// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// This is the list of CertStatus flags and their values.
//
// Defines the values using a macro CERT_STATUS_FLAG,
// so it can be expanded differently in some places

// The possible status bits for CertStatus.
// Bits 0 to 15 are for errors.
CERT_STATUS_FLAG(COMMON_NAME_INVALID, 1 << 0);
CERT_STATUS_FLAG(DATE_INVALID, 1 << 1);
CERT_STATUS_FLAG(AUTHORITY_INVALID, 1 << 2);
// 1 << 3 is reserved for ERR_CERT_CONTAINS_ERRORS (not useful with WinHTTP).
CERT_STATUS_FLAG(NO_REVOCATION_MECHANISM, 1 << 4);
CERT_STATUS_FLAG(UNABLE_TO_CHECK_REVOCATION, 1 << 5);
CERT_STATUS_FLAG(REVOKED, 1 << 6);
CERT_STATUS_FLAG(INVALID, 1 << 7);
CERT_STATUS_FLAG(WEAK_SIGNATURE_ALGORITHM, 1 << 8);
// 1 << 9 was used for CERT_STATUS_NOT_IN_DNS
CERT_STATUS_FLAG(NON_UNIQUE_NAME, 1 << 10);
CERT_STATUS_FLAG(WEAK_KEY, 1 << 11);
// 1 << 12 was used for CERT_STATUS_WEAK_DH_KEY
CERT_STATUS_FLAG(PINNED_KEY_MISSING, 1 << 13);
CERT_STATUS_FLAG(NAME_CONSTRAINT_VIOLATION, 1 << 14);

// Bits 16 to 31 are for non-error statuses.
CERT_STATUS_FLAG(IS_EV, 1 << 16);
CERT_STATUS_FLAG(REV_CHECKING_ENABLED, 1 << 17);
// Bit 18 was CERT_STATUS_IS_DNSSEC
