Check whether the certificate Common Name satisfies Name Constraints.

Synopsis

Declared in <openssl/x509v3.h>

int
NAME_CONSTRAINTS_check_CN(
    X509* x,
    NAME_CONSTRAINTS* nc);

Return Value

X509_V_OK (0) if compliant, or an X509_V_ERR_* code on violation or error.

Parameters

Name

Description

x

Certificate whose subject CN is checked when not already covered by a DNS SAN.

nc

Name Constraints extension value to apply.

Created with MrDocs