X509v3_addr_validate_resource_set

Validate that IP address blocks in ext are covered by ancestors in chain.

Synopsis

Declared in <openssl/x509v3.h>

int
X509v3_addr_validate_resource_set(
    stack_st_X509* chain,
    IPAddrBlocks* ext,
    int allow_inheritance);

Return Value

1 if ext is valid given chain, or 0 otherwise.

Parameters

NameDescription
chainCertificate chain (leaf first) used to check nested IPAddrBlocks extensions.
extIP address resource set claimed by the leaf (or NULL to treat as empty).
allow_inheritanceNon-zero to permit inherit elements when validating.