SecCodeHostLib.h   [plain text]

/*
 * Copyright (c) 2007 Apple Inc. All Rights Reserved.
 * 
 * @APPLE_LICENSE_HEADER_START@
 * 
 * This file contains Original Code and/or Modifications of Original Code
 * as defined in and that are subject to the Apple Public Source License
 * Version 2.0 (the 'License'). You may not use this file except in
 * compliance with the License. Please obtain a copy of the License at
 * http://www.opensource.apple.com/apsl/ and read it before using this
 * file.
 * 
 * The Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 * Please see the License for the specific language governing rights and
 * limitations under the License.
 * 
 * @APPLE_LICENSE_HEADER_END@
 */

/*!
	@header SecCodeHostLib
	This header provides a subset of the hosting API for Code Signing.
	This subset functionality is implemented as a static library written
	entirely in C, and depends on nothing except the system library and the
	C runtime. It is thus suitable to be used by low-level libraries and
	other such system facilities. On the other hand, it does not provide the
	full functionality of <Security/SecCodeHost.h>.
	
	This file is documented as a delta to <Security/SecCodeHost.h>, which
	you should consult as a baseline.
*/
#ifndef _H_SECCODEHOSTLIB
#define _H_SECCODEHOSTLIB

#include <Security/SecCodeHost.h>

#ifdef __cplusplus
extern "C" {
#endif


/*!
	@function SecHostLibInit
	This function must be called first to use the SecCodeHostLib facility.
 */
OSStatus SecHostLibInit(SecCSFlags flags);


/*!
	@function SecHostLibCreateGuest
	This function declares a code host, engages hosting proxy services for it,
	and creates a guest with given attributes and state.
	
	NOTE: This version of the function currently only supports dedicated hosting.
	If you do not pass the kSecCSDedicatedHost flag, the call will fail.
 */
OSStatus SecHostLibCreateGuest(SecGuestRef host,
	uint32_t status, const char *path, const char *attributeXML,
	SecCSFlags flags, SecGuestRef *newGuest) DEPRECATED_ATTRIBUTE;
	
OSStatus SecHostLibCreateGuest2(SecGuestRef host,
	uint32_t status, const char *path, const void *cdhash, size_t cdhashLength, const char *attributeXML,
	SecCSFlags flags, SecGuestRef *newGuest);


/*!
	@function SecHostLibSetGuestStatus
	This function can change the state or attributes (or both) of a given guest.
	It performs all the work of SecHostSetGuestStatus.
 */	
OSStatus SecHostLibSetGuestStatus(SecGuestRef guestRef,
	uint32_t status, const char *attributeXML,
	SecCSFlags flags);


/*!
	@function SecHostLibSetHostingPort
	Register a Mach port to receive hosting queries on. This enables (and locks)
	dynamic hosting mode, and is incompatible with all proxy-mode calls.
	You still must call SecHostLibInit first.
 */
OSStatus SecHostSetHostingPort(mach_port_t hostingPort, SecCSFlags flags);


/*
	Functionality from SecCodeHost.h that is genuinely missing here:

OSStatus SecHostRemoveGuest(SecGuestRef host, SecGuestRef guest, SecCSFlags flags);

OSStatus SecHostSelectGuest(SecGuestRef guestRef, SecCSFlags flags);

OSStatus SecHostSelectedGuest(SecCSFlags flags, SecGuestRef *guestRef);

*/


/*!
 */
OSStatus SecHostLibCheckLoad(const char *path, SecRequirementType type);


#ifdef __cplusplus
}
#endif

#endif //_H_SECCODEHOSTLIB