Contents

evaluateTrust(for:peerCertificateChain:completionHandler:)

Override the default trust evaluation for the connection.

Declaration

optional func evaluateTrust(for connection: NWTCPConnection, peerCertificateChain: [Any], completionHandler completion: @escaping (SecTrust) -> Void)

Parameters

  • connection:

    The connection sending this message

  • peerCertificateChain:

    The connection peer’s certificate chain

  • completion:

    The completion handler for passing the Sectrust object to the connection. The SecTrustRef object trust is required and must not be nil. It will be evaluated using Sectrustevaluate(_:_:) if necessary.

    The caller is responsible for keeping the argument object valid for the duration of the completion handler invocation.

Discussion

The caller can implement this optional protocol method to set up custom policies for peer certificate trust evaluation. If the delegate method is implemented, the caller is responsible for creating and setting up the SecTrust object and passing it to the completion handler. Otherwise, the default trust evaluation policy is used for the connection.

See Also

Delegate methods