RSA BSAFE Cert-C API Reference

POLICY_CONSTRAINTS_36 Reference

Represents the Policy Constraints extension for X.509 v3 certificates.

This extension is used only in CA certificates. It constrains path validation by requiring a policy identifier or by prohibiting policy mapping. The default criticality for this extension is NON_CRITICAL. A certificate can have only one Policy Constraints extension at a time. Use the POLICY_CONSTRAINTS_36 structure with the C_AddExtensionValue() and C_GetExtensionValue() functions.

Data Fields

requireExplicitPolicy	An int value that indicates the number of certificates to skip before policy constraints apply. To omit this constraint, set it to NOT_IN_USE.
inhibitPolicyMapping	An int value that indicates the number of certificates to skip before policy mapping is not permitted. To omit this constraint, set it to NOT_IN_USE.

#include <certext.h>

typedef struct POLICY_CONSTRAINTS_36 {
  int requireExplicitPolicy;    /* number of certs to skip before required
                                   constraints apply.  To omit, set to NOT_IN_USE */
  int inhibitPolicyMapping;     /* number of certs to skip before policy mapping
                                   is not permitted; To omit, set to NOT_IN_USE */
} POLICY_CONSTRAINTS_36;

---

The documentation for this struct was generated from the following file:

• certext.h

---

RSA BSAFE^® Cert-C 2.7 API Reference