NAME_CONSTRAINTS_check

Check whether certificate subject names satisfy the given Name Constraints.

Synopsis

Declared in <openssl/x509v3.h>

int
NAME_CONSTRAINTS_check(
    X509* x,
    NAME_CONSTRAINTS* nc);

Return Value

X509_V_OK (0) if compliant, or an X509_V_ERR_* code on violation or error.

Parameters

NameDescription
xCertificate whose subject and subjectAltName are checked.
ncName Constraints extension value to apply.