private void CheckPermittedEmail(ISet permitted, String email)
//throws PkixNameConstraintValidatorException
{
if (permitted == null)
{
return;
}
IEnumerator it = permitted.GetEnumerator();
while (it.MoveNext())
{
String str = ((String)it.Current);
if (EmailIsConstrained(email, str))
{
return;
}
}
if (email.Length == 0 && permitted.Count == 0)
{
return;
}
throw new PkixNameConstraintValidatorException(
"Subject email address is not from a permitted subtree.");
}