openssl-1.0.0d/apps/ca.c

129 #define ENV_POLICY      	"policy"
161 " -policy arg     - The CA 'policy' to support\n",
200 		   const EVP_MD *dgst,STACK_OF(CONF_VALUE) *policy,CA_DB *db,
206 			const EVP_MD *dgst,STACK_OF(CONF_VALUE) *policy,
213 			 const EVP_MD *dgst,STACK_OF(CONF_VALUE) *policy,
220 	STACK_OF(CONF_VALUE) *policy, CA_DB *db, BIGNUM *serial,char *subj,unsigned long chtype, int multirdn,
264 	char *policy=NULL;
390 		else if (strcmp(*argv,"-policy") == 0)
393 			policy= *(++argv);
1059 		if ((policy == NULL) && ((policy=NCONF_get_string(conf,
1066 			BIO_printf(bio_err,"policy is %s\n",policy);
1159 		if ((attribs=NCONF_get_section(conf,policy)) == NULL)
1161 			BIO_printf(bio_err,"unable to find 'section' for %s\n",policy);
1556 	     const EVP_MD *dgst, STACK_OF(CONF_VALUE) *policy, CA_DB *db,
1613 	ok=do_body(xret,pkey,x509,dgst,policy,db,serial,subj,chtype,multirdn, email_dn,
1624 	     const EVP_MD *dgst, STACK_OF(CONF_VALUE) *policy, CA_DB *db,
1667 	ok=do_body(xret,pkey,x509,dgst,policy,db,serial,subj,chtype,multirdn,email_dn,startdate,enddate,
1678 	     STACK_OF(CONF_VALUE) *policy, CA_DB *db, BIGNUM *serial, char *subj,
1781 	/* Ok, now we check the 'policy' stuff. */
1796 	for (i=0; i<sk_CONF_VALUE_num(policy); i++)
1798 		cv=sk_CONF_VALUE_value(policy,i); /* get the object id */
1801 			BIO_printf(bio_err,"%s:unknown object type in 'policy' configuration\n",cv->name);
1822 			/* depending on the 'policy', decide what to do. */
1855 					BIO_printf(bio_err,"The %s field does not exist in the CA certificate,\nthe 'policy' is misconfigured\n",cv->name);
1875 				BIO_printf(bio_err,"%s:invalid type in 'policy' configuration\n",cv->value);
2243 	     const EVP_MD *dgst, STACK_OF(CONF_VALUE) *policy, CA_DB *db,
2369 	ok=do_body(xret,pkey,x509,dgst,policy,db,serial,subj,chtype,multirdn,email_dn,startdate,enddate,