A single Name Constraint. More...

#include <pkix_types.h>

Inheritance diagram for Botan::GeneralSubtree:

Public Member Functions
const GeneralName &	base () const
std::vector< uint8_t >	BER_encode () const
void	decode_from (BER_Decoder &from) override
void	encode_into (DER_Encoder &to) const override
	GeneralSubtree ()
	GeneralSubtree (GeneralName base)

Detailed Description

A single Name Constraint.

The Name Constraint extension adds a minimum and maximum path length to a GeneralName to form a constraint. The length limits are not used in PKIX.

This entire class is deprecated and will be removed in a future major release

Definition at line 718 of file pkix_types.h.

Constructor & Destructor Documentation

◆ GeneralSubtree() [1/2]

Botan::GeneralSubtree::GeneralSubtree ( )

default

Creates an empty name constraint.

References GeneralSubtree().

Referenced by GeneralSubtree(), and GeneralSubtree().

◆ GeneralSubtree() [2/2]

Botan::GeneralSubtree::GeneralSubtree ( GeneralName base )

inlineexplicit

Creates a name constraint over the given base name.

Definition at line 728 of file pkix_types.h.

728: m_base(std::move(base)) {}

Botan::GeneralSubtree::base

const GeneralName & base() const

Definition pkix_types.h:737

References base(), and GeneralSubtree().

Member Function Documentation

◆ base()

const GeneralName & Botan::GeneralSubtree::base ( ) const

inline

Returns: name

Definition at line 737 of file pkix_types.h.

737{ return m_base; }

Referenced by GeneralSubtree(), and Botan::operator<<().

◆ BER_encode()

std::vector< uint8_t > Botan::ASN1_Object::BER_encode ( ) const

inherited

Return the encoding of this object. This is a convenience method when just one object needs to be serialized. Use DER_Encoder for complicated encodings.

Definition at line 21 of file asn1_obj.cpp.

                                                 {
   std::vector<uint8_t> output;
   DER_Encoder der(output);
   this->encode_into(der);
   return output;
}

References encode_into().

Referenced by decode_from(), Botan::PKCS12::export_to(), Botan::Certificate_Store_In_SQL::find_all_certs(), Botan::Certificate_Store_In_SQL::find_cert(), Botan::X509_Certificate::fingerprint(), Botan::Certificate_Store_In_SQL::insert_cert(), Botan::X509_Object::PEM_encode(), and Botan::PSS_Params::PSS_Params().

◆ decode_from()

void Botan::GeneralSubtree::decode_from ( BER_Decoder & from )

overridevirtual

Decode whatever this object is from from

Parameters

from	the BER_Decoder that will be read from

Implements Botan::ASN1_Object.

Definition at line 804 of file name_constraint.cpp.

                                                 {
   /*
   * RFC 5280 Section 4.2.1.10:
   *    Within this profile, the minimum and maximum fields are not used with any
   *    name forms, thus, the minimum MUST be zero, and maximum MUST be absent.
   */
   size_t minimum = 0;
   std::optional<size_t> maximum;
 
   ber.start_sequence()
      .decode(m_base)
      .decode_optional(minimum, ASN1_Type(0), ASN1_Class::ContextSpecific, size_t(0))
      .decode_optional(maximum, ASN1_Type(1), ASN1_Class::ContextSpecific)
      .end_cons();
 
   if(minimum != 0) {
      throw Decoding_Error("GeneralSubtree minimum must be 0");
   }
   if(maximum.has_value()) {
      throw Decoding_Error("GeneralSubtree maximum must be absent");
   }
}

References Botan::ContextSpecific, Botan::BER_Decoder::decode(), Botan::BER_Decoder::decode_optional(), Botan::BER_Decoder::end_cons(), and Botan::BER_Decoder::start_sequence().

◆ encode_into()

void Botan::GeneralSubtree::encode_into ( DER_Encoder & to ) const