Trusted
225
edits
Changes
Jump to navigation
Jump to search
→SSLOpt
Line 194:
Line 194:
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
−! Bit(s)
+! Flag (BIT)
! Description
! Description
|-
|-
−| 8
+| 0x000 (??)
−| ?
+| Don't verify certificate at all
|-
|-
−| 9
+| 0x001 (00)
−| Disables server cert verification when set.
+| Verify Common Name (CN)
|-
|-
−| 11
+| 0x002 (01)
−| Use TLSv1.0.
+| Verify RootCA
+|-
+| 0x004 (02)
+| Verify date
+|-
+| 0x008 (03)
+| Verify cert chain
+|-
+| 0x010 (04)
+| Verify "subject alt name" (required for multi-address certificates)
+|-
+| 0x020 (05)
+| Verify cert EV
+|-
+| 0x200 (09)
+| Makes certification validation always succeed
+|-
+| 0x800 (11)
+| Disable use of TLSv1.1 (hence fallback to TLSv1.0)
|}
|}