36 #define	KC_IGNORE_DATE			0x0000001
37 #define	KC_IGNORE_UNKNOWN_EKUS		0x0000002
38 #define	KC_IGNORE_TRUST_ANCHOR		0x0000004
39 #define	KC_VALIDITY_ADJUSTTIME		0x0000008
40 #define	KC_TA_NAME			0x0000010
41 #define	KC_TA_SERIAL			0x0000020
42 #define	KC_OCSP_RESPONDER_URI		0x0000040
43 #define	KC_OCSP_PROXY			0x0000080
44 #define	KC_OCSP_URI_FROM_CERT		0x0000100
45 #define	KC_OCSP_RESP_LIFETIME		0x0000200
46 #define	KC_OCSP_IGNORE_RESP_SIGN 	0x0000400
47 #define	KC_OCSP_RESP_CERT_NAME		0x0000800
48 #define	KC_OCSP_RESP_CERT_SERIAL	0x0001000
49 #define	KC_OCSP_NONE			0x0002000
50 #define	KC_CRL_BASEFILENAME		0x0004000
51 #define	KC_CRL_DIRECTORY		0x0008000
52 #define	KC_CRL_GET_URI			0x0010000
53 #define	KC_CRL_PROXY			0x0020000
54 #define	KC_CRL_IGNORE_SIGN		0x0040000
55 #define	KC_CRL_IGNORE_DATE		0x0080000
56 #define	KC_CRL_NONE			0x0100000
57 #define	KC_KEYUSAGE			0x0200000
58 #define	KC_KEYUSAGE_NONE		0x0400000
59 #define	KC_EKUS				0x0800000
60 #define	KC_EKUS_NONE			0x1000000
61 #define	KC_MAPPER_OPTIONS		0x2000000
66 	if ((old != NULL && new != NULL && strcmp(old, new) != 0) || \
85 	uint32_t	flags = 0;  in kc_modify_policy()
90 	int		ocsp_set_attr = 0;  in kc_modify_policy()
91 	int		crl_set_attr = 0;  in kc_modify_policy()
94 	(void) memset(&plc, 0, sizeof (KMF_POLICY_RECORD));  in kc_modify_policy()
95 	(void) memset(&oplc, 0, sizeof (KMF_POLICY_RECORD));  in kc_modify_policy()
188 					    &adj) < 0) {  in kc_modify_policy()
237 						    "(ex: 0x0102030405"  in kc_modify_policy()
292 					    &adj) < 0) {  in kc_modify_policy()
356 						    "(ex: 0x0102030405"  in kc_modify_policy()
456 				if (plc.ku_bits == 0) {  in kc_modify_policy()
475 				if (parseEKUNames(optarg_av, &plc) != 0) {  in kc_modify_policy()
484 				if (parseEKUOIDs(optarg_av, &plc) != 0) {  in kc_modify_policy()
528 				rv = 0; /* its ok for this to be NULL */  in kc_modify_policy()
567 	} else if (strcmp(filename, KMF_DEFAULT_POLICY_FILE) == 0 &&  in kc_modify_policy()
568 	    strcmp(plc.name, KMF_DEFAULT_POLICY_NAME) == 0) {  in kc_modify_policy()
577 	if (access(filename, W_OK) < 0) {  in kc_modify_policy()
674 		if (ocsp_set_attr > 0) {  in kc_modify_policy()
724 		if (ocsp_set_attr > 0) {  in kc_modify_policy()
780 		if (crl_set_attr > 0) {  in kc_modify_policy()
819 		if (crl_set_attr > 0) {  in kc_modify_policy()
868 		oplc.ku_bits = 0;  in kc_modify_policy()
891 		if (oplc.eku_set.eku_count > 0) {  in kc_modify_policy()
893 			oplc.eku_set.eku_count = 0;  in kc_modify_policy()
930 		    gettext("Error adding policy to database: 0x%04x\n"), ret);  in kc_modify_policy()
1023 	if (strcasecmp(keystore_name, "nss") == 0 ||  in kc_modify_plugin()
1024 	    strcasecmp(keystore_name, "pkcs11") == 0 ||  in kc_modify_plugin()
1025 	    strcasecmp(keystore_name, "file") == 0) {  in kc_modify_plugin()
1043 	    strcmp(entry->option, option) == 0)) {  in kc_modify_plugin()
1059 	if (lockf(fileno(pfile), F_TLOCK, 0) == -1) {  in kc_modify_plugin()
1097 		if (buffer[0] == '#') {  in kc_modify_plugin()
1115 		buffer2[len] = '\0';  in kc_modify_plugin()
1122 		if (strcmp(name, keystore_name) == 0) {  in kc_modify_plugin()
1190 	    strcmp(argv[0], "modify") == 0 &&  in kc_modify()
1191 	    strcmp(argv[1], "plugin") == 0) {  in kc_modify()