Struct FabricConfig 

#[non_exhaustive]
pub struct FabricConfig {
    pub fabric_id: u64,
    pub rcac_id: u64,
    pub commissioner_node_id: u64,
    pub validity: (MatterTime, MatterTime),
    pub issue_icac: bool,
}

Inputs for creating a new fabric.

#[non_exhaustive]: future fabric-creation knobs (e.g. an explicit IPK or an ICAC tier) can be added without a semver break. Construct via FabricConfig::new from outside this crate.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

fabric_id: u64

Matter fabric identifier (spec §6.2.1).

rcac_id: u64

RCAC subject DN’s rcac-id value.

commissioner_node_id: u64

The stable node ID the controller takes on this fabric.

validity: (MatterTime, MatterTime)

(not_before, not_after) validity for the RCAC and commissioner NOC.

Pass a real wall-clock not_before — e.g. MatterTime::from_unix_secs(current_unix_time), typically backdated a little (an hour is plenty) to tolerate device clock skew. Use MatterTime::NO_EXPIRY for not_after if the fabric should not expire.

MatterController::create_fabric validates this window and returns crate::Error::InvalidFabricValidity rather than letting a bad one reach a device. Four ways to get it wrong:

• not_before at the Matter epoch (MatterTime(0), equivalently MatterTime::from_unix_secs(0)) — the reporter’s failure in issue #111. The cause is a signature mismatch, not a validity policy: chip’s ChipEpochToASN1Time (connectedhomeip/src/credentials/CHIPCert.cpp) maps epoch 0 to the X.509 sentinel 99991231235959Z for both notBefore and notAfter, so a device rebuilding the X.509 TBS from our TLV certificate hashes 99991231235959Z where we signed 20000101000000Z and the signature check fails. chip’s own comment: such certificates “are not usable with this code” and “attempted installation of such certficates will fail during commissioning” — surfacing as an opaque IM status 0x85 rejection of AddTrustedRootCertificate deep in commissioning.
• not_before far in the future — most often a millisecond timestamp handed to MatterTime::from_unix_secs, which saturates to MatterTime(u32::MAX) (≈ year 2136). This one is worse than a rejection: ValidateChipRCAC deliberately does not check RCAC validity times (CHIPCert.cpp), so AddTrustedRootCertificate succeeds and the fabric half-commissions, then every CASE session fails with kNotYetValid.
• An already-expired window — the symmetric twin of the one above, most often a (not_before, not_after) pair copied from an older document. The ordering check passes and not_before is in the past, so only a comparison against the clock catches it; the same ValidateChipRCAC exemption means the expired root installs and CASE then fails with kExpired.
• A units mistake in not_after — from_unix_secs clamps any pre-2000 Unix time to MatterTime(0), and MatterTime(0) is MatterTime::NO_EXPIRY, so such a mistake silently yields “never expires” — the opposite of the intent — and cannot be rejected here.

issue_icac: bool

When true, create_fabric mints an intermediate CA (ICAC) under the RCAC and signs the commissioner NOC (and, later, all NOCs issued on this fabric) under the ICAC instead of directly under the RCAC. Defaults to false (the flat RCAC->NOC path) via FabricConfig::new.

Implementations

impl FabricConfig

pub fn new( fabric_id: u64, rcac_id: u64, commissioner_node_id: u64, validity: (MatterTime, MatterTime), ) -> Self

Construct a fabric configuration.

This is the supported construction path now that FabricConfig is #[non_exhaustive]; the public fields remain readable/writable in place. See FabricConfig::validity for what to pass as validity — in particular, a real wall-clock not_before, not the Matter epoch.

Trait Implementations

impl Clone for FabricConfig

fn clone(&self) -> FabricConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FabricConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.