If omitted a chain of the ExplicitKey and PKIX engines is used.
Four types of trust engine are available by defaul, these are distinguised by the
|Extracts keys to trust directly from the metadata of the peer.|
|Extracts key identifiers (i.e. certificate names) to trust from the metadata of the peer, but also extracts sets of trust anchors from a special metadata extension and then applies path validation to candidate certificates.|
|Extracts key identifiers (i.e. certificate names) to trust from the metadata of the peer, and then applies path validation to candidate certificates based on a static list of trust anchors.|
Plugin type name.
Common Child Elements
|0 or 1|
Advanced plugin interface for mapping