45 	KMF_POLICY_RECORD plc;  in kc_create()  local
47 	(void) memset(&plc, 0, sizeof (KMF_POLICY_RECORD));  in kc_create()
87 				plc.name = get_string(optarg_av, &rv);  in kc_create()
88 				if (plc.name == NULL) {  in kc_create()
94 				plc.ignore_date = get_boolean(optarg_av);  in kc_create()
95 				if (plc.ignore_date == -1) {  in kc_create()
102 				plc.ignore_unknown_ekus =  in kc_create()
104 				if (plc.ignore_unknown_ekus == -1) {  in kc_create()
111 				plc.ignore_trust_anchor =  in kc_create()
113 				if (plc.ignore_trust_anchor == -1) {  in kc_create()
120 				plc.validity_adjusttime =  in kc_create()
122 				if (plc.validity_adjusttime == NULL) {  in kc_create()
129 					    plc.validity_adjusttime,  in kc_create()
139 				plc.ta_name = get_string(optarg_av, &rv);  in kc_create()
140 				if (plc.ta_name == NULL) {  in kc_create()
143 				} else if (strcasecmp(plc.ta_name,  in kc_create()
147 					if (kmf_dn_parser(plc.ta_name,  in kc_create()
159 				plc.ta_serial = get_string(optarg_av, &rv);  in kc_create()
160 				if (plc.ta_serial == NULL) {  in kc_create()
168 					    (uchar_t *)plc.ta_serial,  in kc_create()
184 				plc.VAL_OCSP_RESPONDER_URI =  in kc_create()
186 				if (plc.VAL_OCSP_RESPONDER_URI == NULL) {  in kc_create()
194 				plc.VAL_OCSP_PROXY =  in kc_create()
196 				if (plc.VAL_OCSP_PROXY == NULL) {  in kc_create()
204 				plc.VAL_OCSP_URI_FROM_CERT =  in kc_create()
206 				if (plc.VAL_OCSP_URI_FROM_CERT == -1) {  in kc_create()
215 				plc.VAL_OCSP_RESP_LIFETIME =  in kc_create()
217 				if (plc.VAL_OCSP_RESP_LIFETIME == NULL) {  in kc_create()
224 					    plc.VAL_OCSP_RESP_LIFETIME,  in kc_create()
236 				plc.VAL_OCSP_IGNORE_RESP_SIGN =  in kc_create()
238 				if (plc.VAL_OCSP_IGNORE_RESP_SIGN == -1) {  in kc_create()
247 				plc.VAL_OCSP_RESP_CERT_NAME =  in kc_create()
249 				if (plc.VAL_OCSP_RESP_CERT_NAME == NULL) {  in kc_create()
256 					    plc.VAL_OCSP_RESP_CERT_NAME,  in kc_create()
269 				plc.VAL_OCSP_RESP_CERT_SERIAL =  in kc_create()
271 				if (plc.VAL_OCSP_RESP_CERT_SERIAL == NULL) {  in kc_create()
279 					    plc.VAL_OCSP_RESP_CERT_SERIAL,  in kc_create()
297 				plc.VAL_CRL_BASEFILENAME =  in kc_create()
299 				if (plc.VAL_CRL_BASEFILENAME == NULL) {  in kc_create()
307 				plc.VAL_CRL_DIRECTORY =  in kc_create()
309 				if (plc.VAL_CRL_DIRECTORY == NULL) {  in kc_create()
317 				plc.VAL_CRL_GET_URI = get_boolean(optarg_av);  in kc_create()
318 				if (plc.VAL_CRL_GET_URI == -1) {  in kc_create()
327 				plc.VAL_CRL_PROXY = get_string(optarg_av, &rv);  in kc_create()
328 				if (plc.VAL_CRL_PROXY == NULL) {  in kc_create()
336 				plc.VAL_CRL_IGNORE_SIGN =  in kc_create()
338 				if (plc.VAL_CRL_IGNORE_SIGN == -1) {  in kc_create()
347 				plc.VAL_CRL_IGNORE_DATE =  in kc_create()
349 				if (plc.VAL_CRL_IGNORE_DATE == -1) {  in kc_create()
358 				plc.ku_bits = parseKUlist(optarg_av);  in kc_create()
359 				if (plc.ku_bits == 0) {  in kc_create()
366 				if (parseEKUNames(optarg_av, &plc) != 0) {  in kc_create()
373 				if (parseEKUOIDs(optarg_av, &plc) != 0) {  in kc_create()
380 				plc.mapper.mapname = get_string(optarg_av, &rv);  in kc_create()
381 				if (plc.mapper.mapname == NULL) {  in kc_create()
388 				plc.mapper.dir = get_string(optarg_av, &rv);  in kc_create()
389 				if (plc.mapper.dir == NULL) {  in kc_create()
396 				plc.mapper.pathname = get_string(optarg_av,  in kc_create()
398 				if (plc.mapper.pathname == NULL) {  in kc_create()
405 				plc.mapper.options = get_string(optarg_av, &rv);  in kc_create()
406 				if (plc.mapper.options == NULL) {  in kc_create()
444 	if (plc.name == NULL) {  in kc_create()
450 	    strcmp(plc.name, KMF_DEFAULT_POLICY_NAME) == 0) {  in kc_create()
472 			if (strcmp(plc.name, pnode->plc.name) == 0)  in kc_create()
481 			    "already\n"), plc.name);  in kc_create()
493 		plc.revocation |= KMF_REVOCATION_METHOD_OCSP;  in kc_create()
495 	if (plc.VAL_OCSP_RESP_CERT.name != NULL &&  in kc_create()
496 	    plc.VAL_OCSP_RESP_CERT.serial != NULL) {  in kc_create()
497 		plc.VAL_OCSP.has_resp_cert = B_TRUE;  in kc_create()
506 	if ((plc.mapper.mapname != NULL && plc.mapper.pathname != NULL) ||  in kc_create()
507 	    (plc.mapper.dir != NULL && plc.mapper.pathname != NULL) ||  in kc_create()
508 	    (plc.mapper.dir != NULL && plc.mapper.mapname == NULL) ||  in kc_create()
509 	    (plc.mapper.options != NULL && plc.mapper.mapname == NULL &&  in kc_create()
510 	    plc.mapper.pathname == NULL)) {  in kc_create()
521 		plc.revocation |= KMF_REVOCATION_METHOD_CRL;  in kc_create()
526 	ret = kmf_verify_policy(&plc);  in kc_create()
536 	ret = kmf_add_policy_to_db(&plc, filename, B_FALSE);  in kc_create()
547 	kmf_free_policy_record(&plc);  in kc_create()