問題文
A reviewer has to write down how the running count that limits the length of a certificate chain is set up and moved, if one of the links carries a constraint of its own. Which reading does RFC 5280 support, and what does it say follows the setting up?
選択肢
- The count starts at the number of certificates in the chain, comes down by one for every link that was issued by a party other than itself, and may be pulled lower still to the figure a link carries in its own constraint, with the basic handling of the links taken up once the setting up is done, in that path-length counter.
- The count starts at zero, goes up by one for every certificate in the chain that was issued by a party other than itself, and is compared with the figure a link carries in its own length constraint, with the basic handling taken up once the setting up is done, ahead of the closing steps, in that path-length counter.
- The count starts at the number of certificates in the chain, comes down by one for every link that was issued by a party other than itself, and may be pulled lower still to the figure a link carries in its own constraint, with the closing steps of the chain taken up once the setting up is done, in that path-length counter.
- The count starts at the number of certificates in the chain, comes down by one for every link in the chain whoever issued it, and may be raised to the figure a link carries in its own constraint, with the closing steps of the chain taken up once the setting up is done, in that path-length counter.