148 references to X509ChainStatusFlags
netstandard (1)
netstandard.cs (1)
1965[assembly: System.Runtime.CompilerServices.TypeForwardedTo(typeof(System.Security.Cryptography.X509Certificates.X509ChainStatusFlags))]
NuGet.Packaging (37)
Signing\ChainBuilding\RetriableX509ChainBuildPolicy.cs (1)
64if (chainStatus.Status.HasFlag(X509ChainStatusFlags.UntrustedRoot))
Signing\Signatures\Signature.cs (5)
221var statusFlags = CertificateChainUtility.DefaultObservedStatusFlags; 237if (CertificateChainUtility.TryGetStatusAndMessage(chainStatuses, X509ChainStatusFlags.Revoked, out messages)) 245if (CertificateChainUtility.TryGetStatusAndMessage(chainStatuses, X509ChainStatusFlags.UntrustedRoot, out messages)) 261var offlineRevocationErrors = CertificateChainUtility.TryGetStatusAndMessage(chainStatuses, X509ChainStatusFlags.OfflineRevocation, out var _); 262var unknownRevocationErrors = CertificateChainUtility.TryGetStatusAndMessage(chainStatuses, X509ChainStatusFlags.RevocationStatusUnknown, out var unknownRevocationStatusMessages);
Signing\Timestamp\Timestamp.cs (5)
179var timestampInvalidCertificateFlags = CertificateChainUtility.DefaultObservedStatusFlags; 196if (CertificateChainUtility.TryGetStatusAndMessage(chainStatusList, X509ChainStatusFlags.UntrustedRoot, out messages)) 206if (CertificateChainUtility.TryGetStatusAndMessage(chainStatusList, X509ChainStatusFlags.Revoked, out messages)) 214var offlineRevocationErrors = CertificateChainUtility.TryGetStatusAndMessage(chainStatusList, X509ChainStatusFlags.OfflineRevocation, out var _); 215var unknownRevocationErrors = CertificateChainUtility.TryGetStatusAndMessage(chainStatusList, X509ChainStatusFlags.RevocationStatusUnknown, out var unknownRevocationStatusMessages);
Signing\TrustStore\CertificateBundleX509ChainFactory.cs (1)
83if (root.ChainElementStatus.Any(status => status.Status.HasFlag(X509ChainStatusFlags.UntrustedRoot)) &&
Signing\Utility\CertificateChainUtility.cs (19)
48/// <param name="allowUntrustedRoot">When <see langword="true" />, an <see cref="X509ChainStatusFlags.UntrustedRoot" /> 103X509ChainStatusFlags errorStatusFlags; 104X509ChainStatusFlags warningStatusFlags; 173out X509ChainStatusFlags errorStatusFlags, 174out X509ChainStatusFlags warningStatusFlags) 181warningStatusFlags = X509ChainStatusFlags.RevocationStatusUnknown | X509ChainStatusFlags.OfflineRevocation; 185warningStatusFlags |= X509ChainStatusFlags.UntrustedRoot; 189errorStatusFlags = (~(X509ChainStatusFlags)0) & ~warningStatusFlags; 250internal const X509ChainStatusFlags DefaultObservedStatusFlags = 252(~(X509ChainStatusFlags)0) & // Start with all flags 254(~X509ChainStatusFlags.NotTimeValid) & 255(~X509ChainStatusFlags.NotTimeNested) & // Deprecated and therefore ignored. 256(~X509ChainStatusFlags.Revoked) & 257(~X509ChainStatusFlags.RevocationStatusUnknown) & 258(~X509ChainStatusFlags.OfflineRevocation) & 259(~X509ChainStatusFlags.UntrustedRoot); 261internal static bool ChainStatusListIncludesStatus(X509ChainStatus[] chainStatuses, X509ChainStatusFlags status, out IEnumerable<X509ChainStatus> chainStatus) 269internal static bool TryGetStatusAndMessage(X509ChainStatus[] chainStatuses, X509ChainStatusFlags status, [NotNullWhen(returnValue: true)] out IEnumerable<string>? statusAndMessages)
Signing\Utility\CertificateUtility.cs (3)
358chainStatus => chainStatus.Status.HasFlag(X509ChainStatusFlags.Cyclic) || 359chainStatus.Status.HasFlag(X509ChainStatusFlags.PartialChain) || 360chainStatus.Status.HasFlag(X509ChainStatusFlags.NotSignatureValid)))
Signing\Utility\SignatureUtility.cs (3)
672chainStatus.Status.HasFlag(X509ChainStatusFlags.Cyclic) || 673chainStatus.Status.HasFlag(X509ChainStatusFlags.PartialChain) || 674chainStatus.Status.HasFlag(X509ChainStatusFlags.NotSignatureValid)))
PresentationUI (46)
MS\Internal\Documents\DigitalSignatureProvider.cs (46)
600X509ChainStatusFlags x509ChainStatusFlags; 608X509ChainStatusFlags x509RemainingFlags = (x509ChainStatusFlags ^ _x509NonCorruptedFlags) & 616if (x509RemainingFlags == X509ChainStatusFlags.NoError) 619if ((x509ChainStatusFlags & _x509CannotBeVerifiedFlags) != X509ChainStatusFlags.NoError) 624else if ((x509ChainStatusFlags & _x509IssuerNotTrustedFlags) != X509ChainStatusFlags.NoError) 629else if ((x509ChainStatusFlags & _x509RevokedFlags) != X509ChainStatusFlags.NoError) 634else if ((x509ChainStatusFlags & _x509ExpiredFlags) != X509ChainStatusFlags.NoError) 802private const X509ChainStatusFlags _x509NonCorruptedFlags = 803X509ChainStatusFlags.HasExcludedNameConstraint | 804X509ChainStatusFlags.HasNotDefinedNameConstraint | 805X509ChainStatusFlags.HasNotPermittedNameConstraint | 806X509ChainStatusFlags.HasNotSupportedNameConstraint | 807X509ChainStatusFlags.InvalidBasicConstraints | 808X509ChainStatusFlags.InvalidExtension | 809X509ChainStatusFlags.InvalidNameConstraints | 810X509ChainStatusFlags.InvalidPolicyConstraints | 811X509ChainStatusFlags.NoIssuanceChainPolicy | 812X509ChainStatusFlags.PartialChain | 813X509ChainStatusFlags.UntrustedRoot | 814X509ChainStatusFlags.Revoked | 815X509ChainStatusFlags.NotTimeValid | 816X509ChainStatusFlags.NoError | 817X509ChainStatusFlags.CtlNotSignatureValid | 818X509ChainStatusFlags.CtlNotTimeValid | 819X509ChainStatusFlags.CtlNotValidForUsage | 820X509ChainStatusFlags.NotTimeNested | 821X509ChainStatusFlags.NotValidForUsage | 822X509ChainStatusFlags.OfflineRevocation | 823X509ChainStatusFlags.RevocationStatusUnknown; 826private const X509ChainStatusFlags _x509CannotBeVerifiedFlags = 827X509ChainStatusFlags.HasExcludedNameConstraint | 828X509ChainStatusFlags.HasNotDefinedNameConstraint | 829X509ChainStatusFlags.HasNotPermittedNameConstraint | 830X509ChainStatusFlags.HasNotSupportedNameConstraint | 831X509ChainStatusFlags.InvalidBasicConstraints | 832X509ChainStatusFlags.InvalidExtension | 833X509ChainStatusFlags.InvalidNameConstraints | 834X509ChainStatusFlags.InvalidPolicyConstraints | 835X509ChainStatusFlags.NoIssuanceChainPolicy; 838private const X509ChainStatusFlags _x509IssuerNotTrustedFlags = 839X509ChainStatusFlags.PartialChain | 840X509ChainStatusFlags.UntrustedRoot; 843private const X509ChainStatusFlags _x509RevokedFlags = 844X509ChainStatusFlags.Revoked; 847private const X509ChainStatusFlags _x509ExpiredFlags = 848X509ChainStatusFlags.NotTimeValid;
ReachFramework (2)
packaging\XpsDigitalSignature.cs (2)
277X509ChainStatusFlags 289X509ChainStatusFlags
System (1)
src\runtime\src\libraries\shims\System\ref\System.cs (1)
874[assembly: System.Runtime.CompilerServices.TypeForwardedTo(typeof(System.Security.Cryptography.X509Certificates.X509ChainStatusFlags))]
System.Net.Security (27)
src\runtime\src\libraries\Common\src\Interop\Unix\System.Security.Cryptography.Native\Interop.OpenSsl.cs (1)
1024if (options.SslStream!.VerifyRemoteCertificate(certificate, chain, options.CertificateContext?.Trust, ref alertToken, out SslPolicyErrors sslPolicyErrors, out X509ChainStatusFlags chainStatus))
System\Net\Security\SslStream.IO.cs (6)
592private bool CompleteHandshake(ref ProtocolToken alertToken, out SslPolicyErrors sslPolicyErrors, out X509ChainStatusFlags chainStatus) 601chainStatus = X509ChainStatusFlags.NoError; 646chainStatus = X509ChainStatusFlags.NoError; 657if (!CompleteHandshake(ref alertToken, out SslPolicyErrors sslPolicyErrors, out X509ChainStatusFlags chainStatus)) 663internal static Exception CreateCertificateValidationException(SslAuthenticationOptions options, SslPolicyErrors sslPolicyErrors, X509ChainStatusFlags chainStatus) 670else if (sslPolicyErrors == SslPolicyErrors.RemoteCertificateChainErrors && chainStatus != X509ChainStatusFlags.NoError)
System\Net\Security\SslStream.Protocol.cs (19)
1110internal bool VerifyRemoteCertificate(SslCertificateTrust? trust, ref ProtocolToken alertToken, out SslPolicyErrors sslPolicyErrors, out X509ChainStatusFlags chainStatus) 1163out X509ChainStatusFlags chainStatus) 1166chainStatus = X509ChainStatusFlags.NoError; 1374if (chainStatus.Status == X509ChainStatusFlags.NoError) 1380(X509ChainStatusFlags.UntrustedRoot | X509ChainStatusFlags.PartialChain | 1381X509ChainStatusFlags.Cyclic)) != 0) 1387(X509ChainStatusFlags.Revoked | X509ChainStatusFlags.OfflineRevocation)) != 0) 1393(X509ChainStatusFlags.CtlNotTimeValid | X509ChainStatusFlags.NotTimeNested | 1394X509ChainStatusFlags.NotTimeValid)) != 0) 1399if ((chainStatus.Status & X509ChainStatusFlags.CtlNotValidForUsage) != 0) 1405(X509ChainStatusFlags.CtlNotSignatureValid | X509ChainStatusFlags.InvalidExtension | 1406X509ChainStatusFlags.NotSignatureValid | X509ChainStatusFlags.InvalidPolicyConstraints | 1407X509ChainStatusFlags.NoIssuanceChainPolicy | X509ChainStatusFlags.NotValidForUsage)) != 0)
System\Net\Security\SslStreamCertificateContext.cs (1)
113if (status.Status.HasFlag(X509ChainStatusFlags.PartialChain))
System.Security.Cryptography (27)
System\Security\Cryptography\X509Certificates\ChainPal.Windows.GetChainStatusInformation.cs (26)
40chainStatus[index].Status = (X509ChainStatusFlags)(1 << shiftCount); 56public readonly X509ChainStatusFlags ChainStatusFlag; 59public X509ChainErrorMapping(CertTrustErrorStatus win32Flag, int win32ErrorCode, X509ChainStatusFlags chainStatusFlag) 70new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_IS_NOT_SIGNATURE_VALID, ErrorCode.TRUST_E_CERT_SIGNATURE, X509ChainStatusFlags.NotSignatureValid), 71new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_CTL_IS_NOT_SIGNATURE_VALID, ErrorCode.TRUST_E_CERT_SIGNATURE, X509ChainStatusFlags.CtlNotSignatureValid), 72new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_IS_UNTRUSTED_ROOT, ErrorCode.CERT_E_UNTRUSTEDROOT, X509ChainStatusFlags.UntrustedRoot), 73new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_IS_PARTIAL_CHAIN, ErrorCode.CERT_E_CHAINING, X509ChainStatusFlags.PartialChain), 74new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_IS_REVOKED, ErrorCode.CRYPT_E_REVOKED, X509ChainStatusFlags.Revoked), 75new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_IS_NOT_VALID_FOR_USAGE, ErrorCode.CERT_E_WRONG_USAGE, X509ChainStatusFlags.NotValidForUsage), 76new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_CTL_IS_NOT_VALID_FOR_USAGE, ErrorCode.CERT_E_WRONG_USAGE, X509ChainStatusFlags.CtlNotValidForUsage), 77new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_IS_NOT_TIME_VALID, ErrorCode.CERT_E_EXPIRED, X509ChainStatusFlags.NotTimeValid), 78new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_CTL_IS_NOT_TIME_VALID, ErrorCode.CERT_E_EXPIRED, X509ChainStatusFlags.CtlNotTimeValid), 79new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_INVALID_NAME_CONSTRAINTS, ErrorCode.CERT_E_INVALID_NAME, X509ChainStatusFlags.InvalidNameConstraints), 80new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_HAS_NOT_SUPPORTED_NAME_CONSTRAINT, ErrorCode.CERT_E_INVALID_NAME, X509ChainStatusFlags.HasNotSupportedNameConstraint), 81new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_HAS_NOT_DEFINED_NAME_CONSTRAINT, ErrorCode.CERT_E_INVALID_NAME, X509ChainStatusFlags.HasNotDefinedNameConstraint), 82new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_HAS_NOT_PERMITTED_NAME_CONSTRAINT, ErrorCode.CERT_E_INVALID_NAME, X509ChainStatusFlags.HasNotPermittedNameConstraint), 83new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT, ErrorCode.CERT_E_INVALID_NAME, X509ChainStatusFlags.HasExcludedNameConstraint), 84new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_INVALID_POLICY_CONSTRAINTS, ErrorCode.CERT_E_INVALID_POLICY, X509ChainStatusFlags.InvalidPolicyConstraints), 85new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_NO_ISSUANCE_CHAIN_POLICY, ErrorCode.CERT_E_INVALID_POLICY, X509ChainStatusFlags.NoIssuanceChainPolicy), 86new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_INVALID_BASIC_CONSTRAINTS, ErrorCode.TRUST_E_BASIC_CONSTRAINTS, X509ChainStatusFlags.InvalidBasicConstraints), 87new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_IS_NOT_TIME_NESTED, ErrorCode.CERT_E_VALIDITYPERIODNESTING, X509ChainStatusFlags.NotTimeNested), 88new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_REVOCATION_STATUS_UNKNOWN, ErrorCode.CRYPT_E_NO_REVOCATION_CHECK, X509ChainStatusFlags.RevocationStatusUnknown), 89new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_IS_OFFLINE_REVOCATION, ErrorCode.CRYPT_E_REVOCATION_OFFLINE, X509ChainStatusFlags.OfflineRevocation), 90new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_IS_EXPLICIT_DISTRUST, ErrorCode.TRUST_E_EXPLICIT_DISTRUST, X509ChainStatusFlags.ExplicitDistrust), 91new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_HAS_NOT_SUPPORTED_CRITICAL_EXT, ErrorCode.CERT_E_CRITICAL, X509ChainStatusFlags.HasNotSupportedCriticalExtension), 92new X509ChainErrorMapping(CertTrustErrorStatus.CERT_TRUST_HAS_WEAK_SIGNATURE, ErrorCode.CERTSRV_E_WEAK_SIGNATURE_OR_KEY, X509ChainStatusFlags.HasWeakSignature),
System\Security\Cryptography\X509Certificates\X509ChainStatus.cs (1)
12public X509ChainStatusFlags Status { get; set; }
System.Security.Cryptography.Pkcs (1)
System\Security\Cryptography\Pkcs\CmsSigner.cs (1)
462if (status.Status == X509ChainStatusFlags.PartialChain)
System.Security.Cryptography.X509Certificates (1)
System.Security.Cryptography.X509Certificates.cs (1)
28[assembly: System.Runtime.CompilerServices.TypeForwardedTo(typeof(System.Security.Cryptography.X509Certificates.X509ChainStatusFlags))]
System.Security.Cryptography.Xml (5)
System\Security\Cryptography\Xml\KeyInfoX509Data.cs (4)
66((chain.ChainStatus[0].Status & X509ChainStatusFlags.PartialChain) == X509ChainStatusFlags.PartialChain)) 87((chain.ChainStatus[0].Status & X509ChainStatusFlags.PartialChain) == X509ChainStatusFlags.PartialChain))
System\Security\Cryptography\Xml\SignedXmlDebugLog.cs (1)
995if (status.Status != X509ChainStatusFlags.NoError)