GetAlertMessageFromChain()

static TlsAlertMessage System.Net.Security.SecureChannel.GetAlertMessageFromChain ( X509Chain chain )

inlinestaticprivate

Definition at line 808 of file SecureChannel.cs.

    {
        X509ChainStatus[] chainStatus = chain.ChainStatus;
        for (int i = 0; i < chainStatus.Length; i++)
        {
            X509ChainStatus x509ChainStatus = chainStatus[i];
            if (x509ChainStatus.Status != 0)
            {
                if ((x509ChainStatus.Status & (X509ChainStatusFlags.UntrustedRoot | X509ChainStatusFlags.Cyclic | X509ChainStatusFlags.PartialChain)) != 0)
                {
                    return TlsAlertMessage.UnknownCA;
                }
                if ((x509ChainStatus.Status & (X509ChainStatusFlags.Revoked | X509ChainStatusFlags.OfflineRevocation)) != 0)
                {
                    return TlsAlertMessage.CertificateRevoked;
                }
                if ((x509ChainStatus.Status & (X509ChainStatusFlags.NotTimeValid | X509ChainStatusFlags.NotTimeNested | X509ChainStatusFlags.CtlNotTimeValid)) != 0)
                {
                    return TlsAlertMessage.CertificateExpired;
                }
                if ((x509ChainStatus.Status & X509ChainStatusFlags.CtlNotValidForUsage) != 0)
                {
                    return TlsAlertMessage.UnsupportedCert;
                }
                if (((x509ChainStatus.Status & (X509ChainStatusFlags.NotSignatureValid | X509ChainStatusFlags.InvalidExtension | X509ChainStatusFlags.InvalidPolicyConstraints | X509ChainStatusFlags.CtlNotSignatureValid)) | X509ChainStatusFlags.NoIssuanceChainPolicy | X509ChainStatusFlags.NotValidForUsage) != 0)
                {
                    return TlsAlertMessage.BadCertificate;
                }
                return TlsAlertMessage.CertificateUnknown;
            }
        }
        return TlsAlertMessage.BadCertificate;
    }

Referenced by System.Net.Security.SecureChannel.CreateFatalHandshakeAlertToken().