#include "SecCodeHost.h"
#include "SecCodeHostLib.h"
#include <Security/Security.h>
#include <Security/AuthSession.h>
#include <securityd_client/ucsp.h>
#include <servers/bootstrap.h>
mach_port_t gServerPort;
SecCSFlags gInitFlags;
#define UCSP_ARGS gServerPort, mig_get_reply_port(), &securitydCreds, &rcode
#define ATTRDATA(attr) (void *)(attr), (attr) ? strlen((attr)) : 0
#define CALL(func) \
security_token_t securitydCreds; \
CSSM_RETURN rcode; \
if (KERN_SUCCESS != func) \
return errSecCSInternalError; \
if (securitydCreds.val[0] != 0) \
return CSSM_ERRCODE_VERIFICATION_FAILURE; \
return rcode
OSStatus SecHostLibInit(SecCSFlags flags)
{
if (gServerPort != MACH_PORT_NULL) return errSecCSInternalError;
mach_port_t bootstrapPort;
if (KERN_SUCCESS != task_get_bootstrap_port(mach_task_self(), &bootstrapPort))
return errSecCSInternalError;
static char serverName[BOOTSTRAP_MAX_NAME_LEN] = SECURITYSERVER_BOOTSTRAP_NAME;
if (KERN_SUCCESS != bootstrap_look_up(bootstrapPort, serverName, &gServerPort))
return errSecCSInternalError;
ClientSetupInfo info = { 0x1234, SSPROTOVERSION };
CALL(ucsp_client_setup(UCSP_ARGS, mach_task_self(), info, "?:unspecified"));
}
OSStatus SecHostLibCreateGuest(SecGuestRef host,
uint32_t status, const char *path, const char *attributeXML,
SecCSFlags flags, SecGuestRef *newGuest)
{
return SecHostLibCreateGuest2(host, status, path, "", 0, attributeXML, flags, newGuest);
}
OSStatus SecHostLibCreateGuest2(SecGuestRef host,
uint32_t status, const char *path, const void *cdhash, size_t cdhashLength, const char *attributeXML,
SecCSFlags flags, SecGuestRef *newGuest)
{
if (flags != kSecCSDedicatedHost)
return errSecCSInvalidFlags;
CALL(ucsp_client_createGuest(UCSP_ARGS, host, status, path,
(void *)cdhash, cdhashLength, ATTRDATA(attributeXML), flags, newGuest));
}
OSStatus SecHostLibSetGuestStatus(SecGuestRef guestRef,
uint32_t status, const char *attributeXML,
SecCSFlags flags)
{
CALL(ucsp_client_setGuestStatus(UCSP_ARGS, guestRef, status, ATTRDATA(attributeXML)));
}
OSStatus SecHostSetHostingPort(mach_port_t hostingPort, SecCSFlags flags)
{
CALL(ucsp_client_registerHosting(UCSP_ARGS, hostingPort, flags));
}
OSStatus SecHostLibCheckLoad(const char *path, SecRequirementType type)
{
CALL(ucsp_client_helpCheckLoad(UCSP_ARGS, path, type));
}