SOSAccountCircles.m   [plain text]

//
// SOSAccountCircles.c
// sec
//

#include "keychain/SecureObjectSync/SOSAccountPriv.h"
#import "keychain/SecureObjectSync/SOSTransport.h"
#import "keychain/SecureObjectSync/SOSTransportKeyParameter.h"
#import "keychain/SecureObjectSync/SOSTransportMessageKVS.h"
#import "keychain/SecureObjectSync/SOSTransportCircleKVS.h"
#import "keychain/SecureObjectSync/SOSTransportCircleCK.h"
#import "keychain/SecureObjectSync/SOSAccountTrust.h"
#import "keychain/SecureObjectSync/SOSAccountTrustClassic.h"
#import "keychain/SecureObjectSync/SOSAccountTrustClassic+Expansion.h"
#import "keychain/SecureObjectSync/SOSAccountTrustClassic+Circle.h"

#include "keychain/SecureObjectSync/SOSPeerInfoCollections.h"
#include "SOSCloudKeychainClient.h"

//
// MARK: Circle management
//

SOSCircleRef CF_RETURNS_RETAINED SOSAccountEnsureCircle(SOSAccount* a, CFStringRef name, CFErrorRef *error)
{
CFErrorRef localError = NULL;
SOSAccountTrustClassic *trust = a.trust;
SOSCircleRef circle = trust.trustedCircle;

if (circle == NULL) {
circle = SOSCircleCreate(NULL, name, NULL);
a.key_interests_need_updating = true;
[trust setTrustedCircle:circle];
} else {
CFRetainSafe(circle);
}

require_action_quiet(circle || !isSOSErrorCoded(localError, kSOSErrorIncompatibleCircle), fail,
if (error) { *error = localError; localError = NULL; });

fail:
CFReleaseNull(localError);
return circle;
}

bool SOSAccountEvaluateKeysAndCircle(SOSAccountTransaction *txn, CFErrorRef *error) {
// if the userKey signature on the circle doesn't work with the new userkey
if([txn.account.trust isInCircleOnly:nil]) {
return SOSAccountGenerationSignatureUpdate(txn.account, error);
}
return true;
}