This documentation is archived and is not being maintained.

X509VerificationFlags Enumeration

Specifies conditions under which verification of certificates in the X509 chain should be conducted.

This enumeration has a FlagsAttribute attribute that allows a bitwise combination of its member values.

Namespace:  System.Security.Cryptography.X509Certificates
Assembly:  System (in System.dll)

public enum X509VerificationFlags

Member nameDescription
NoFlagNo flags pertaining to verification are included.
IgnoreNotTimeValidIgnore certificates in the chain that are not valid either because they have expired or they are not yet in effect when determining certificate validity.
IgnoreCtlNotTimeValidIgnore that the certificate trust list (CTL) is not valid, for reasons such as the CTL has expired, when determining certificate verification.
IgnoreNotTimeNestedIgnore that the CA (certificate authority) certificate and the issued certificate have validity periods that are not nested when verifying the certificate. For example, the CA cert can be valid from January 1 to December 1 and the issued certificate from January 2 to December 2, which would mean the validity periods are not nested.
IgnoreInvalidBasicConstraintsIgnore that the basic constraints are not valid when determining certificate verification.
AllowUnknownCertificateAuthorityIgnore that the chain cannot be verified due to an unknown certificate authority (CA).
IgnoreWrongUsageIgnore that the certificate was not issued for the current use when determining certificate verification.
IgnoreInvalidNameIgnore that the certificate has an invalid name when determining certificate verification.
IgnoreInvalidPolicyIgnore that the certificate has invalid policy when determining certificate verification.
IgnoreEndRevocationUnknownIgnore that the end certificate (the user certificate) revocation is unknown when determining certificate verification.
IgnoreCtlSignerRevocationUnknownIgnore that the certificate trust list (CTL) signer revocation is unknown when determining certificate verification.
IgnoreCertificateAuthorityRevocationUnknownIgnore that the certificate authority revocation is unknown when determining certificate verification.
IgnoreRootRevocationUnknownIgnore that the root revocation is unknown when determining certificate verification.
AllFlagsAll flags pertaining to verification are included.

These flags indicate the conditions under which chain verification should occur. For example, if an application does not require certificates time values in a chain to be valid, the IgnoreNotTimeValid flag can be used.

The following example opens the current user's personal certificate store, allows the user to select a certificate, then writes certificate and certificate chain information to the console. The output depends on the certificate you select.

		//Output chain information of the selected certificate.
		X509Chain ch = new X509Chain();
		ch.Build (certificate);
		Console.WriteLine ("Chain Information");
		ch.ChainPolicy.RevocationMode = X509RevocationMode.Online;
		Console.WriteLine ("Chain revocation flag: {0}", ch.ChainPolicy.RevocationFlag);
		Console.WriteLine ("Chain revocation mode: {0}", ch.ChainPolicy.RevocationMode);
		Console.WriteLine ("Chain verification flag: {0}", ch.ChainPolicy.VerificationFlags);
		Console.WriteLine ("Chain verification time: {0}", ch.ChainPolicy.VerificationTime);
		Console.WriteLine ("Chain status length: {0}", ch.ChainStatus.Length);
		Console.WriteLine ("Chain application policy count: {0}", ch.ChainPolicy.ApplicationPolicy.Count);
		Console.WriteLine ("Chain certificate policy count: {0} {1}", ch.ChainPolicy.CertificatePolicy.Count, Environment.NewLine);

Windows 7, Windows Vista, Windows XP SP2, Windows XP Media Center Edition, Windows XP Professional x64 Edition, Windows XP Starter Edition, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003, Windows Server 2000 SP4, Windows Millennium Edition, Windows 98

The .NET Framework and .NET Compact Framework do not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.

.NET Framework

Supported in: 3.5, 3.0, 2.0