Role

sealed interface Role(source)

What a certificate is for, and therefore which RFC 5280 extensions it carries.

Real attestation chains are ordinary, compliant X.509: without these, strict path validation (OpenSSL's included) rejects the chain outright with invalid CA certificate.

Inheritors

Types

Link copied to clipboard
data class CertificateAuthority(val pathLength: Int?) : Role
Link copied to clipboard
data object EndEntity : Role

Functions

Link copied to clipboard
open fun extensions(subjectKey: CryptoPublicKey, issuerKey: CryptoPublicKey): List<X509CertificateExtension>