X509v3_addr_validate_resource

Validate that IP address blocks in ext are covered by ancestors in chain.

Synopsis

Declared in <openssl/x509v3.h>

int
X509v3_addr_validate_resource_set(
    stack_st_X509* chain,
    IPAddrBlocks* ext,
    int allow_inheritance);

1 if ext is valid given chain, or 0 otherwise.

Name

Description

chain

Certificate chain (leaf first) used to check nested IPAddrBlocks extensions.

ext

IP address resource set claimed by the leaf (or NULL to treat as empty).

allow_inheritance

Non‐zero to permit inherit elements when validating.

Created with MrDocs