Struct CertRef 

pub struct CertRef<'a>(/* private fields */);

Implementations

impl<'a> CertRef<'a>

pub const fn new(tlv: TLVElement<'a>) -> CertRef<'a>

pub fn pubkey(&self) -> Result<&[u8], Error>

pub fn get_node_id(&self) -> Result<u64, Error>

pub fn get_cat_ids(&self, output: &mut [u32]) -> Result<(), Error>

pub fn get_fabric_id(&self) -> Result<u64, Error>

pub fn get_ca_id(&self) -> Result<u64, Error>

Subject CA-ID — the RootCaId of an RCAC or the IcaId of an ICAC. Matter-issued RCACs always carry exactly one RootCaId in their subject DN; ICACs always carry exactly one IcaId (spec). Returns the first matching value; errors out if neither tag is present.

pub fn basic_constraints_path_len(&self) -> Result<Option<u8>, Error>

BasicConstraints.pathLenConstraint, or None if absent (either the extension itself is missing or the field is omitted).

Exposed for the AddTrustedRootCertificate flow, which the Matter spec requires to additionally reject an RCAC whose pathLenConstraint is greater than 1 (see CHIP’s ValidateChipRCAC).

pub fn is_self_signed(&self) -> Result<bool, Error>

Whether this certificate is self-signed (its AuthorityKeyId matches its SubjectKeyId). Matter-issued RCACs are always self-signed; an ICAC or NOC must not be (Matter Core spec).

pub fn as_asn1(&self, buf: &mut [u8]) -> Result<usize, Error>

pub fn verify_chain_start<C>( &'a self, crypto: C, utc_time: UtcTime, ) -> CertVerifier<'a, C>

where C: Crypto,

Start a chain verification of this certificate.

Every cert added to the chain (the leaf here, intermediates via CertVerifier::add_cert, and the self-signed root via CertVerifier::finalise) is checked against lkg_utc_secs for its NotBefore / NotAfter validity window, per Matter Core spec which mandates use of the Last-Known-Good UTC Time when no live trusted real-time-clock value is available. Callers snapshot the value from [crate::Matter::last_known_utc_time] (Matter-epoch seconds).

Trait Implementations

impl<'a> Clone for CertRef<'a>

fn clone(&self) -> CertRef<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for CertRef<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for CertRef<'_>

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'a> Eq for CertRef<'a>

impl<'a> FromTLV<'a> for CertRef<'a>

fn from_tlv(element: &TLVElement<'a>) -> Result<CertRef<'a>, Error>

Deserialize the type from a TLV-encoded element.

fn init_from_tlv(element: TLVElement<'a>) -> impl Init<Self, Error>

Generate an in-place initializer for the type that initializes the type from a TLV-encoded element.

fn nullable_from_tlv(element: &TLVElement<'a>) -> Result<Self, Error>

Deserialize the type from a TLV-encoded element.

fn init_nullable_from_tlv(element: TLVElement<'a>) -> impl Init<Self, Error>

Generate an in-place initializer for the type that initializes the type from a TLV-encoded element.

impl<'a> Hash for CertRef<'a>

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl<'a> PartialEq for CertRef<'a>

fn eq(&self, other: &CertRef<'a>) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl<'a> StructuralPartialEq for CertRef<'a>

impl<'a> ToTLV for CertRef<'a>

fn to_tlv<W>(&self, tag: &TLVTag, tw: W) -> Result<(), Error>

where W: TLVWrite,

Serialize the type to a TLV-encoded stream.

fn tlv_iter(&self, tag: TLVTag) -> impl Iterator<Item = Result<TLV<'_>, Error>>

Serialize the type as an iterator of TLV instances by potentially borrowing data from the type.

fn nullable_to_tlv<W>(&self, tag: &TLVTag, tw: W) -> Result<(), Error>

where W: TLVWrite,

Serialize the type to a TLV-encoded stream.

fn nullable_tlv_iter( &self, tag: TLVTag, ) -> impl Iterator<Item = Result<TLV<'_>, Error>>

Serialize the type as an iterator of TLV instances by potentially borrowing data from the type.

impl<'a> TryFrom<&TLVElement<'a>> for CertRef<'a>

type Error = Error

The type returned in the event of a conversion error.

fn try_from( element: &TLVElement<'a>, ) -> Result<CertRef<'a>, <CertRef<'a> as TryFrom<&TLVElement<'a>>>::Error>

Performs the conversion.