Discuss this help topic in SecureBlackbox Forum
Use this method to check validity of certificates.
Declaration
Parameters
Validity values
|
Validity reasons
|
Description
Use one of Validate methods to validate the certificate and its issuer (CA) certificates. You need to pass the end-entity certificate only - CA certificates will be retrieved via Certificate's Chain property. If the chain is not available, you can pass CA certificates via AdditionalCertificates parameter or using AddKnownCertificates() method.
On return Validity contains the result of certificate validation. If the last certificate in the chain was self-signed (as it usually should be, because the chain is built up to the self-signed root certificate), Validity can be cvSelfSigned, if the topmost certificate was not found in the list of trusted certificates, or cvOk if the topmost certificate is trusted.
When CompleteChainValidation = true and the certificate is found to be not valid, certificate validation continues, i.e. issuer (CA) certificates are validated as well. This lets you create validation report which should include all certificates in the chain. When CompleteChainValidation = false and the certificate is not valid, further validation is not performed and Validate() method returns immediately.
Since version 13 ResetCertificateCache parameter has been replaced with ResetCertificateCache class method.