#
# Copyright 2003 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# ident	"@(#)postinstall	1.2	03/09/09 SMI"
#

# This postinstall script "clones" the policy for aes/arcfour/blowfish to the
# encryption kit aes256, arcfour2048, and blowfish448 modules.
# Because we want to do the policy cloning and only have one of the kernel
# providers enabled we can't use the i.kcfconf class action script.
# We can't run cryptoadm(1m) here because it might not be available yet.

kcfconf=$BASEDIR/etc/crypto/kcf.conf
if [ ! -r $kcfconf ]; then
	echo "/etc/crypto/kcf.conf not found, this may be an attempt to \c"	
	echo "install this package on an incorrect release of Solaris"
	exit 2
fi

cp $kcfconf ${kcfconf}.tmp

sed -e 's/^aes:/aes256:/' -e 's/^blowfish:/blowfish448:/' -e \
	's/^arcfour:/arcfour2048:/' \
	$kcfconf > ${kcfconf}.tmp

mv -f ${kcfconf}.tmp $kcfconf

if [ -z "$BASEDIR" ]; then
	[ -x /usr/sbin/cryptoadm ] && /usr/sbin/cryptoadm refresh
fi

exit 0