The key as an opaque sign/decrypt object — see localKeyOperationsOfProvider.
The raw private key. Kept for compatibility — new code should prefer
ICertificateKeyPairProvider2.getKeyOperations (via
getKeyOperationsFromProvider), which works whether the key is local
or HSM/KMS-held; an opaque provider implements this method by
throwing PrivateKeyUnavailableError.
No-op for static provider — the chain is already in memory.
Use update() to replace the chain explicitly.
Replace the certificate chain and optionally the private key.
This immediately affects all consumers that call
getCertificateChain() on this provider (including
endpoint descriptions with dynamic serverCertificate getters).
Optionalkey: PrivateKey
Holds a certificate chain and private key in memory.
Used as the default provider when push certificate management is NOT installed. The chain can be replaced in-place via
update().