OptionalallowedOptionaltrust"System" trust anchors. Any asset validated off of this trust list will have a "signingCredential.trusted" result with an explanation noting the trust source is a "System" anchor.
Possible values are: the text content of a .pem file, a URL to fetch a .pem file from, or an array of URLs that will be fetched and concatenated.
OptionaltrustTrust store
Possible values are: the text content of a .cfg file, a URL to fetch a .cfg file from, or an array of URLs that will be fetched and concatenated.
Optionaluser"User" trust anchors. Any asset validated off of this trust list will have a "signingCredential.trusted" result with an explanation noting the trust source is a "User" anchor.
Possible values are: the text content of a .pem file, a URL to fetch a .pem file from, or an array of URLs that will be fetched and concatenated.
OptionalverifyEnable CAWG trust validation. The default value is "true."
Only has an effect when set on cawgTrust — mirrors c2pa-rs's Trust struct, which is
shared by both the trust and cawg_trust settings sections and carries this field on both.
End-entity certificates.
Possible values are: the text content of a end-entity cert file, a URL to fetch a end-entity cert file from, or an array of URLs that will be fetched and concatenated.