Module proxy 

Accounted proxy-set checks (RFC5755 §7.2), separate from AC authentication.

Sender/recipient/hop identities and the trustworthy complete forwarding path come from the application protocol. This checks no signature or AA trust.

Structs

ProxyInfo

Complete proxy constraints, sharing the targeting decoder and original groups.

Enums

Decision

Completed proxy-set fact, never an application authorization verdict.

Sender

Already-authenticated sender facts supplied by the caller, not this reader.

Subject

Identity whose group membership the callback must establish.

Constants

IDENTIFIER

id-pe-ac-proxying, 1.3.6.1.5.5.7.1.10.