summaryrefslogtreecommitdiffstats
path: root/doc/functions/gnutls_x509_name_constraints_check
diff options
context:
space:
mode:
Diffstat (limited to 'doc/functions/gnutls_x509_name_constraints_check')
-rw-r--r--doc/functions/gnutls_x509_name_constraints_check20
1 files changed, 20 insertions, 0 deletions
diff --git a/doc/functions/gnutls_x509_name_constraints_check b/doc/functions/gnutls_x509_name_constraints_check
new file mode 100644
index 0000000..f425481
--- /dev/null
+++ b/doc/functions/gnutls_x509_name_constraints_check
@@ -0,0 +1,20 @@
+
+
+
+
+@deftypefun {unsigned} {gnutls_x509_name_constraints_check} (gnutls_x509_name_constraints_t @var{nc}, gnutls_x509_subject_alt_name_t @var{type}, const gnutls_datum_t * @var{name})
+@var{nc}: the extracted name constraints
+
+@var{type}: the type of the constraint to check (of type gnutls_x509_subject_alt_name_t)
+
+@var{name}: the name to be checked
+
+This function will check the provided name against the constraints in
+ @code{nc} using the RFC5280 rules. Currently this function is limited to DNS
+names, emails and IP addresses (of type @code{GNUTLS_SAN_DNSNAME} ,
+@code{GNUTLS_SAN_RFC822NAME} and @code{GNUTLS_SAN_IPADDRESS} ).
+
+@strong{Returns:} zero if the provided name is not acceptable, and non-zero otherwise.
+
+@strong{Since:} 3.3.0
+@end deftypefun