The SSL Certificate error object must be used when using SSL decryption feature and Certificate Validation rules.
This object is used to match a specific SSL certificate validation error.
It applies to the individual validation error currently being evaluated by the associated directive.This feature is available on Artica v4.50 Service Pack 5 or Artica v4.50 Service Pack 4 Hotfix 20250716-12
You can list any OpenSSL error codes listed in https://x509errors.org/
- When adding a new object in your ACL rule, find the word SSL and choose the “SSL Certificate error” object
- In this object, entries must match the various OpenSSL error codes.
These codes are uppercase keys where words are separated by underscores.
Examples:X509_V_ERR_CERT_NOT_YET_VALID X509_V_ERR_CERT_HAS_EXPIRED X509_V_ERR_CRL_NOT_YET_VALID X509_V_ERR_CRL_HAS_EXPIRED X509_V_ERR_CERT_REVOKED - Use https://x509errors.org/ to have the complete list of SSL errors
