Cleaned up

FitConnect/Encryption/CertificateHelper.cs

@@ -37,18 +37,16 @@ public class CertificateHelper {
             certificateChain.ChainPolicy.TrustMode = X509ChainTrustMode.CustomRootTrust;
             certificateChain.ChainPolicy.CustomTrustStore.AddRange(rootCertificate);
             certificateChain.ChainPolicy.RevocationMode = X509RevocationMode.Online;
-            certificateChain.ChainPolicy.RevocationFlag = X509RevocationFlag.EndCertificateOnly;
+            certificateChain.ChainPolicy.RevocationFlag = X509RevocationFlag.EntireChain;
             certificateChain.ChainPolicy.VerificationFlags = X509VerificationFlags.NoFlag;
             _logger?.LogDebug("Using custom root certificate");
         }
         else {
-            certificateChain.ChainPolicy.RevocationMode = X509RevocationMode.NoCheck;
+            certificateChain.ChainPolicy.RevocationMode = X509RevocationMode.Online;
             certificateChain.ChainPolicy.RevocationFlag = X509RevocationFlag.EntireChain;
-            certificateChain.ChainPolicy.VerificationFlags = X509VerificationFlags.AllFlags;
-            certificateChain.ChainPolicy.DisableCertificateDownloads = false;
+            certificateChain.ChainPolicy.VerificationFlags = X509VerificationFlags.NoFlag;
         }
-
-
+        
         var result = certificateChain.Build(certificate);
 
         chainStatus = certificateChain.ChainStatus

IntegrationTests/CertificateValidation.cs

@@ -117,7 +117,9 @@ public class CertificateValidation {
     public void TestDvdvCertificate() {
         var content = File.ReadAllText("./certificates/valid_dvdv.json");
         var jwk = new JsonWebKey(content);
-        var result = _certificateHelper.ValidateCertificate(jwk);
+        var result = _certificateHelper.ValidateCertificate(jwk, LogLevel.Error, Directory
+            .GetFiles("./certificates/roots")
+            .Select(file => new X509Certificate2(file)).ToArray());
         result.Should().BeTrue();
     }