RevocationTrustEvaluator

public final class RevocationTrustEvaluator : ServerTrustEvaluating

An evaluator which Uses the default and revoked server trust evaluations allowing you to control whether to validate the host provided by the challenge as well as specify the revocation flags for testing for revoked certificates. Apple platforms did not start testing for revoked certificates automatically until iOS 10.1, macOS 10.12 and tvOS 10.1 which is demonstrated in our TLS tests. Applications are encouraged to always validate the host in production environments to guarantee the validity of the server’s certificate chain.

`

                Options
                `

Represents the options to be use when evaluating the status of a certificate. Only Revocation Policy Constants are valid, and can be found in Apple’s documentation.

See more

Declaration

Swift

public struct Options : OptionSet, Sendable

`

                init(performDefaultValidation:validateHost:options:)
                `

Creates a RevocationTrustEvaluator using the provided parameters.

Note

Default and host validation will fail when using this evaluator with self-signed certificates. Use PinnedCertificatesTrustEvaluator if you need to use self-signed certificates.

Declaration

Swift

public init(performDefaultValidation: Bool = true, validateHost: Bool = true, options: Options = .any)

Parameters

| performDefaultValidation |

Determines whether default validation should be performed in addition to evaluating the pinned certificates. true by default.

| | validateHost |

Determines whether or not the evaluator should validate the host, in addition to performing the default evaluation, even if performDefaultValidation is false. true by default.

| | options |

The Options to use to check the revocation status of the certificate. .any by default.

|

`

                evaluate(_:forHost:)
                `

Declaration

Swift

public func evaluate(_ trust: SecTrust, forHost host: String) throws