Expand description
RFC5755 §7.4 restrictions along one explicitly supplied AA certificate path.
The caller supplies an already authenticated leaf-first path with the AA issuer first and its explicitly trusted AA CA last. This module does not discover that trust, verify signatures, or replace PKIX path validation. https://www.rfc-editor.org/rfc/rfc5755#section-7.4
Structs§
- AaPath
- Complete restriction census from the AA issuer through the chosen AA CA.
Enums§
- Permission
- Completed per-attribute intersection, not an application permission verdict.