keyMaterial: () => {
bbs: { cryptosuite: string; curve: string; what: string };
curveKeys: any;
postQuantum: {
algorithms: string[];
generated: boolean;
keys: any;
what: string;
};
realm: any;
regeneratedEveryStart: boolean;
signerGroups: { keys: any; model: string };
signing: {
alg: string;
bits: number;
certificate: string;
certificateFingerprint: string;
kid: string;
kty: string;
what: string;
};
spiffe: {
authorityFingerprint: string;
authorityKeyType: string;
authoritySource: any;
enabled: boolean;
jwtAuthorities: any;
jwtKeyType: string;
perRealm: boolean;
ready: boolean;
svidKeyType: string;
trustAnchors: any;
trustDomain: string;
x509Authorities: number;
x509KeyType: string;
};
tls: {
certificates: { algorithm: any; certificateFingerprint: string }[];
fingerprint256: any;
names: any;
notAfter: any;
perRealm: boolean;
subject: any;
what: string;
};
} = ...
Describes the key material the ambient realm holds: the signing key, the post-quantum keys, the TLS listener certificate, the SPIFFE authority and the rest.