RFC5280Policy

A VerifierPolicy that implements the core chain verifying policies from RFC 5280.

RFC5280Policy.swift:31
iOS
13+
macOS
10.15+
Mac Catalyst
13+
tvOS
13+
visionOS
1.0+
watchOS
6+
struct RFC5280Policy

Almost all verifiers should use this policy as the initial component of their policy set. The policy checks the following things:

  1. Version. v1 Certificates with Extensions are rejected.

  2. Expiry. Expired certificates are rejected.

  3. Basic Constraints. Police the constraints contained in the BasicConstraints extension.

  4. Name Constraints. Police the constraints contained in the NameConstraints extension.