[Date Prev][Date Next] [Chronological] [Thread] [Top]

strange uniqueMemberMatch



[Syntaxes] 5.2.21 (uniqueMemberMatch) says:

   The rule evaluates to TRUE if and only if the <distinguishedName>
   components of the assertion value and attribute value match according
   to the distinguishedNameMatch rule and the <BitString> component is
   absent from the attribute value or matches the <BitString> component
   of the assertion value according to the bitStringMatch rule.

Thus, assertion value cn=foo#'0101'B matches attribute value cn=foo.
Is that intentional?  X.520 paragraph 6.2.11 says the same thing.

-- 
Hallvard