verify

open suspend override fun verify(chain: List<X509Cert>, atTime: Instant): TrustResult

Evaluates a given X.509 certificate chain against all managed trust points to determine if it is trusted.

This evaluation happens in three phases:

  1. Checks against certificates provided by managed VICALs.

  2. Checks against certificates provided by managed RICALs.

  3. Checks against individually managed standalone X.509 certificates.

Return

A TrustResult containing the verification status, the resolved chain, and any associated error if verification failed.

Parameters

chain

The certificate chain to verify.

atTime

The exact time to use for validity and expiration checks.