TrustConfig

data class TrustConfig(val issuerRootsPem: List<String> = emptyList(), val readerRootsPem: List<String> = emptyList(), val issuerVical: ByteArray? = null, val readerRical: ByteArray? = null, val issuerDisplayNames: List<IssuerDisplayName> = emptyList())

Trust anchors for both roles. As a verifier, issuerRootsPem validates the credential's issuer chain; as a holder, readerRootsPem authenticates the reader before releasing data. Both are runtime-provisioned and rotatable.

Constructors

Link copied to clipboard
constructor(issuerRootsPem: List<String> = emptyList(), readerRootsPem: List<String> = emptyList(), issuerVical: ByteArray? = null, readerRical: ByteArray? = null, issuerDisplayNames: List<IssuerDisplayName> = emptyList())

Properties

Link copied to clipboard

Verifier side: human names for trusted issuer roots (IACA), shown as "Issued by " when the credential itself doesn't disclose its issuing authority (e.g. an age-only check).

Link copied to clipboard
Link copied to clipboard
val issuerVical: ByteArray? = null

Signed VICAL (ISO 18013-5 Verified Issuer CA List) — trust every IACA it lists.

Link copied to clipboard
val readerRical: ByteArray? = null

Signed RICAL (Reader CA List) — authenticate readers before releasing data (holder side).

Link copied to clipboard