Interface IChainValidationProvider

Namespace

SimpleSign.Core.Extensions

Assembly

SimpleSign.Core.dll

Performs country/regulation-specific certificate chain validation beyond standard X.509 path building (e.g., ICP-Brasil policy OID mapping, Gov.br assurance level detection, EU Trusted List verification).

public interface IChainValidationProvider

Properties

RegionCode

Region or organization code (e.g., "BR", "EU", "US").

string RegionCode { get; }

Property Value

string

Methods

CanValidate(X509Certificate2)

Determines whether this provider can validate the given certificate (e.g., by checking issuer OIDs, organization name, or policy arcs).

bool CanValidate(X509Certificate2 certificate)

Parameters

certificate X509Certificate2

Returns

bool

ValidateAsync(X509Certificate2, IReadOnlyList<X509Certificate2>?)

Validates the certificate chain and returns region-specific results.

Task<ChainValidationResult> ValidateAsync(X509Certificate2 certificate, IReadOnlyList<X509Certificate2>? chain = null)

Parameters

certificate X509Certificate2

chain IReadOnlyList<X509Certificate2>

Returns

Task<ChainValidationResult>

ValidateAsync(X509Certificate2, IReadOnlyList<X509Certificate2>?, CancellationToken)

Validates the certificate chain with cancellation support. The default implementation delegates to the parameterless CancellationToken overload.

Task<ChainValidationResult> ValidateAsync(X509Certificate2 certificate, IReadOnlyList<X509Certificate2>? chain, CancellationToken cancellationToken)

Parameters

certificate X509Certificate2

chain IReadOnlyList<X509Certificate2>

cancellationToken CancellationToken

Returns

Task<ChainValidationResult>