Variable ownRsaCertificates

Type Declaration

• • (
        useCaseId: any,
        keySet: any,
    ): (
        | { certPem: any; chainPem: any; kid: any; role: string }
        | { certPem: any; kid: any; role: string }
    )[]

  • Lists the certificates a signature this realm made with a use case's RSA unit may verify against: current first, then next, then each retired key still in its grace.

    The one lookup every "is this ours" check asks, so a signature made before a rotation still verifies. Selection only; the verification is crypto.js's.

    Parameters

    • useCaseId: any

      jose or xml

    • keySet: any

      the key set; the ambient realm's when absent

    Returns (
        | { certPem: any; chainPem: any; kid: any; role: string }
        | { certPem: any; kid: any; role: string }
    )[]

    { kid, certPem, role, chainPem } rows