Enum

client-cert-verify-result

TLS client certificate verified result from downstream.

enum client-cert-verify-result {
  ok,
  bad-certificate,
  certificate-revoked,
  certificate-expired,
  unknown-ca,
  certificate-missing,
  certificate-unknown,
}

Cases

CaseDescription
ok

Success value.

This indicates that client certificate verified successfully.

bad-certificate

bad certificate error.

This error means the certificate is corrupt (for example, when the certificate signatures do not verify correctly).

certificate-revoked

certificate revoked error.

This error means the client certificate is revoked by its signer.

certificate-expired

certificate expired error.

This error means the client certificate has expired or is not currently valid.

unknown-ca

unknown CA error.

This error means the valid certificate chain or partial chain was received, but the certificate was not accepted because the CA certificate could not be located or could not be matched with a known trust anchor.

certificate-missing

certificate missing error.

This error means the client does not provide a certificate during the handshake.

certificate-unknown

certificate unknown error.

This error means the client certificate was received, but some other (unspecified) issue arose in processing the certificate, rendering it unacceptable.

Theme