pub struct ChainVerification {
pub vendor_id: VendorId,
pub product_id: ProductId,
pub dac_public_key: Vec<u8>,
pub paa_subject: Vec<u8>,
pub paa_skid: Option<Vec<u8>>,
}Expand description
Outcome of a successful verify_chain call.
Returned by value (cheap — a few small fields plus an owned DER
public-key blob). Callers persist the VendorId/ProductId
for fabric records and pass dac_public_key to M6.2.3’s
verify_attestation_response.
Fields§
§vendor_id: VendorIdVendorId matched on both the DAC and PAI subject DNs.
product_id: ProductIdProductId matched on the DAC subject DN (and on the PAI if
the PAI was product-scoped).
dac_public_key: Vec<u8>DAC subject public key — raw P-256 SEC1 uncompressed bytes
(0x04 || X || Y, 65 bytes).
paa_subject: Vec<u8>DER-encoded PAA subject Name. Opaque to most callers; kept for
audit logging (“attested by PAA <subject>”).
paa_skid: Option<Vec<u8>>SubjectKeyIdentifier of the PAA that anchored the chain, if it
carries one. Used to enforce a Certification Declaration’s
authorized_paa_list (Matter §6.2.3): the CD may restrict which
PAAs are allowed to attest the device, matched on this SKID.
Trait Implementations§
Source§impl Clone for ChainVerification
impl Clone for ChainVerification
Source§fn clone(&self) -> ChainVerification
fn clone(&self) -> ChainVerification
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more