PreviousNext

pkc_name_subtree_constraint.class(3sec)

A class that expresses a subtree constraint on a name

Member Data

Public

· pkc_name_subtree_constraint_t * next

· pkc_name_subtree_constraint_t * prev

· x500name * base

· x500name * chopBefore

· x500name * chopAfter

· unsigned minimum

· unsigned maximum

Member Functions

Public

· void unlink(void)

· virtual ~pkc_name_subtree_constraint_t( )

· pkc_name_subtree_constraint_t( )
Takes the following argument:

- pkc_name_subtree_constraints_t * theRoot

· void set_base( )
Takes the following argument:

- const x500name & n

· void set_chopBefore( )
Takes the following argument:

- const x500name & n

· void set_chopAfter( )
Takes the following argument:

- const x500name & n

· void set_minimum( )
Takes the following argument:

- unsigned n

· void set_maximum( )
Takes the following argument:

- unsigned n

· char is_permitted( ) const
Takes the following arguments:

- const x500name & issuer_name

- const x500name & subject_name

Return values have the following meanings:
1
Permitted.
0
Forbidden.
-1
Not relevant.
-2
Relevant, but explicit permission is required from another subtree constraint.

· void get_next_link_constraint( ) const
Generates a new name subtree constraint that will be applicable to a certificate issued by the subject of this constraint. Takes the following argument:

- pkc_name_subtree_constraint_t ** new_constraint

Description

pkc_name_subtree_constraint_t embodies a subtree constraint on a name.

The certificate manipulation routines are a C++ interface. C++ must be used to perform direct certificate manipulation.

Related Information

Classes:
pkc_ca_key_usage.class(3sec)
pkc_constraints.class(3sec)
pkc_generic_key_usage.class(3sec)
pkc_key_policies.class(3sec)
pkc_key_policy.class(3sec)
pkc_key_usage.class(3sec)
pkc_name_subord_constraint.class(3sec)
pkc_name_subord_constraints.class(3sec)
pkc_name_subtree_constraints.class(3sec)
pkc_pending_revocation.class(3sec)
pkc_revocation.class(3sec)
pkc_revocation_list.class(3sec)
pkc_trust_list.class(3sec)
pkc_trust_list_element.class(3sec)
pkc_trusted_key.class(3sec)