Class TlsServerCertificate
- Namespace
- MailFathom.Infrastructure.Certificates
- Assembly
- MailFathom.Infrastructure.dll
A validated TLS identity: the leaf a server presents, its private key, and the authorities presented after it.
public sealed class TlsServerCertificate : IDisposable
- Inheritance
-
TlsServerCertificate
- Implements
- Inherited Members
Remarks
The intermediates travel with the leaf because a client that cannot build a path to a trusted root rejects the handshake, and the issuing intermediate is routinely absent from a client's own store. They carry no trust of their own; presenting them only saves the client from having to find them.
The instance owns every certificate it holds and releases them all on disposal. Nothing here is secret in the sense the secret machinery uses — a certificate is public material — but the leaf holds a private key, so an instance is kept for as long as the endpoint serves and disposed when it stops rather than being cloned per connection.
Properties
- Intermediates
Gets the intermediate certificates presented after the leaf, in the order they chain towards a root.
- Leaf
Gets the leaf certificate, which carries the private key the handshake signs with.
Methods
- Dispose()
Performs application-defined tasks associated with freeing, releasing, or resetting unmanaged resources.