diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2008-08-08 15:35:29 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2008-08-08 15:35:29 +0000 |
| commit | e9746e03ee222b0123ac118f8952e161e7d48a2d (patch) | |
| tree | 76d0d19a95ea0b66ea735c561ccd4afaaa742e49 /crypto/x509/x509_vfy.h | |
| parent | ab9c689ad387fcd209017fe45985b1938a0ee0df (diff) | |
| download | openssl-e9746e03ee222b0123ac118f8952e161e7d48a2d.tar.gz | |
Initial support for name constraints certificate extension.
TODO: robustness checking on name forms.
Diffstat (limited to 'crypto/x509/x509_vfy.h')
| -rw-r--r-- | crypto/x509/x509_vfy.h | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/crypto/x509/x509_vfy.h b/crypto/x509/x509_vfy.h index 955af8341a..faf641f037 100644 --- a/crypto/x509/x509_vfy.h +++ b/crypto/x509/x509_vfy.h @@ -341,6 +341,13 @@ void X509_STORE_CTX_set_depth(X509_STORE_CTX *ctx, int depth); #define X509_V_ERR_UNNESTED_RESOURCE 46 +#define X509_V_ERR_PERMITTED_VIOLATION 47 +#define X509_V_ERR_EXCLUDED_VIOLATION 48 +#define X509_V_ERR_SUBTREE_MINMAX 49 +#define X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE 51 +#define X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX 52 +#define X509_V_ERR_UNSUPPORTED_NAME_SYNTAX 53 + /* The application is not happy */ #define X509_V_ERR_APPLICATION_VERIFICATION 50 |