TlsCertificateFlags
Added in version 2.28.
- class TlsCertificateFlags
A set of flags describing TLS certification validation. This can be
used to describe why a particular certificate was rejected (for
example, in TlsConnection::accept-certificate).
GLib guarantees that if certificate verification fails, at least one
flag will be set, but it does not guarantee that all possible flags
will be set. Accordingly, you may not safely decide to ignore any
particular type of error. For example, it would be incorrect to mask
EXPIRED if you want to allow expired certificates,
because this could potentially be the only error flag set even if
other problems exist with the certificate.
Fields
- class TlsCertificateFlags
- BAD_IDENTITY
The certificate does not match the expected identity of the site that it was retrieved from.
- EXPIRED
The certificate has expired
- GENERIC_ERROR
Some other error occurred validating the certificate
- INSECURE
The certificate’s algorithm is considered insecure.
- NOT_ACTIVATED
The certificate’s activation time is still in the future
- NO_FLAGS
No flags set. Since: 2.74
- REVOKED
The certificate has been revoked according to the
TlsConnection’s certificate revocation list.
- UNKNOWN_CA
The signing certificate authority is not known.
- VALIDATE_ALL
The combination of all of the above flags