Skip to content

PolicyValidationInput

Input for the policy-validation engine.

All fields are optional — omitted values produce the most permissive behavior (accept any policy, allow mappings, allow anyPolicy).

ts
interface PolicyValidationInput {
	readonly initialPolicySet?: readonly string[] | any;
	readonly requireExplicitPolicy?: boolean;
	readonly inhibitPolicyMapping?: boolean;
	readonly inhibitAnyPolicy?: boolean;
}

Properties

  • readonly initialPolicySet?: readonly string``[] | any — OIDs the relying party considers acceptable, or 'any' to accept whatever the chain asserts. Default: 'any'.
  • readonly requireExplicitPolicy?: boolean — When true, the chain must assert at least one acceptable policy. Default: false.
  • readonly inhibitPolicyMapping?: boolean — When true, policy mappings in CA certificates are ignored. Default: false.
  • readonly inhibitAnyPolicy?: boolean — When true, the anyPolicy OID is not treated as matching all policies. Default: false.

Released under the MIT License.