SWRU455M February 2017 – October 2020 CC3120 , CC3120MOD , CC3130 , CC3135 , CC3135MOD , CC3220MOD , CC3220MODA , CC3220R , CC3220S , CC3220SF , CC3230S , CC3230SF , CC3235MODAS , CC3235MODASF , CC3235MODS , CC3235MODSF , CC3235S , CC3235SF
The trusted root-certificate catalog is a file, provided by TI, containing a list of known and trusted root CAs by TI. The certificate store holds the common trusted root CAs in the market, such as VeriSign, GoDaddy, GeoTrust, and so forth.
The trusted root-certificate catalog also holds a list of revoked certificates known to TI. The trusted root-certificate catalog is used only in client mode. Servers use a proprietary root CA to authenticate clients, and therefore cannot use the certificate store. The trusted root-certificate catalog gives the user the confidence that the CA is trusted and known when a SimpleLink client connects to a server. When a root CA does not exist in the catalog, the sl_Connect command returns the error SL_ERROR_BSD_ESECUNKNOWNROOTCA, which means the connection is successfully done, but the root CA used to verify the server chain of trust is unknown. When a revoked certificate is received during the TLS connection (all of the certificate chain is checked) or if the root CA set by the user is revoked, the handshake fails, and the error SL_ERROR_BSD_ESECCERTIFICATEREVOKED returns from the sl_Connect command.