有关目录服务中属性crossCertificatePair的问题

kongbowoo

目录服务中属性crossCertificatePair是用来存放交叉证书的,包括正向的逆向的, 不过是这个证书是怎么存放的呢

平台:windowsxp+openLDAP

当我想在一个条目中存放两个crossCertificatePair值时,总是报以下的错误:
#!ERROR [LDAP: error code 18 - modify/add: crossCertificatePair;binary: no equality matching rule]

查了一下crossCertificatePair属性的定义:
crossCertificatePairATTRIBUTE::={
WITH SYNTAX CertificatePair
EQUALITY MATCHING RULE certificatePairExactMatch
ID joint-iso-ccitt(2) ds(5) attributeType(4) crossCertificatePair(40)}

有点看不明白.请高人指点!!!

[ 本帖最后由 kongbowoo 于 2008-3-18 09:56 编辑 ]

kongbowoo

11.3.3 Certificate pair exact match
The certificate pair exact match rule compares for equality a presented value with an attribute value of type
CertificatePair. It uniquely selects a single cross-certificate pair.
certificatePairExactMatch MATCHING-RULE ::= {
SYNTAX CertificatePairExactAssertion
ID id-mr-certificatePairExactMatch }
CertificatePairExactAssertion ::= SEQUENCE {
issuedToThisCAAssertion [0] CertificateExactAssertion OPTIONAL,
issuedByThisCAAssertion [1] CertificateExactAssertion OPTIONAL }
( WITH COMPONENTS {..., issuedToThisCAAssertion PRESENT} |
WITH COMPONENTS {..., issuedByThisCAAssertion PRESENT} )
This matching rule returns TRUE if the components that are present in the issuedToThisCAAssertion and
issuedByThisCAAssertion components of the presented value match the corresponding components of the
issuedToThisCA and issuedByThisCA components, respectively, in the stored attribute value.