The OCSP query is considered unsuccessful and will fail verification in both soft and hard failure mode. The certificate is then considered to not meet the OCSPVerifierPolicy and chainMeetsPolicyRequirements(chain:) will return failsToMeetPolicy(reason:) with the given reason.
static func terminalError(_ reason: Error) -> OCSPRequesterQueryResult s4X50924OCSPRequesterQueryResultV13terminalErroryACs0F0_pFZ What are these?4CBH3the reason why the OCSP query failed
import X509A library for working with X.509 certificates.
struct OCSPRequesterQueryResultstatic var soft: Self { get }soft failure mode will only fail verification if a verified and valid OCSP response reports a status of revoked. If the request, decoding or validation fails, the certificates will still meet the policy.
static var hard: Self { get }hard failure mode will fail verification if any of the OCSP request decoding or validation fails in addition to revoked or unknown status reports from the responder. Verification will succeed if the OCSP response status is good. In addition, if the request fails or times out the certificate will still meet the policy though to allow the network to be down.
struct OCSPVerifierPolicy<Requester> where Requester : OCSPRequestermutating func chainMeetsPolicyRequirements(chain: UnverifiedCertificateChain) async -> PolicyEvaluationResult static func failsToMeetPolicy(reason: PolicyFailureReason) -> PolicyEvaluationResult protocol Error : SendableA type representing an error value that can be thrown.
static func nonTerminalError(_ reason: Error) -> OCSPRequesterQueryResult The OCSP query is considered unsuccessful but will not fail verification, neither in soft nor in hard failure mode. The certificate is then considered to meet the OCSPVerifierPolicy.
static func response(_ bytes: [UInt8]) -> OCSPRequesterQueryResult The OCSP query is considered successful and has returned the given DER-encoded response bytes.