Changes

359 bytes added ,  16:25, 11 July 2017
Line 194: Line 194:  
{| class="wikitable" border="1"
 
{| class="wikitable" border="1"
 
|-
 
|-
Bit(s)
+
Flag (BIT)
 
!  Description
 
!  Description
 
|-
 
|-
| 8
+
| 0x000 (??)
| ?
+
| Don't verify certificate at all
 
|-
 
|-
| 9
+
| 0x001 (00)
| Disables server cert verification when set.
+
| Verify Common Name (CN)
 
|-
 
|-
| 11
+
| 0x002 (01)
| Use TLSv1.0.
+
| Verify RootCA
 +
|-
 +
| 0x004 (02)
 +
| Verify date
 +
|-
 +
| 0x008 (03)
 +
| Verify cert chain
 +
|-
 +
| 0x010 (04)
 +
| Verify "subject alt name" (required for multi-address certificates)
 +
|-
 +
| 0x020 (05)
 +
| Verify cert EV
 +
|-
 +
| 0x200 (09)
 +
| Makes certification validation always succeed
 +
|-
 +
| 0x800 (11)
 +
| Disable use of TLSv1.1 (hence fallback to TLSv1.0)
 
|}
 
|}
  
Trusted
225

edits