pub fn bind<'a, 'r, 'm, 'd, 'p, P: AsnDigest<'a>>(
prepared: &'r Preparation<'m, 'd>,
document_checks: &DocumentChecks<'_>,
checked: &Checked<'_>,
certificate: &'p Certificate<'d>,
path: Option<&'p CheckedPath<'d>>,
provider: &'a P,
parent: &Reader<'a>,
) -> Result<SignerBinding<'r, 'm, 'd, 'p>, BindError<P::Error>>where
'd: 'a,Expand description
Binds the ORIGINAL CMS checked signer and effective key to its selected certificate and actual common-validator path. No signature or payload is replayed. SID/name, exact incorporation and ESS use their existing kernels.
EN319122-1 ยงยง5.2.2/6.3(a) require the protected certificate binding and its original root occurrence. Trust selection, algorithm permissions and current or historical revocation acceptance remain explicit caller work. https://www.etsi.org/deliver/etsi_en/319100_319199/31912201/01.03.01_60/en_31912201v010301p.pdf