Lines Matching defs:plc
45 KMF_POLICY_RECORD plc;
47 (void) memset(&plc, 0, sizeof (KMF_POLICY_RECORD));
87 plc.name = get_string(optarg_av, &rv);
88 if (plc.name == NULL) {
94 plc.ignore_date = get_boolean(optarg_av);
95 if (plc.ignore_date == -1) {
102 plc.ignore_unknown_ekus =
104 if (plc.ignore_unknown_ekus == -1) {
111 plc.ignore_trust_anchor =
113 if (plc.ignore_trust_anchor == -1) {
120 plc.validity_adjusttime =
122 if (plc.validity_adjusttime == NULL) {
129 plc.validity_adjusttime,
139 plc.ta_name = get_string(optarg_av, &rv);
140 if (plc.ta_name == NULL) {
143 } else if (strcasecmp(plc.ta_name,
147 if (kmf_dn_parser(plc.ta_name,
159 plc.ta_serial = get_string(optarg_av, &rv);
160 if (plc.ta_serial == NULL) {
168 (uchar_t *)plc.ta_serial,
184 plc.VAL_OCSP_RESPONDER_URI =
186 if (plc.VAL_OCSP_RESPONDER_URI == NULL) {
194 plc.VAL_OCSP_PROXY =
196 if (plc.VAL_OCSP_PROXY == NULL) {
204 plc.VAL_OCSP_URI_FROM_CERT =
206 if (plc.VAL_OCSP_URI_FROM_CERT == -1) {
215 plc.VAL_OCSP_RESP_LIFETIME =
217 if (plc.VAL_OCSP_RESP_LIFETIME == NULL) {
224 plc.VAL_OCSP_RESP_LIFETIME,
236 plc.VAL_OCSP_IGNORE_RESP_SIGN =
238 if (plc.VAL_OCSP_IGNORE_RESP_SIGN == -1) {
247 plc.VAL_OCSP_RESP_CERT_NAME =
249 if (plc.VAL_OCSP_RESP_CERT_NAME == NULL) {
256 plc.VAL_OCSP_RESP_CERT_NAME,
269 plc.VAL_OCSP_RESP_CERT_SERIAL =
271 if (plc.VAL_OCSP_RESP_CERT_SERIAL == NULL) {
279 plc.VAL_OCSP_RESP_CERT_SERIAL,
297 plc.VAL_CRL_BASEFILENAME =
299 if (plc.VAL_CRL_BASEFILENAME == NULL) {
307 plc.VAL_CRL_DIRECTORY =
309 if (plc.VAL_CRL_DIRECTORY == NULL) {
317 plc.VAL_CRL_GET_URI = get_boolean(optarg_av);
318 if (plc.VAL_CRL_GET_URI == -1) {
327 plc.VAL_CRL_PROXY = get_string(optarg_av, &rv);
328 if (plc.VAL_CRL_PROXY == NULL) {
336 plc.VAL_CRL_IGNORE_SIGN =
338 if (plc.VAL_CRL_IGNORE_SIGN == -1) {
347 plc.VAL_CRL_IGNORE_DATE =
349 if (plc.VAL_CRL_IGNORE_DATE == -1) {
358 plc.ku_bits = parseKUlist(optarg_av);
359 if (plc.ku_bits == 0) {
366 if (parseEKUNames(optarg_av, &plc) != 0) {
373 if (parseEKUOIDs(optarg_av, &plc) != 0) {
380 plc.mapper.mapname = get_string(optarg_av, &rv);
381 if (plc.mapper.mapname == NULL) {
388 plc.mapper.dir = get_string(optarg_av, &rv);
389 if (plc.mapper.dir == NULL) {
396 plc.mapper.pathname = get_string(optarg_av,
398 if (plc.mapper.pathname == NULL) {
405 plc.mapper.options = get_string(optarg_av, &rv);
406 if (plc.mapper.options == NULL) {
444 if (plc.name == NULL) {
450 strcmp(plc.name, KMF_DEFAULT_POLICY_NAME) == 0) {
472 if (strcmp(plc.name, pnode->plc.name) == 0)
481 "already\n"), plc.name);
493 plc.revocation |= KMF_REVOCATION_METHOD_OCSP;
495 if (plc.VAL_OCSP_RESP_CERT.name != NULL &&
496 plc.VAL_OCSP_RESP_CERT.serial != NULL) {
497 plc.VAL_OCSP.has_resp_cert = B_TRUE;
506 if ((plc.mapper.mapname != NULL && plc.mapper.pathname != NULL) ||
507 (plc.mapper.dir != NULL && plc.mapper.pathname != NULL) ||
508 (plc.mapper.dir != NULL && plc.mapper.mapname == NULL) ||
509 (plc.mapper.options != NULL && plc.mapper.mapname == NULL &&
510 plc.mapper.pathname == NULL)) {
521 plc.revocation |= KMF_REVOCATION_METHOD_CRL;
526 ret = kmf_verify_policy(&plc);
536 ret = kmf_add_policy_to_db(&plc, filename, B_FALSE);
547 kmf_free_policy_record(&plc);