NFD » ndn-cxx

In ValidatorConfig, a hierarchical checker requires that the packet name must be under the namespace of the packet signer.
It has the form:

checker
{
  type hierarchical
  sig-type {SIG-TYPE}
}

It is currently defined to be equivalent to:

checker
{
  type customized
  sig-type {SIG-TYPE}
  key-locator
  {
    type name
    hyper-relation
    {
      k-regex ^(<>*)<KEY><>$
      k-expand \\1
      h-relation is-prefix-of
      p-regex ^(<>*)$
      p-expand \\1
    }
  }
}

In #5112, KeyLocator can contain a certificate name instead of a key name.
The hierarchical checker should be changed accordingly to maintain its intended semantics.