Return type of constraint inputName places on this name:
- NAME_DIFF_TYPE = -1: input name is different type from name (i.e. does not constrain).
- NAME_MATCH = 0: input name matches name.
- NAME_NARROWS = 1: input name narrows name (is lower in the naming subtree)
- NAME_WIDENS = 2: input name widens name (is higher in the naming subtree)
- NAME_SAME_TYPE = 3: input name does not match or narrow name, but is same type.
. These results are used in checking NameConstraints during
certification path verification.
RFC2459: DNS name restrictions are expressed as foo.bar.com. Any subdomain
satisfies the name constraint. For example, www.foo.bar.com would
satisfy the constraint but bigfoo.bar.com would not.
draft-ietf-pkix-new-part1-00.txt: DNS name restrictions are expressed as foo.bar.com.
Any DNS name that
can be constructed by simply adding to the left hand side of the name
satisfies the name constraint. For example, www.foo.bar.com would
satisfy the constraint but foo1.bar.com would not.
RFC1034: By convention, domain names can be stored with arbitrary case, but
domain name comparisons for all present domain functions are done in a
case-insensitive manner, assuming an ASCII character set, and a high
order zero bit.
Parameters: inputName - to be checked for being constrained throws: UnsupportedOperationException - if name is not exact match, but narrowing and widening arenot supported for this name type. |