adds flag IgnoreCertificateAuthority

Azure-Samples · Oct 31, 2023 · 9ec4346 · 9ec4346
1 parent 4e785ae
commit 9ec4346
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mqttclients/dotnet/MQTTnet.Client.Extensions/X509ChainValidator.cs b/mqttclients/dotnet/MQTTnet.Client.Extensions/X509ChainValidator.cs
@@ -32,7 +32,7 @@ internal static bool ValidateChain(MqttClientCertificateValidationEventArgs cvAr
                 cvArgs.Chain.ChainPolicy.CustomTrustStore.AddRange(caChain);
                 Trace.TraceWarning("Validating TLS with chain:\n\t" + string.Join("\n\t",cvArgs.Chain.ChainPolicy.CustomTrustStore.Select(c => c.Subject)));
 
-                cvArgs.Chain.ChainPolicy.VerificationFlags = X509VerificationFlags.IgnoreEndRevocationUnknown;
+                cvArgs.Chain.ChainPolicy.VerificationFlags = X509VerificationFlags.IgnoreEndRevocationUnknown | X509VerificationFlags.IgnoreCertificateAuthorityRevocationUnknown;
                 Trace.TraceWarning($"Chain validation configured with verification flags:\n\t{cvArgs.Chain.ChainPolicy.VerificationFlags}");
 
                 chainValidated = cvArgs.Chain.Build(new X509Certificate2(cvArgs.Certificate));