Class KJUR.asn1.x509.NameConstraints

Extends KJUR.asn1.x509.Extension.
NameConstraints ASN.1 structure class
Defined in: asn1x509-1.0.js.

Class Summary
Constructor Attributes	Constructor Name and Description
	KJUR.asn1.x509.NameConstraints(params) NameConstraints ASN.1 structure class This class provides X.509v3 NameConstraints extension.

Fields borrowed from class KJUR.asn1.ASN1Object:: hL, hT, hTLV, hV, isModified, params

Methods borrowed from class KJUR.asn1.ASN1Object:: getEncodedHex, getLengthHexFromValue, getValueHex, tohex

Class Detail

KJUR.asn1.x509.NameConstraints(params)

NameConstraints ASN.1 structure class
This class provides X.509v3 NameConstraints extension. defined in RFC 5280 4.2.1.10.

id-ce-nameConstraints OBJECT IDENTIFIER ::=  { id-ce 30 }
NameConstraints ::= SEQUENCE {
  permittedSubtrees  [0]  GeneralSubtrees OPTIONAL,
  excludedSubtrees   [1]  GeneralSubtrees OPTIONAL }
GeneralSubtrees ::= SEQUENCE SIZE (1..MAX) OF GeneralSubtree
GeneralSubtree ::= SEQUENCE {
  base           GeneralName,
  minimum   [0]  BaseDistance DEFAULT 0,
  maximum   [1]  BaseDistance OPTIONAL }
BaseDistance ::= INTEGER (0..MAX)

new NameConstraints({permit: [{dns: "example.com"}], critical: true})
new NameConstraints({exclude: [{uri: "example.com"}], critical: true})
new NameConstraints({exclude: [{dn: "/C=JP/O=T1"}], critical: true})
new NameConstraints({
  critical: true,
  permit: [{dn: "/C=JP/O=T1"}],
  exclude: [{dn: "/C=US/O=T1", max: 2}]})

Parameters:
{Array} params: associative array of parameters

Since:: jsrsasign 10.5.16 asn1x509 2.1.13

See:: X509#getExtNameConstraints; KJUR.asn1.x509.GeneralSubtree; KJUR.asn1.x509.GeneralName

Classes

Class KJUR.asn1.x509.NameConstraints