> How do you place a constraint on a certificate to allow it to sign only
> certificate lower in X400 naming scheme, or containing a special naming
> scheme...
Your best way to get a reasonable understanding of this is to read the
IETF PKIX profile. For example, http://www.ietf.org/rfc/rfc3280.tx
I have read in the doc on X509v3 that you can place a constraint on nearly
anything...
How do you place a constraint on a certificate to allow it to sign only
certificate lower in X400 naming scheme, or containing a special naming
scheme...
Franck Martin
Network and Database Development Officer
S
