// Sebastien Pouliot <sebastien@ximian.com>
//
// (C) 2003 Motus Technologies Inc. (http://www.motus.com)
-// (C) 2004 Novell (http://www.novell.com)
-//
-
-//
-// Copyright (C) 2004 Novell, Inc (http://www.novell.com)
+// Copyright (C) 2004-2005 Novell, Inc (http://www.novell.com)
//
// Permission is hereby granted, free of charge, to any person obtaining
// a copy of this software and associated documentation files (the
#endif
class BasicConstraintsExtension : X509Extension {
+ public const int NoPathLengthConstraint = -1;
+
private bool cA;
private int pathLenConstraint;
public BasicConstraintsExtension () : base ()
{
extnOid = "2.5.29.19";
+ pathLenConstraint = NoPathLengthConstraint;
}
public BasicConstraintsExtension (ASN1 asn1) : base (asn1) {}
{
// default values
cA = false;
- pathLenConstraint = 0; // no constraint
+ pathLenConstraint = NoPathLengthConstraint;
ASN1 sequence = new ASN1 (extnValue.Value);
if (sequence.Tag != 0x30)
protected override void Encode ()
{
- if (extnValue == null) {
- extnValue = new ASN1 (0x30);
- if (cA)
- extnValue.Add (new ASN1 (0x01, new byte[] { 0xFF }));
- if (pathLenConstraint > 0)
- extnValue.Add (ASN1Convert.FromInt32 (pathLenConstraint));
- }
+ ASN1 seq = new ASN1 (0x30);
+ if (cA)
+ seq.Add (new ASN1 (0x01, new byte[] { 0xFF }));
+ // CAs MUST NOT include the pathLenConstraint field unless the cA boolean is asserted
+ if (cA && (pathLenConstraint >= 0))
+ seq.Add (ASN1Convert.FromInt32 (pathLenConstraint));
+
+ extnValue = new ASN1 (0x04);
+ extnValue.Add (seq);
}
public bool CertificateAuthority {
public int PathLenConstraint {
get { return pathLenConstraint; }
- set { pathLenConstraint = value; }
+ set {
+ if (value < NoPathLengthConstraint) {
+ string msg = Locale.GetText ("PathLenConstraint must be positive or -1 for none ({0}).", value);
+ throw new ArgumentOutOfRangeException (msg);
+ }
+ pathLenConstraint = value;
+ }
}
public override string ToString ()
sb.Append ((cA) ? "CA" : "End Entity");
sb.Append (Environment.NewLine);
sb.Append ("Path Length Constraint=");
- if (pathLenConstraint == 0)
+ if (pathLenConstraint == NoPathLengthConstraint)
sb.Append ("None");
else
sb.Append (pathLenConstraint.ToString (CultureInfo.InvariantCulture));