public void checkConstraints() throws IOException {
try {
X500Constraints cons = X500Constraints.process(constraints,
true);
if (cons.checkClientPrincipal(p) < 0) {
throw new UnsupportedConstraintException(
"principal not allowed: " + p);
}
Certificate cert = getCertificate(p);
if (cert == null) {
throw new DiscoveryProtocolException(