Struct CertGenerator 

pub struct CertGenerator<'a> { /* private fields */ }

One-shot Matter-TLV certificate generator writing into a caller-supplied buffer.

Typical callers are the three issuers in crate::onboard::cac (RCAC, ICAC) and crate::onboard::noc (NOC); each one constructs a CertGenerator over its scratch buffer, calls Self::generate once and discards the generator. Subject / issuer / pubkey / signing-key consistency is the caller’s responsibility — generate only checks invariants generic across cert types (serial number well-formedness).

Implementations

impl<'a> CertGenerator<'a>

pub const fn new(buf: &'a mut [u8]) -> CertGenerator<'a>

Create a new generator over the given output buffer.

pub fn generate<C>( &mut self, crypto: C, cert_type: CertType, serial_number: &[u8], validity: Validity, subject: SubjectDN<'_>, issuer: IssuerDN, subject_pubkey: CryptoSensitiveRef<'_, rs_matter::::crypto::canon::CanonPkcPublicKeyRef::{constant#0}>, issuer_pubkey: Option<CryptoSensitiveRef<'_, rs_matter::::crypto::canon::CanonPkcPublicKeyRef::{constant#0}>>, signing_key: &<C as Crypto>::SecretKey<'_>, ) -> Result<usize, Error>

where C: Crypto,

Generate a Matter-TLV certificate of the given kind, sign it, and return the length written to the buffer.

issuer_pubkey must be None for CertType::Rcac (self-signed: AKID = SKID) and Some(_) for Icac / Noc. signing_key is the issuer’s private key — the RCAC’s own key for RCAC and ICAC; the ICAC’s (or RCAC’s) for NOC.