cfattach->ca_match function in behalf of the caller. Use it rather than invoking cfattach->ca_match directly.