SCC_GetCertChainVerificationError
Valid for: CANoe DE • CANoe4SW DEFunction Syntax
Description
Gets an individual verification from the last certificate chain verification, which is indicated by the callback function SCC_CertChainVerificationInd.Parameters
- Index: Number of the queried error < SCC_GetCertChainVerificationErrorCount().
- CertName: Queries the name of the verified certificate (to the given char buffer). The same certificate may be returned multiple times with different error codes.
-
ErrorCode: Gets the number of the found error, which can be evaluated as follows (via reference):
- Certificate serial negative
- Distinguished Name too long
- Signature method too weak
- Untrusted hash
- Certificate not yet valid
- Certificate has expired
- Certificate issuer not found
- Cannot establish trust
- Certificate chain loop
- Chain lacks trusted root
- Chain name mismatch
- Policy error
- Invalid usage
- Certificate chain too long
- Certificate issuer is not a valid CA
- Name constraint error
- Certificate issuer not found
- Unknown critical extension
- Duplicate certificate extension
- Invalid X.509v3 extension in v1 or v2 certificate
- Duplicate certificate policy
- X.509v2 identifiers in v1 certificate
- Signature error
- Certificate public key invalid
- Signature algorithm unknown
- Signature algorithm – bad parameters
- Domain Component invalid according to ISO 15118-2
- Common Name mismatch (Common Name of leaf does not match received eMAID)
- Country Name was set within contract certificate
Return Values
- 1: if successful
- 0: else