Struct AttestationTrust 

pub struct AttestationTrust { /* private fields */ }

The trust anchors used to verify a device during commissioning.

Implementations

impl AttestationTrust

pub fn example_device_roots() -> Self

Construct from the bundled CSA test / example roots: the PAA test roots plus the CD signing roots that verify chip’s example devices — the synthetic loopback root, chip’s test CD signing authority, and CSA production “CD Signing Key 001” (which signs the VID=0xFFF1 CD served by every example-DAC device, including the esp-matter ESP32-C6). Suitable for CSA-test / dev / example devices and the hermetic loopback.

This is not the full CSA production trust set: an arbitrary certified product may present a DAC chained to a PAA, or a CD signed by a CSA production key, that is not bundled here. Commissioners for arbitrary certified devices use Self::from_dirs pointed at the production roots.

pub fn from_dirs(paa_dir: &Path, cd_dir: &Path) -> Result<Self, Error>

Load PAA roots from a directory of .der certificates and CD signing roots from a directory (or single file) of .der certificates — the production path (e.g. connectedhomeip’s credentials/production/...).

Errors

Returns Error::Trust if a directory cannot be read or a certificate fails to parse.

Trait Implementations

impl Debug for AttestationTrust

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.