Skip to content

You're viewing documentation for a pre-release version. View the latest stable version

Type Method

custom(_:)

A verifier of your own, in place of any trust roots.
static func custom(_ verify: @escaping @Sendable ([Certificate]) async throws -> Verdict) -> ServerConfiguration.TLSConfiguration.ClientCertificateVerification.TrustSource

Discussion

verify is handed the chain exactly as the client presented it, leaf first, and decides. Nothing is checked before it runs — not expiry, not the signature chain — so it carries the whole burden of trust. Throwing rejects the client, as does returning ServerConfiguration.TLSConfiguration.ClientCertificateVerification.Verdict.rejected(reason:).