Struct SigningCertificate 

pub struct SigningCertificate<'a> { /* private fields */ }

One signing-certificate value, preserving the whole signed validation set. V1 and V2 values are evaluated independently (RFC5035 §2).

Implementations

impl<'a> SigningCertificate<'a>

pub fn bind_validation_certificate<P: AsnDigest<'a>>( &self, provider: &'a P, certificate: &Certificate<'_>, parent: &Reader<'a>, ) -> Result<OwnedVec<Binding>, BindingError<P::Error>>

Checks every later signed validation-set identifier against one actual certificate. The first signer identifier is deliberately excluded.

RFC5035 §§3/5 limits certificates used during validation when later identifiers exist. The format layer supplies actual path/credential certificates; this operation neither builds a path nor selects trust. All declarations are admitted before hashing. Resolved digest identities share one complete certificate pass and one finalized output each. https://www.rfc-editor.org/rfc/rfc5035#section-3

impl<'a> SigningCertificate<'a>

pub fn read( parent: &Reader<'a>, element: &Element<'a>, version: Version, ) -> Result<Self>

Reads the original value with inherited depth/local and aggregate work.

The first identifier must be readable to name the signer. Later malformed identifiers/policies remain original restrictions plus retained faults; no resource failure becomes a readable fault or an omitted restriction. This reading establishes neither certificate hash agreement nor trust.

pub fn version(&self) -> Version

Which independently evaluated attribute selected this value.

pub fn certificates(&self) -> &[CertificateReading<'a>]

First signer identity and all subsequent signed restrictions in order.

pub fn identifiers(&self) -> &[CertificateId<'a>]

Flat readable identities referenced by the original-order catalogue.

pub fn signer(&self) -> &CertificateId<'a>

The required first certificate identity, without a repeated lookup.

pub fn policies(&self) -> Option<&Element<'a>>

Original optional policy terms, including any separately reported fault.

pub fn faults(&self) -> &[Error]

Readable schema/profile faults with original source locations.

pub fn element(&self) -> &Element<'a>

Original source element.

Trait Implementations

impl<'a> Debug for SigningCertificate<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.