/* * Copyright (c) 2003-2006 Apple Computer, Inc. All Rights Reserved. * * @APPLE_LICENSE_HEADER_START@ * * This file contains Original Code and/or Modifications of Original Code * as defined in and that are subject to the Apple Public Source License * Version 2.0 (the 'License'). You may not use this file except in * compliance with the License. Please obtain a copy of the License at * http://www.opensource.apple.com/apsl/ and read it before using this * file. * * The Original Code and all software distributed under the License are * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. * Please see the License for the specific language governing rights and * limitations under the License. * * @APPLE_LICENSE_HEADER_END@ */ /*! @header SecTrustPriv Private part of SecTrust.h */ #ifndef _SECURITY_SECTRUST_PRIV_H_ #define _SECURITY_SECTRUST_PRIV_H_ #include <Security/SecTrust.h> #include <CoreFoundation/CFString.h> #if defined(__cplusplus) extern "C" { #endif /* unique keychain item attributes for user trust records. */ enum { kSecTrustCertAttr = 'tcrt', kSecTrustPolicyAttr = 'tpol', /* Leopard and later */ kSecTrustPubKeyAttr = 'tpbk', kSecTrustSignatureAttr = 'tsig' }; /*! @function SecTrustSetUserTrustLegacy @abstract Sets the user-specified trust settings of a certificate and policy. @param certificate A reference to a certificate. @param policy A reference to a policy. @param trustSetting The user-specified trust settings. @result A result code. See "Security Error Codes" (SecBase.h). @This is the private version of what used to be SecTrustSetUserTrust(); it operates on UserTrust entries as that function used to. The current SecTrustSetUserTrust() function operated on Trust Settings. */ OSStatus SecTrustSetUserTrustLegacy(SecCertificateRef certificate, SecPolicyRef policy, SecTrustUserSetting trustSetting); /*! @function SecGetAppleTPHandle - NOT EXPORTED YET; copied from SecurityInterface, but could be useful in the future. @abstract Gets the Apple Trust Policy handle (TPHandle). @param result On return, the Apple TPHandle. */ /* CSSM_TP_HANDLE SecGetAppleTPHandle(); */ /* * Preference-related strings for Revocation policies. */ /* * Preference domain, i.e., the name of a plist in ~/Library/Preferences or in * /Library/Preferences */ #define kSecRevocationDomain "com.apple.security.revocation" /* OCSP and CRL style keys, followed by values used for both of them */ #define kSecRevocationOcspStyle CFSTR("OCSPStyle") #define kSecRevocationCrlStyle CFSTR("CRLStyle") #define kSecRevocationOff CFSTR("None") /* default for each one */ #define kSecRevocationBestAttempt CFSTR("BestAttempt") #define kSecRevocationRequireIfPresent CFSTR("RequireIfPresent") #define kSecRevocationRequireForAll CFSTR("RequireForAll") /* Which first if both enabled? */ #define kSecRevocationWhichFirst CFSTR("RevocationFirst") #define kSecRevocationOcspFirst CFSTR("OCSP") #define kSecRevocationCrlFirst CFSTR("CRL") /* boolean: A "this policy is sufficient per cert" for each */ #define kSecRevocationOCSPSufficientPerCert CFSTR("OCSPSufficientPerCert") #define kSecRevocationCRLSufficientPerCert CFSTR("CRLSufficientPerCert") /* local OCSP responder URI, value arbitrary string value */ #define kSecOCSPLocalResponder CFSTR("OCSPLocalResponder") #if defined(__cplusplus) } #endif #endif /* !_SECURITY_SECTRUST_PRIV_H_ */