SSL Services: Difference between revisions
No edit summary |
|||
| Line 194: | Line 194: | ||
{| class="wikitable" border="1" | {| class="wikitable" border="1" | ||
|- | |- | ||
! | ! Flag (BIT) | ||
! Description | ! Description | ||
|- | |- | ||
| | | 0x000 (??) | ||
| | | Don't verify certificate at all | ||
|- | |- | ||
| | | 0x001 (00) | ||
| | | Verify Common Name (CN) | ||
|- | |- | ||
| 11 | | 0x002 (01) | ||
| | | Verify RootCA | ||
|- | |||
| 0x004 (02) | |||
| Verify date | |||
|- | |||
| 0x008 (03) | |||
| Verify cert chain | |||
|- | |||
| 0x010 (04) | |||
| Verify "subject alt name" (required for multi-address certificates) | |||
|- | |||
| 0x020 (05) | |||
| Verify cert EV | |||
|- | |||
| 0x200 (09) | |||
| Makes certification validation always succeed | |||
|- | |||
| 0x800 (11) | |||
| Disable use of TLSv1.1 (hence fallback to TLSv1.0) | |||
|} | |} | ||