Skip to content

You're viewing documentation for a pre-release version. View the latest stable version

Instance Property

verifyingCriticalExtensions

The X.509 extension types that this policy understands and enforces.
var verifyingCriticalExtensions: [ASN1ObjectIdentifier] { get }

Discussion

X.509 certificates can have extensions marked as critical. These extensions must be understood and enforced by the verifier. If they aren’t understood or processed, then verifying the chain must fail.

Verifier uses the VerifierPolicy/verifyingCriticalExtensions field to determine what extensions are understood by a given VerifierPolicy. A VerifierPolicy understands the union of all the understood extensions of its contained VerifierPolicy objects.

This may be an empty array, if the policy does not concern itself with any particular extensions. Users must only put an extension value in this space if they are actually enforcing the rules of that particular extension value.