Константы CHECK_FLAG (флаг проверки) аналогичны перечислению CAPICOM_CHECK_FLAG.
Имя | Описание | Значение |
---|---|---|
CHECK_NONE | No validity checking is done. | 0 |
CHECK_TRUSTED_ROOT | Checks for a trusted root of the certificate chain. | 1 |
CHECK_TIME_VALIDITY | Checks the time validity of all certificates in the chain. | 2 |
CHECK_SIGNATURE_VALIDITY | Checks for valid signatures on all certificates in the chain. | 4 |
CHECK_ONLINE_REVOCATION_STATUS | Checks the revocation status of all certificates in the chain using certificate revocation lists (CRLs) available online. CRLs are downloaded using the CRL distribution point (CDP) extension in the certificate.If the CRL has been downloaded and has not expired, phpcades uses it and does not go online. If a CRL has not been downloaded or is out of date, phpcades goes online to attempt to download the CRL. This flag is ignored if CHECK_OFFLINE_REVOCATION_STATUS is also specified. | 8 |
CHECK_OFFLINE_REVOCATION_STATUS | Checks the revocation status of all certificates in the chain using only offline CRLs. | 16 |
CHECK_COMPLETE_CHAIN | Checks the complete chain. | 32 |
CHECK_NAME_CONSTRAINTS | Checks name constraints. | 64 |
CHECK_BASIC_CONSTRAINTS | Checks basic constraints. | 128 |
CHECK_NESTED_VALIDITY_PERIOD | Checks nested validity. | 256 |
CHECK_ONLINE_ALL | Checks all conditions except CHECK_OFFLINE_REVOCATION_STATUS. Revocation checks are performed on all certificates in the chain except for the root certificate. | 495 |
CHECK_OFFLINE_ALL | Checks all conditions except CHECK_ONLINE_REVOCATION_STATUS. Revocation checks are performed on all certificates in the chain except for the root certificate. | 503 |