validateServerIdentityCertificateChain

suspend fun validateServerIdentityCertificateChain(serverIdentity: ServerIdentity, certChain: X509CertChain, instant: Instant): Boolean

Validates certificate chain created using an identity returned by getServerIdentity including, if possible, root certificate.

Only validates root certificates issued by HTTPS-hosted servers that match the list provided by "ca_trust_servers" setting (which must be a JSON list of strings), unless running on localhost url.

Return

true if trusted root certificate is found and the full chain is valid, false if the chain is valid, but the root certificate could not be found.

Throws

if the certificate chain is not valid

is the root certificate is not self-issued