public interface AttestationTrustSource
| Modifier and Type | Interface and Description |
|---|---|
static class |
AttestationTrustSource.TrustRootsResult
A result of looking up attestation trust roots for a particular attestation statement.
|
| Modifier and Type | Method and Description |
|---|---|
AttestationTrustSource.TrustRootsResult |
findTrustRoots(java.util.List<java.security.cert.X509Certificate> attestationCertificateChain,
java.util.Optional<ByteArray> aaguid)
Attempt to look up attestation trust roots for an authenticator.
|
AttestationTrustSource.TrustRootsResult findTrustRoots(java.util.List<java.security.cert.X509Certificate> attestationCertificateChain, java.util.Optional<ByteArray> aaguid)
Note that it is possible for the same trust root to be used for different certificate chains. For example, an authenticator vendor may make two different authenticator models, each with its own attestation leaf certificate but both signed by the same attestation root certificate. If a Relying Party trusts one of those authenticator models but not the other, then its implementation of this method MUST return an empty set for the untrusted certificate chain.
attestationCertificateChain - the attestation certificate chain for the authenticator.aaguid - the AAGUID of the authenticator, if available.