RtsCertTrustLevel (ENUM)

TYPE RtsCertTrustLevel :

The trusted level has two main meanings: 1. In opend certificates it indicates if the certificate is trusted or not 2. If adding or searching certificates in the store it indicates where to add / search the certificate.

Attributes:
qualified_only
InOut:

Name

Initial

Comment

Untrusted

1

This is the location for untrusted certificates.

Trusted

This is the location for trusted CA or self signed certificates.

Own

This is the location for certificates used by the PLC. The private key of these certificates is available.

Quarantine

This location contains certificates which could not be verified because of missing chains.

Unknown

This is the default for certificates which are not in one of the other stores. Usually this is set when parsing a certificate.

Chain

This location contains chain certificates. These certificates are not trusted but used to build up a chain up to one of the certificates placed in trusted. This is the only store which is local to each opened certificate

store. Also adding certificates to this trust level is not persistent. The

typical use case is to add chain-certificates received from the communication peer in case of an own protocol implementation. For TLS connection this is done automatically. Due this use-case, the capabilities of this store are somewhat limited. It is not possible to iterate or filter certificates on this store.

Explicit removal of certificates is supported with X509CertStoreRemoveCert.

The store is automatically clean up on X509CertStoreClose.