215
edits
Changes
Jump to navigation
Jump to search
Line 194:
Line 194: − + − + − + − + − + − + − + + + + + + + + + + + + + + + + + + +
→SSLOpt
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
! Bit(s)
! Flag (BIT)
! Description
! Description
|-
|-
| 8
| 0x000 (??)
| ?
| Don't verify certificate at all
|-
|-
| 9
| 0x001 (00)
| Disables server cert verification when set.
| Verify Common Name (CN)
|-
|-
| 11
| 0x002 (01)
| Use TLSv1.0.
| Verify RootCA
|-
| 0x004 (02)
| Verify date
|-
| 0x008 (03)
| Verify cert chain
|-
| 0x010 (04)
| Verify "subject alt name" (required for multi-address certificates)
|-
| 0x020 (05)
| Verify cert EV
|-
| 0x200 (09)
| Makes certification validation always succeed
|-
| 0x800 (11)
| Disable use of TLSv1.1 (hence fallback to TLSv1.0)
|}
|}