private void checkExcludedIP(ISet excluded, byte[] ip)
//throws PkixNameConstraintValidatorException
{
if (excluded.IsEmpty)
{
return;
}
IEnumerator it = excluded.GetEnumerator();
while (it.MoveNext())
{
byte[] ipWithSubnet = (byte[])it.Current;
if (IsIPConstrained(ip, ipWithSubnet))
{
throw new PkixNameConstraintValidatorException(
"IP is from an excluded subtree.");
}
}
}