XNetworkingVerifyServerCertificate
Provides additional certificate chain validation.Syntax
Parameters
requestHandle _In_Type: void* A handle of type HINTERNET. To obtain a valid handle, call WinHttpOpenRequest. securityInformation _In_
Type: XNetworkingSecurityInformation* Pointer to an
XNetworkingSecurityInformation structure. To get an appropriate pointer, call theXNetworkingQuerySecurityInformationForUrlAsyncResult function.
Return value
Type: HRESULT ReturnsS_OK if successful. This indicates that the server certificate chain is valid. Otherwise, it returns an error code indicating the server chain could not be validated. Treat all failures as fatal to the HTTP request.
Remarks
This function isn’t safe to call on a time-sensitive thread. For more information, see Time-sensitive threads.
WINHTTP_CALLBACK_STATUS_SENDING_REQUEST WinHTTP callback. Pass a cached XNetworkingSecurityInformation structure from a previous call to XNetworkingQuerySecurityInformationForUrlAsync along with the WinHTTP request handle associated with the callback. For additional information about the callback, see WinHttpSendRequest.
If the XNetworkingVerifyServerCertificate function fails, the gaming runtime has likely detected a compromised connection to the server. In this case, you should immediately close the WinHTTP request handle before the callback returns to ensure that no data is transferred to or from the compromised server.
As a best practice, all title communication, regardless of content or protocol, should be secured. A title should provide confidentiality, integrity, and authentication for all title communication. For more information, see Communication Security Overview (NDA topic)
Requirements
Header: XNetworking.h Library: xgameruntime.lib Supported platforms: Windows, XBOX One family consoles and XBOX Series consolesConceptual documentation
See also
HTTP and WebSocketsXNetworking