s in applications</h2>

<p>To interpret proxy policies, the application would normally start with some default rights (perhaps none at all), then compute the resulting rights by checking the rights against the chain of proxy certificates, user certificate and CA certificates.</p>

<p>The complicated part is figuring out how to pass data between your application and the certificate validation procedure.</p>

<p>The following ingredients are needed for such processing:</p>

<ul>

<li><p>a callback function th