Class TX509PolicyConstraint

TX509PolicyConstraint

Support

Supported from 6.0

Description

Defines whether a policy constraint applies.

Objects of this type are used by the X.509 certificate extension that constrains the use of policies.

An object of this type encapsulates two pieces of information:

• whether a specific policy applies to subsequent certificates.

• if a specific policy applies, the number of certificates that can follow the current one before the policy constraint applies.

Enables a CA to constrain the use of policies in two ways: they can enforce the appearance of explicit certificate policies in subsequent certificates and prevent policy mapping from being performed.

Defined in TX509PolicyConstraint:
TX509PolicyConstraint(), TX509PolicyConstraint(), iCountdown(), iRequired()

TX509PolicyConstraint(TBool aRequired, TInt aCountdown);

Description

Constructs a policy constraint definition object with the specified requirement and countdown values.

Parameters

TX509PolicyConstraint();

Description

Default constructor.

Sets policy requirement to EFalse and iRequired to EFalse and the countdown value to zero.

TBool iRequired();

Description

The policy requirement. This has the value ETrue, if the policy constraint applies; EFalse otherwise.

TInt iCountdown();

Description

The count down value.

Defines the number of certificates that can follow the current one before the policy constraint applies. This has no meaning if the ploicy constraint does not apply.