TX509PolicyConstraint Class Reference

#include <x509certext.h>

Link against: x509.lib

class TX509PolicyConstraint

Detailed Description

Defines whether a policy constraint applies.

Objects of this type are used by the X.509 certificate extension that constrains the use of policies.

An object of this type encapsulates two pieces of information:
  • whether a specific policy applies to subsequent certificates

  • if a specific policy applies, the number of certificates that can follow the current one before the policy constraint applies.

Enables a CA to constrain the use of policies in two ways: they can enforce the appearance of explicit certificate policies in subsequent certificates, and prevent policy mapping from being performed.

Member Attribute Documentation

iCountdown

TInt iCountdown

The count down value.

Defines the number of certificates that can follow the current one before the policy constraint applies. This has no meaning if the policy constraint does not apply.

iRequired

TBool iRequired

The policy requirement.

This has the value ETrue, if the policy constraint applies; EFalse otherwise.

Constructor & Destructor Documentation

TX509PolicyConstraint ( TBool, TInt )

TX509PolicyConstraint(TBoolaRequired,
TIntaCountdown
)

Constructs a TX509PolicyConstraint definition object with the specified requirement and countdown values.

Parameters
aRequiredThe policy requirement. Set to ETrue, if the policy constraint applies; set to EFalse, otherwise.
aCountdownThe countdown value. This is the number of certificates that can follow the current one before the constraint applies. This only has meaning if the policy constraint applies.

TX509PolicyConstraint ( )

TX509PolicyConstraint()

Default constructor.

Sets policy requirement to EFalse and iRequired to EFalse and the iCountdown to zero.