Skip to content

Instance Method

chainMeetsPolicyRequirements(chain:)

Called to determine whether a given UnverifiedCertificateChain meets the requirements of this policy.
func chainMeetsPolicyRequirements(chain: UnverifiedCertificateChain) -> PolicyEvaluationResult

Discussion

Certificate verification is split into two parts: chain building and policy enforcement. Chain building is general: regardless of policy, we use the same chain building algorithm. This will generate a sequence of candidate chains in the form of UnverifiedCertificateChain.

Each of these candidate chains is then handed to a VerifierPolicy to be checked against the certificate policy. The checking is done in this method.