RtsCertTrustLevel
(ENUM)
TYPE RtsCertTrustLevel :
The truste level has two main meanings: 1. In opend certificates it indicates if the certificate is trusted or not 2. If adding or searching certificates in the store it indicates where to add / search the certificate.
- Attributes:
qualified_only
- InOut:
Name
Initial
Comment
Untrusted
1
This is the location for untrusted certificates.
Trusted
This is the location for trusted CA or self signed certificates.
Own
This is the location for certificates used by the PLC. The private key of these certificates is available.
Quarantine
This location contains certificates which could not be verified because of missing chains.
Unknown
This is the default for certificates which are not in one of the other stores. Usually this is set when parsing a certificate.
Chain
This location contains chain certificates. These certificates are not trusted but used to build up a chain up to one of the certificates placed in trusted. This is the only store which is local to each opened certificate
store. Also adding certificatesto this trust level is not persistant. The
typical use case is to addchain certificates received from the communication peer in case of an own protocol implementation. For TLS connection this is done automatically. Due this usecase, the capabilities of this store are somewhat limited. It is not possible to iterate or filter certificates on this store.
Explicit removal of certificates is supported with X509CertStoreRemoveCert.
The store is automatically clean up on X509CertStoreClose.