chainMeetsPolicyRequirements(chain:)
Called to determine whether a given UnverifiedCertificateChain
meets the requirements of this policy.
- iOS
- 13+
- macOS
- 10.15+
- tvOS
- 13+
- watchOS
- 6+
mutating func chainMeetsPolicyRequirements(chain: UnverifiedCertificateChain) async -> PolicyEvaluationResult
Certificate verification is split into two parts: chain building and policy enforcement. Chain building is general: regardless of policy, we use the same chain building algorithm. This will generate a sequence of candidate chains in the form of UnverifiedCertificateChain
.
Each of these candidate chains is then handed to a VerifierPolicy
to be checked against the certificate policy. The checking is done in this method.