199ebb4caSwyllys<?xml version='1.0' encoding='UTF-8' ?> 299ebb4caSwyllys 399ebb4caSwyllys<!-- 4*269e59f9SJan Pechanec Copyright (c) 2006, 2010, Oracle and/or its affiliates. All rights reserved. 599ebb4caSwyllys 699ebb4caSwyllys CDDL HEADER START 799ebb4caSwyllys 899ebb4caSwyllys The contents of this file are subject to the terms of the 999ebb4caSwyllys Common Development and Distribution License (the "License"). 1099ebb4caSwyllys You may not use this file except in compliance with the License. 1199ebb4caSwyllys 1299ebb4caSwyllys You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 1399ebb4caSwyllys or http://www.opensolaris.org/os/licensing. 1499ebb4caSwyllys See the License for the specific language governing permissions 1599ebb4caSwyllys and limitations under the License. 1699ebb4caSwyllys 1799ebb4caSwyllys When distributing Covered Code, include this CDDL HEADER in each 1899ebb4caSwyllys file and include the License file at usr/src/OPENSOLARIS.LICENSE. 1999ebb4caSwyllys If applicable, add the following below this CDDL HEADER, with the 2099ebb4caSwyllys fields enclosed by brackets "[]" replaced with your own identifying 2199ebb4caSwyllys information: Portions Copyright [yyyy] [name of copyright owner] 2299ebb4caSwyllys 2399ebb4caSwyllys CDDL HEADER END 2499ebb4caSwyllys--> 2599ebb4caSwyllys 2699ebb4caSwyllys<!--Element Definitions--> 2799ebb4caSwyllys 2899ebb4caSwyllys<!ELEMENT kmf-policy-db (kmf-policy*)> 2999ebb4caSwyllys<!ATTLIST kmf-policy-db allow-local-files (TRUE|FALSE) #IMPLIED> 3099ebb4caSwyllys 31*269e59f9SJan Pechanec<!ELEMENT kmf-policy (validation-methods, key-usage-set?, ext-key-usage?, cert-to-name-mapping?)> 3299ebb4caSwyllys<!ATTLIST kmf-policy name CDATA #REQUIRED> 3399ebb4caSwyllys<!ATTLIST kmf-policy ignore-date (TRUE|FALSE) #IMPLIED> 3499ebb4caSwyllys<!ATTLIST kmf-policy ignore-unknown-eku (TRUE|FALSE) #IMPLIED> 3599ebb4caSwyllys<!ATTLIST kmf-policy ignore-trust-anchor (TRUE|FALSE) #IMPLIED> 3699ebb4caSwyllys<!ATTLIST kmf-policy validity-adjusttime CDATA #IMPLIED> 3799ebb4caSwyllys<!ATTLIST kmf-policy ta-name CDATA #IMPLIED> 3899ebb4caSwyllys<!ATTLIST kmf-policy ta-serial CDATA #IMPLIED> 3999ebb4caSwyllys 4099ebb4caSwyllys<!ELEMENT validation-methods (ocsp?, crl?)> 4199ebb4caSwyllys<!ELEMENT ocsp (ocsp-basic, responder-cert?)> 4299ebb4caSwyllys 4399ebb4caSwyllys<!ELEMENT ocsp-basic EMPTY> 4499ebb4caSwyllys<!ATTLIST ocsp-basic 4599ebb4caSwyllys responder CDATA #IMPLIED 4699ebb4caSwyllys proxy CDATA #IMPLIED 4799ebb4caSwyllys uri-from-cert (TRUE|FALSE) #IMPLIED 4899ebb4caSwyllys response-lifetime CDATA #IMPLIED 4999ebb4caSwyllys ignore-response-sign (TRUE|FALSE) #IMPLIED 5099ebb4caSwyllys> 5199ebb4caSwyllys 5299ebb4caSwyllys<!ELEMENT responder-cert EMPTY> 5399ebb4caSwyllys<!ATTLIST responder-cert 5499ebb4caSwyllys name CDATA #REQUIRED 5599ebb4caSwyllys serial CDATA #REQUIRED 5699ebb4caSwyllys> 5799ebb4caSwyllys 5899ebb4caSwyllys<!ELEMENT crl EMPTY> 5999ebb4caSwyllys<!ATTLIST crl basefilename CDATA #IMPLIED> 6099ebb4caSwyllys<!ATTLIST crl directory CDATA #IMPLIED> 6199ebb4caSwyllys<!ATTLIST crl get-crl-uri (TRUE|FALSE) #IMPLIED> 6299ebb4caSwyllys<!ATTLIST crl proxy CDATA #IMPLIED> 6399ebb4caSwyllys<!ATTLIST crl ignore-crl-sign (TRUE|FALSE) #IMPLIED> 6499ebb4caSwyllys<!ATTLIST crl ignore-crl-date (TRUE|FALSE) #IMPLIED> 6599ebb4caSwyllys 6699ebb4caSwyllys<!ELEMENT key-usage-set (key-usage+)> 6799ebb4caSwyllys 6899ebb4caSwyllys<!ELEMENT key-usage EMPTY> 6999ebb4caSwyllys<!ATTLIST key-usage use (digitalSignature | nonRepudiation | 7099ebb4caSwyllys keyEncipherment | dataEncipherment | keyAgreement | 7199ebb4caSwyllys keyCertSign | cRLSign | encipherOnly | decipherOnly) #IMPLIED> 7299ebb4caSwyllys 7399ebb4caSwyllys<!ELEMENT ext-key-usage (eku-name*, eku-oid*)> 7499ebb4caSwyllys 7599ebb4caSwyllys<!ELEMENT eku-name EMPTY> 7699ebb4caSwyllys<!ATTLIST eku-name name (serverAuth | clientAuth | 7799ebb4caSwyllys codeSigning | emailProtection | 7899ebb4caSwyllys ipsecEndSystem | ipsecTunnel | ipsecUser | 7999ebb4caSwyllys timeStamping | OCSPSigning) #IMPLIED > 8099ebb4caSwyllys<!ELEMENT eku-oid EMPTY> 8199ebb4caSwyllys<!ATTLIST eku-oid oid CDATA #IMPLIED> 82*269e59f9SJan Pechanec 83*269e59f9SJan Pechanec<!ELEMENT cert-to-name-mapping ANY> 84*269e59f9SJan Pechanec<!ATTLIST cert-to-name-mapping mapper-name CDATA #IMPLIED> 85*269e59f9SJan Pechanec<!ATTLIST cert-to-name-mapping mapper-directory CDATA #IMPLIED> 86*269e59f9SJan Pechanec<!ATTLIST cert-to-name-mapping mapper-pathname CDATA #IMPLIED> 87*269e59f9SJan Pechanec<!ATTLIST cert-to-name-mapping mapper-options CDATA #IMPLIED> 88