStoreCRLUpdater

• LDAPStore → CRLUpdater

• AddCRLServlet → UpdateCRLThread

• LogFile → FlushThread

• RollingLogFile → RolloverThread

• RollingLogFile → ExpirationThread

• HttpConnector → Resender

• JobsScheduler → Job

• RequestQueue → RecoverThread

• RequestNotifier → RunListeners