private void CheckPermittedIP(ISet permitted, byte[] ip)
//throws PkixNameConstraintValidatorException
{
if (permitted == null)
{
return;
}
IEnumerator it = permitted.GetEnumerator();
while (it.MoveNext())
{
byte[] ipWithSubnet = (byte[])it.Current;
if (IsIPConstrained(ip, ipWithSubnet))
{
return;
}
}
if (ip.Length == 0 && permitted.Count == 0)
{
return;
}
throw new PkixNameConstraintValidatorException(
"IP is not from a permitted subtree.");
}