NAME

pkc_name_subtree_constraint.class — A class that expresses a subtree constraint on a name

Member Data

Public

   •pkc_name_subtree_constraint_t ∗ next

   •pkc_name_subtree_constraint_t ∗ prev

   •x500name ∗ base

   •x500name ∗ chopBefore

   •x500name ∗ chopAfter

   •unsigned minimum

   •unsigned maximum

Member Functions

Public

   •void unlink(void)

   •virtual ~pkc_name_subtree_constraint_t()

   •pkc_name_subtree_constraint_t()

Takes the following argument:

   •pkc_name_subtree_constraints_t ∗ theRoot

   •void set_base()

Takes the following argument:

   •const x500name & n

   •void set_chopBefore()

Takes the following argument:

   •const x500name & n

   •void set_chopAfter()

Takes the following argument:

   •const x500name & n

   •void set_minimum()

Takes the following argument:

   •unsigned n

   •void set_maximum()

Takes the following argument:

   •unsigned n

   •char is_permitted() const

Takes the following arguments:

   •const x500name & issuer_name

   •const x500name & subject_name

Return values have the following meanings:

1Permitted. 

0Forbidden. 

−1Not relevant. 

−2Relevant, but explicit permission is required from another subtree constraint. 

   •void get_next_link_constraint() const

Generates a new name subtree constraint that will be applicable to a certificate issued by the subject of this constraint. Takes the following argument:

   •pkc_name_subtree_constraint_t ∗∗ new_constraint

Description

pkc_name_subtree_constraint_t embodies a subtree constraint on a name. 

The certificate manipulation routines are a C++ interface. C++ must be used to perform direct certificate manipulation. 

Related Information

Classes: pkc_ca_key_usage.class(3sec), pkc_constraints.class(3sec), pkc_generic_key_usage.class(3sec), pkc_key_policies.class(3sec), pkc_key_policy.class(3sec), pkc_key_usage.class(3sec), pkc_name_subord_constraint.class(3sec), pkc_name_subord_constraints.class(3sec), pkc_name_subtree_constraints.class(3sec), pkc_pending_revocation.class(3sec), pkc_revocation.class(3sec), pkc_revocation_list.class(3sec), pkc_trust_list.class(3sec), pkc_trust_list_element.class(3sec), pkc_trusted_key.class(3sec).