waltid-openid4vc-wallet-mobile/id.walt.wallet2.mobile/ProximityReaderTrustConfiguration

ProximityReaderTrustConfiguration

data class ProximityReaderTrustConfiguration(val trustAnchors: List<ProximityReaderTrustAnchor> = emptyList(), val ricalProviders: List<ProximityRicalConfiguration> = emptyList(), val revocationPolicy: ProximityReaderRevocationPolicy = ProximityReaderRevocationPolicy.NotChecked, val requiredIacaIssuerCertificateDerBase64Url: String? = null)

Immutable shared reader-trust policy.

Direct Reader CA anchors and RICAL provider roots are always application-provisioned. Certificates carried by a reader or a RICAL are path inputs only and never become implicit SDK trust anchors. RICAL providers are evaluated in configured order; the first matching authority owns the result.

Constructors

constructor(trustAnchors: List<ProximityReaderTrustAnchor> = emptyList(), ricalProviders: List<ProximityRicalConfiguration> = emptyList(), revocationPolicy: ProximityReaderRevocationPolicy = ProximityReaderRevocationPolicy.NotChecked, requiredIacaIssuerCertificateDerBase64Url: String? = null)

Properties

requiredIacaIssuerCertificateDerBase64Url

val requiredIacaIssuerCertificateDerBase64Url: String?

Optional application-identified IACA direct issuer, encoded as unpadded Base64URL DER. When set, require that exact direct issuer on the validated path and an issuer-alternative-name email or URI contact in the reader certificate. The application identifies the issuer's IACA role; this restriction does not add trust. Invalid DER is reported as an invalid certificate path during evaluation, including through Swift.

revocationPolicy

val revocationPolicy: ProximityReaderRevocationPolicy

Revocation behavior for a reader chain trusted by a direct Reader CA anchor.

ricalProviders

val ricalProviders: List<ProximityRicalConfiguration>

Ordered application-configured RICAL provider policies.

trustAnchors

val trustAnchors: List<ProximityReaderTrustAnchor>

Explicit application-provisioned Reader CA trust anchors.