NAME_CONSTRAINTS_check_CN

Check whether the certificate Common Name satisfies Name Constraints.

Synopsis

Declared in <openssl/x509v3.h>

int
NAME_CONSTRAINTS_check_CN(
    X509* x,
    NAME_CONSTRAINTS* nc);

Return Value

X509_V_OK (0) if compliant, or an X509_V_ERR_* code on violation or error.

Parameters

NameDescription
xCertificate whose subject CN is checked when not already covered by a DNS SAN.
ncName Constraints extension value to apply.