[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
about Basic constraints
I'm afraid of asking this so-old question, but it's really confusing. :-(
Let's assume some scinario
CA A certificate contains basic constraints of pathlen 1.
CA B have a certificate issued by CA A and it contains no basic
constraints. If basic constraints doesn't appear, It can issue CA
certificates which can be used to signing CA certificate(able
to sign CA certificate) again and again.
Then I have a question, in a certain certificate validation chain
basic constraints of sub CA just overide the parent's?
Thanks a lot.
---------------
Kwon, YongChul(godslord@initech.com)
Institute of Researching Security Technology
of Initiative Technology, Inc.