ca_setcert
ca_setcert(env, &sh, NULL, type,
int ca_setcert(struct iked *, struct iked_sahdr *, struct iked_id *,
if (ca_setcert(env, &sa->sa_hdr, id, certtype, cert, certlen, PROC_CERT) == -1)