hard

hard failure mode will fail verification if any of the OCSP request decoding or validation fails in addition to revoked or unknown status reports from the responder. Verification will succeed if the OCSP response status is good. In addition, if the request fails or times out the certificate will still meet the policy though to allow the network to be down.

OCSPPolicy.swift:177
static var hard: Self { get }

Other members in extension

Type members

  • static var soft: Self

    soft failure mode will only fail verification if a verified and valid OCSP response reports a status of revoked. If the request, decoding or validation fails, the certificates will still meet the policy.