ValidateCandidatePathInput

Input for validateCandidatePath.

interface ValidateCandidatePathInput extends PolicyValidationInput, InitialNameConstraintsInput {
	readonly policy?: PolicyValidationInput;
	readonly nameConstraints?: InitialNameConstraintsInput;
	readonly chain: readonly ParsedCertificate[];
	readonly at?: Date;
	readonly purpose?: VerifyPurpose;
	readonly allowSelfSignedLeaf?: boolean;
}

Properties

• readonly policy?: PolicyValidationInput — Nested policy validation overrides (takes precedence over flat fields).
• readonly nameConstraints?: InitialNameConstraintsInput — Nested name constraint overrides (takes precedence over flat fields).
• readonly chain: readonly ParsedCertificate[] — Pre-built certificate chain in leaf-to-root order.
• readonly at?: Date — Validation time. Defaults to new Date().
• readonly purpose?: VerifyPurpose — Leaf purpose constraint to enforce.
• readonly allowSelfSignedLeaf?: boolean — When true, allows a self-signed leaf that is also the root. Defaults to false.