Enum Holder 

pub enum Holder<'r, 'p, 'a, 'c> {
    Certificate {
        path: &'r HolderPath<'p, 'a>,
        method: HolderMethod,
    },
    Object {
        binding: &'r BoundObject<'r, 'c, 'a>,
        path: Option<&'r HolderPath<'p, 'a>>,
    },
}

Explicit caller-authenticated holder context. Selecting an alternative never tries another written Holder identity as a fallback. Supplying this input asserts that the protocol established the holder’s possession/identity and, for a certificate, its revocation status. The library checks the PKIX path.

Variants

Certificate

An authenticated PKC with a completed original path.

Fields

path: &'r HolderPath<'p, 'a>

Original checked path whose first PKC authenticated the holder.

method: HolderMethod

Explicit baseCertificateID or entityName interpretation.

Object

Already completed object-digest comparison for this AC. For a PKC object, its complete path is required; bare keys use the protocol’s independent authentication scheme (RFC5755 §5(1), §7.3).

Fields

binding: &'r BoundObject<'r, 'c, 'a>

Original digest comparison, never just an asserted digest match.

path: Option<&'r HolderPath<'p, 'a>>

Required for certificate objects; optional for bare-key protocols.

Trait Implementations

impl<'r, 'p, 'a, 'c> Debug for Holder<'r, 'p, 'a, 'c>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.