Enumeration Case

kSecCSConsiderExpiration

Consider expired certificates invalid.

Declaration

kSecCSConsiderExpiration = 1U << 31

Discussion

When passed to a function that performs code validation, this flag requests that code signatures made by expired certificates be rejected. By default, expiration of participating certificates is not automatic grounds for rejection.