SSL Client/Server Certificate Verification

The Vortex <fetch> library, and the Texis Monitor schedule/web servers, can verify peer (remote server or client) certificates. The Vortex <urlcp sslverifyserver> setting (here) and the Texis Monitor schedule/web servers' SSL Verify Client settings control this verification; they are normally "off". When "on", peer certificates are verified: if the verification fails, the SSL connection is terminated with a " Cannot verify certificate from host:port: reason at depth N" error. The reason can vary, as detailed in the error listings later.

• Verification Process
  • Certificate Presentation
  • Chain Completion
    • Finding Issuer Certificates
  • Extensions Check
  • Root CA Trust
  • Chain Expiration and Signature
  • Common Name Matches Hostname
• Tokens and Messages