OCSPResponseComplianceError Enumeration |
Contains OCSP response compliance warning and error statuses.
Namespace: PKI.OCSP
Assembly: SysadminsLV.PKI (in SysadminsLV.PKI.dll) Version: 3.7.0.0 (3.7.0.0)
SyntaxMembers| Member name | Value | Description | |
|---|---|---|---|
| None | 0 | No compliance errors were found in the OCSP response. | |
| MissingCert | 1 | OCSP response do not contains explicit (delegated) certificate in the response and CA certificate is not installed in the local certificate stores. | |
| MissingOCSPRevNoCheck | 2 | Delegated signing certificate is missing id-pkix-ocsp-nocheck extension. | |
| MissingOCSPSigningEKU | 4 | Delegated signing certificate is missing id-kp-OCSPSigning Enhanced Key Usage. | |
| ResponderIdMismatch | 8 | Responder ID (either by name or by key) do not match to the signing certificate's Subject field or KeyID. | |
| InvalidHTTPHeader | 16 | Returned HTTP header do not contains 'application/ocsp-response' entry in Content-header. | |
| ResponseNotTimeValid | 32 | Response signing time is set to future. | |
| UpdateNotTimeValid | 64 | Response is expired. | |
| NonceMismatch | 128 | Indicates that Nonce extension value in the response do not match the value submitted in the original request. | |
| CertIdMismatch | 256 | Indicates that information about responded certificate do not match the certificate in the request. |
See Also