Struct Authenticated 

pub struct Authenticated<'r, 'a> { /* private fields */ }

An authenticated signature and its exact source authority. This does not claim freshness, distribution-point applicability or non-revocation.

Implementations

impl<'a> Authenticated<'_, 'a>

pub fn scope<W: Work>( &self, target: &Certificate<'a>, execution: &W, ) -> Result<ScopeOutcome>

Derive applicability from the target’s own signed DP extension. Relative names are compared as borrowed composed RDN views, never encoded again. If no explicit DP applies, also consider the RFC 5280 §6.3.3 issuer-name fallback over supplied CRLs; this performs no fetching or discovery.

impl<'r, 'a> Authenticated<'r, 'a>

pub fn entry<W: Work>( &self, target: &Certificate<'_>, execution: &W, ) -> Result<EntryLookup<'r, 'a>>

Search by issuer plus serial, retaining indirect issuer inheritance. Unknown critical extensions anywhere in the list invalidate use for all statuses, including demands on entries unrelated to this target.

impl<'r, 'a> Authenticated<'r, 'a>

pub fn bind_delta<'b, W: Work>( &'b self, delta: &'b Self, execution: &W, ) -> Result<DeltaBinding<'b, 'r, 'a>>

Bind a candidate delta to this complete CRL without copying entries. The caller supplies both issuer paths’ same-anchor trust provenance. Each comparison and lazy read uses the current execution account.

impl Authenticated<'_, '_>

pub fn freshness<W: Work>( &self, now: Reading, utc: &LeapTable<'_>, execution: &W, ) -> Result<Freshness>

Establish update-interval facts without reading a clock or fetching UTC announcements. RFC 5280 §§5.1.2.4–5.1.2.5 define whole-second update times. Current covers the half-open interval; exact nextUpdate is preserved separately because cached and newly obtained sources have different endpoint requirements in RFC 5280 §6.3.3(a). https://www.rfc-editor.org/rfc/rfc5280#section-5.1.2.5

A subnanosecond remainder distinguishes exact nextUpdate from after it. All compared UTC labels are validated against the supplied table first. Missing coverage and contradicted leap labels remain uncertainty.

impl<'r, 'a> Authenticated<'r, 'a>

pub fn evaluate<'b, E: Work>( &'b self, target: &'r Certificate<'a>, time: &Evaluation<'_, E>, ) -> Result<CompleteEvidence<'b, 'r, 'a>>

Compose applicability, time and full-list entry semantics over this original complete source. Caller supplies authenticated issuer path and same-anchor provenance as required by RFC5280 §6.3.3(f).

impl<'r, 'a> Authenticated<'r, 'a>

pub fn crl(self) -> &'r CertificateList<'a>

Original CRL whose signed bytes the callback authenticated.

pub fn issuer(self) -> &'r Certificate<'a>

Certificate supplied as the already authenticated signing authority.

pub fn key(self) -> WorkingKey<'a>

Effective key, bound to this issuer’s original SPKI.

Trait Implementations

impl<'r, 'a> Clone for Authenticated<'r, 'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'r, 'a> Copy for Authenticated<'r, 'a>

impl<'r, 'a> Debug for Authenticated<'r, 'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.