pub struct Policy {
pub context: Hash,
pub roots: Vec<Identity>,
pub chains: Vec<PolicyChain>,
}
Expand description
A Policy, which specifies what requirements an identity must meet to be accepted by the policy. If the chains are empty, an identity must be amongst the listed root identities. If the chains are not empty, the identity must either be amongst the roots, or it must satisfy the rules in any one of the chains.
A chain is a sequence of links. A certificate database should start at the
last link, looking for identities that have created a Cert
that is
valid, matches the key/val pair in the link, matches the context in the
overall Policy, and has the checked-for Identity as the subject. Amongst the
resulting identities, the next link in the chain should be checked, and so
on until hitting a root Identity.
There must be at least min_issuers
valid Identities that issued a
certificate matching the link’s rule in order for the link to be fully
fulfilled.
Fields§
§context: Hash
§roots: Vec<Identity>
§chains: Vec<PolicyChain>