Re: Verifying certificate chains with different policies

[Denis Pinkas <Denis.Pinkas@xxxxxxxx>]

Dean,

Let me add an important point to the problem you raised:

> However when processing Certificate paths, you simply input a list of
> acceptable policies and each certificate in the path must support one
> of those policies (or an equivalent policy).

Another parameter has to be taken into consideration: the naming constraints
as well. They may be even more important than the policies.

Regards,

Denis


> --
> Dean Povey,         | e-m: povey@dstc.edu.au     | Cryptozilla:
> Research Scientist  | ph:  +61 7 3864 5120       |  www.cryptozilla.org/
> Security Unit, DSTC | fax: +61 7 3864 1282       | Oscar - PKI Toolkit:
> Brisbane, Australia | www: security.dstc.edu.au/ |  oscar.dstc.qut.edu.au/
>
>