RSA BSAFE Cert-C

Certificate Components for C

Crypto-C 6.2.1 Developer's Guide
Search

GENERAL_SUBTREE Reference

Specifies one or more naming subtrees, each defined by the name of the root of the subtree.

#include <certext.h>

typedef struct GENERAL_SUBTREE {

  ALTERNATE_NAME base;

  int            minimum;

  int            maximum;
} GENERAL_SUBTREE;

Data Fields

ALTERNATE_NAME base
 An ALTERNATE_NAME structure that contains the base name of the general subtree. More...

int minimum
 An int value that specifies the upper bound of the area within the subtree. More...

int maximum
 An int value that specifies the lower bound of the area within the subtree. More...


Field Documentation

ALTERNATE_NAME base
 

An ALTERNATE_NAME structure that contains the base name of the general subtree. Use only base names that have a well-defined hierarchical structure.

int maximum
 

An int value that specifies the lower bound of the area within the subtree. All names whose last component is below the level specified are excluded from the subtree.

  • If maximum is set to 0 (zero), then the naming subtree includes the base node at the top of the subtree, and excludes all subordinate nodes.
  • If maximum is set to 1 (one), then the naming subtree includes the base node and its immediate subordinates, and excludes all other subordinate nodes.
  • This is an optional field; to omit this field, set it to NOT_IN_USE. If a maximum value is not provided, a lower limit is not imposed on the subtree.

int minimum
 

An int value that specifies the upper bound of the area within the subtree. All names whose last component is above the level specified are excluded from the subtree.

  • If minimum is set to 0 (the default), then the naming subtree includes the base name, that is, the top node of the subtree. The PKIX standard recommends that this value should always be set to 0 (zero).
  • If minimum is set to 1 (one), then the naming subtree excludes the base node but includes subordinate nodes.


Copyright (c) 1999-2005 RSA Security Inc. All rights reserved. 067-001001-2720-001-000 - 2.7.2