Class HardenedTlsOptions

Namespace

EncDotNet.S100.Collections.Net

Assembly

EncDotNet.S100.Collections.dll

How HardenedTls validates server certificates.

public sealed record HardenedTlsOptions : IEquatable<HardenedTlsOptions>

Inheritance

object

HardenedTlsOptions

Implements

IEquatable<HardenedTlsOptions>

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Properties

CheckRevocation

True (the default) to check the server's chain for revocation (CRL or OCSP, as the platform supports). A revoked chain is refused; one whose status cannot be had is allowed, as browsers do.

public bool CheckRevocation { get; init; }

Property Value

bool

Default

The defaults: revocation checked online, soft-fail, 10-second fetch budget.

public static HardenedTlsOptions Default { get; }

Property Value

HardenedTlsOptions

RevocationTimeout

The most time spent fetching revocation data for one chain.

public TimeSpan RevocationTimeout { get; init; }

Property Value

TimeSpan