

Digital Certificates › Certificate Name Filtering Support › Init ACEE Changes for Search Sequence
Init ACEE Changes for Search Sequence
InitACEE searches through the CERTMAP records. If an individual DIGICERT record does not match the incoming certificate:
- Check for a match on full issuer name and a full subject name.
- If the test does not find a match, take off the most specific piece of the SDN and test the entry again.
- Continue to take off pieces of the SDN until a match or until the end of the entry.
- If no match is found try again using the next entry with both IDNFILTR and SDNFILTR.
- If no more records exist with both fields or there are no more matches on the IDNFILTR, search through the records with only SDNFILTR. Start with the full SDN and continue to take pieces off until a match or until the end of the SDN.
- If there is no match on any of the records containing only SDNFILTR, look through the entries containing only IDNFILTRs.
- If no record matches the search criteria, an error code is returned.
- If a match is found, determine what ACID name should be returned. If MULTIID and CRITERIA were not specified, then the ACID name in the table is returned. If CRITERIA is available, find the CRITMAP record that matches the CRITERIA specified.
Copyright © 2014 CA Technologies.
All rights reserved.
 
|
|