X509VerifyCert Method

Verify that an X.509 certificate has been signed by its issuer.

Namespace: CryptoSysPKI
Assembly: diCrSysPKINet (in diCrSysPKINet.dll) Version: 23.0.0.30549 (23.1.0.0)

Syntax

public static int VerifyCert(
	string certToVerify,
	string issuerCert
)

Public Shared Function VerifyCert ( 
	certToVerify As String,
	issuerCert As String
) As Integer

Parameters

certToVerify String: Filename of certificate to verify
issuerCert String: Filename of purported issuer's certificate

Return Value

Int32
Zero if the certificate's signature is valid; X509.Failure (SIGNATURE_ERROR +22) if the validation fails; otherwise a positive error code.

Remarks

This can also be used to verify that an X.509 Certificate Revocation List (CRL) or PKCS#10 Certification Signing Request (CSR) has been signed by the owner of the issuer's certificate. Just pass the name of the file (or its base64/PEM string form) as certToVerify.

Reference

X509 Class

CryptoSysPKI Namespace