security

package
v0.14.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jun 30, 2026 License: MIT Imports: 7 Imported by: 0

Documentation

Rendered for darwin/amd64

Overview

Package security provides purego-based Go bindings for the macOS Security framework.

Apple documentation: https://developer.apple.com/documentation/security

Index

Constants

View Source
const (
	CE_CDNT_FullName                __CE_CrlDistributionPointNameType = 0
	CE_CDNT_NameRelativeToCrlIssuer __CE_CrlDistributionPointNameType = 1
)
View Source
const (
	DT_AuthorityKeyID           __CE_DataType = 0
	DT_SubjectKeyID             __CE_DataType = 1
	DT_KeyUsage                 __CE_DataType = 2
	DT_SubjectAltName           __CE_DataType = 3
	DT_IssuerAltName            __CE_DataType = 4
	DT_ExtendedKeyUsage         __CE_DataType = 5
	DT_BasicConstraints         __CE_DataType = 6
	DT_CertPolicies             __CE_DataType = 7
	DT_NetscapeCertType         __CE_DataType = 8
	DT_CrlNumber                __CE_DataType = 9
	DT_DeltaCrl                 __CE_DataType = 10
	DT_CrlReason                __CE_DataType = 11
	DT_CrlDistributionPoints    __CE_DataType = 12
	DT_IssuingDistributionPoint __CE_DataType = 13
	DT_AuthorityInfoAccess      __CE_DataType = 14
	DT_Other                    __CE_DataType = 15
	DT_QC_Statements            __CE_DataType = 16
	DT_NameConstraints          __CE_DataType = 17
	DT_PolicyMappings           __CE_DataType = 18
	DT_PolicyConstraints        __CE_DataType = 19
	DT_InhibitAnyPolicy         __CE_DataType = 20
)
View Source
const (
	GNT_OtherName     __CE_GeneralNameType = 0
	GNT_RFC822Name    __CE_GeneralNameType = 1
	GNT_DNSName       __CE_GeneralNameType = 2
	GNT_X400Address   __CE_GeneralNameType = 3
	GNT_DirectoryName __CE_GeneralNameType = 4
	GNT_EdiPartyName  __CE_GeneralNameType = 5
	GNT_URI           __CE_GeneralNameType = 6
	GNT_IPAddress     __CE_GeneralNameType = 7
	GNT_RegisteredID  __CE_GeneralNameType = 8
)
View Source
const (
	CSSMERR_AC_FUNCTION_FAILED          = -2147405814
	CSSMERR_AC_FUNCTION_NOT_IMPLEMENTED = -2147405817
	CSSMERR_AC_INTERNAL_ERROR           = -2147405823
	CSSMERR_AC_INVALID_CL_HANDLE        = -2147405742
	CSSMERR_AC_INVALID_CONTEXT_HANDLE   = -2147405760
	CSSMERR_AC_INVALID_DATA             = -2147405754
	CSSMERR_AC_INVALID_DB_HANDLE        = -2147405750
	CSSMERR_AC_INVALID_DB_LIST          = -2147405748
	CSSMERR_AC_INVALID_DB_LIST_POINTER  = -2147405747
	CSSMERR_AC_INVALID_DL_HANDLE        = -2147405743
	CSSMERR_AC_INVALID_INPUT_POINTER    = -2147405819
	CSSMERR_AC_INVALID_OUTPUT_POINTER   = -2147405818
	CSSMERR_AC_INVALID_PASSTHROUGH_ID   = -2147405738
	CSSMERR_AC_INVALID_POINTER          = -2147405820
	CSSMERR_AC_INVALID_TP_HANDLE        = -2147405741
	CSSMERR_AC_MDS_ERROR                = -2147405821
	CSSMERR_AC_MEMORY_ERROR             = -2147405822
	CSSMERR_AC_OS_ACCESS_DENIED         = -2147405815
	CSSMERR_AC_SELF_CHECK_FAILED        = -2147405816
)
View Source
const (
	CSSMERR_APPLEDL_DISK_FULL                  = -2147412991
	CSSMERR_APPLEDL_FILE_TOO_BIG               = -2147412989
	CSSMERR_APPLEDL_INCOMPATIBLE_DATABASE_BLOB = -2147412986
	CSSMERR_APPLEDL_INCOMPATIBLE_KEY_BLOB      = -2147412985
	CSSMERR_APPLEDL_INVALID_DATABASE_BLOB      = -2147412988
	CSSMERR_APPLEDL_INVALID_KEY_BLOB           = -2147412987
	CSSMERR_APPLEDL_INVALID_OPEN_PARAMETERS    = -2147412992
	CSSMERR_APPLEDL_QUOTA_EXCEEDED             = -2147412990
)
View Source
const (
	CSSMERR_APPLETP_BAD_CERT_FROM_ISSUER         = -2147408873
	CSSMERR_APPLETP_CA_PIN_MISMATCH              = -2147408836
	CSSMERR_APPLETP_CERT_NOT_FOUND_FROM_ISSUER   = -2147408874
	CSSMERR_APPLETP_CODE_SIGN_DEVELOPMENT        = -2147408845
	CSSMERR_APPLETP_CRL_BAD_URI                  = -2147408881
	CSSMERR_APPLETP_CRL_EXPIRED                  = -2147408885
	CSSMERR_APPLETP_CRL_INVALID_ANCHOR_CERT      = -2147408877
	CSSMERR_APPLETP_CRL_NOT_FOUND                = -2147408883
	CSSMERR_APPLETP_CRL_NOT_TRUSTED              = -2147408878
	CSSMERR_APPLETP_CRL_NOT_VALID_YET            = -2147408884
	CSSMERR_APPLETP_CRL_POLICY_FAIL              = -2147408876
	CSSMERR_APPLETP_CRL_SERVER_DOWN              = -2147408882
	CSSMERR_APPLETP_CS_BAD_CERT_CHAIN_LENGTH     = -2147408849
	CSSMERR_APPLETP_CS_BAD_PATH_LENGTH           = -2147408847
	CSSMERR_APPLETP_CS_NO_BASIC_CONSTRAINTS      = -2147408848
	CSSMERR_APPLETP_CS_NO_EXTENDED_KEY_USAGE     = -2147408846
	CSSMERR_APPLETP_EXT_KEYUSAGE_NOT_CRITICAL    = -2147408838
	CSSMERR_APPLETP_HOSTNAME_MISMATCH            = -2147408896
	CSSMERR_APPLETP_IDENTIFIER_MISSING           = -2147408837
	CSSMERR_APPLETP_IDP_FAIL                     = -2147408875
	CSSMERR_APPLETP_INCOMPLETE_REVOCATION_CHECK  = -2147408861
	CSSMERR_APPLETP_INVALID_AUTHORITY_ID         = -2147408892
	CSSMERR_APPLETP_INVALID_CA                   = -2147408893
	CSSMERR_APPLETP_INVALID_EMPTY_SUBJECT        = -2147408841
	CSSMERR_APPLETP_INVALID_EXTENDED_KEY_USAGE   = -2147408889
	CSSMERR_APPLETP_INVALID_ID_LINKAGE           = -2147408888
	CSSMERR_APPLETP_INVALID_KEY_USAGE            = -2147408890
	CSSMERR_APPLETP_INVALID_ROOT                 = -2147408886
	CSSMERR_APPLETP_INVALID_SUBJECT_ID           = -2147408891
	CSSMERR_APPLETP_LEAF_PIN_MISMATCH            = -2147408835
	CSSMERR_APPLETP_MISSING_REQUIRED_EXTENSION   = -2147408839
	CSSMERR_APPLETP_NETWORK_FAILURE              = -2147408860
	CSSMERR_APPLETP_NO_BASIC_CONSTRAINTS         = -2147408894
	CSSMERR_APPLETP_OCSP_BAD_REQUEST             = -2147408864
	CSSMERR_APPLETP_OCSP_BAD_RESPONSE            = -2147408865
	CSSMERR_APPLETP_OCSP_INVALID_ANCHOR_CERT     = -2147408858
	CSSMERR_APPLETP_OCSP_NONCE_MISMATCH          = -2147408850
	CSSMERR_APPLETP_OCSP_NOT_TRUSTED             = -2147408859
	CSSMERR_APPLETP_OCSP_NO_SIGNER               = -2147408856
	CSSMERR_APPLETP_OCSP_RESP_INTERNAL_ERR       = -2147408854
	CSSMERR_APPLETP_OCSP_RESP_MALFORMED_REQ      = -2147408855
	CSSMERR_APPLETP_OCSP_RESP_SIG_REQUIRED       = -2147408852
	CSSMERR_APPLETP_OCSP_RESP_TRY_LATER          = -2147408853
	CSSMERR_APPLETP_OCSP_RESP_UNAUTHORIZED       = -2147408851
	CSSMERR_APPLETP_OCSP_SIG_ERROR               = -2147408857
	CSSMERR_APPLETP_OCSP_STATUS_UNRECOGNIZED     = -2147408862
	CSSMERR_APPLETP_OCSP_UNAVAILABLE             = -2147408863
	CSSMERR_APPLETP_PATH_LEN_CONSTRAINT          = -2147408887
	CSSMERR_APPLETP_RS_BAD_CERT_CHAIN_LENGTH     = -2147408844
	CSSMERR_APPLETP_RS_BAD_EXTENDED_KEY_USAGE    = -2147408843
	CSSMERR_APPLETP_SMIME_BAD_EXT_KEY_USE        = -2147408871
	CSSMERR_APPLETP_SMIME_BAD_KEY_USE            = -2147408870
	CSSMERR_APPLETP_SMIME_EMAIL_ADDRS_NOT_FOUND  = -2147408872
	CSSMERR_APPLETP_SMIME_KEYUSAGE_NOT_CRITICAL  = -2147408869
	CSSMERR_APPLETP_SMIME_NO_EMAIL_ADDRS         = -2147408868
	CSSMERR_APPLETP_SMIME_SUBJ_ALT_NAME_NOT_CRIT = -2147408867
	CSSMERR_APPLETP_SSL_BAD_EXT_KEY_USE          = -2147408866
	CSSMERR_APPLETP_TRUST_SETTING_DENY           = -2147408842
	CSSMERR_APPLETP_UNKNOWN_CERT_EXTEN           = -2147408880
	CSSMERR_APPLETP_UNKNOWN_CRITICAL_EXTEN       = -2147408895
	CSSMERR_APPLETP_UNKNOWN_CRL_EXTEN            = -2147408879
	CSSMERR_APPLETP_UNKNOWN_QUAL_CERT_STATEMENT  = -2147408840
)
View Source
const (
	CSSMERR_APPLE_DOTMAC_CSR_VERIFY_FAIL          = -2147408785
	CSSMERR_APPLE_DOTMAC_FAILED_CONSISTENCY_CHECK = -2147408784
	CSSMERR_APPLE_DOTMAC_NO_REQ_PENDING           = -2147408786
	CSSMERR_APPLE_DOTMAC_REQ_IS_PENDING           = -2147408787
	CSSMERR_APPLE_DOTMAC_REQ_QUEUED               = -2147408796
	CSSMERR_APPLE_DOTMAC_REQ_REDIRECT             = -2147408795
	CSSMERR_APPLE_DOTMAC_REQ_SERVER_ALREADY_EXIST = -2147408789
	CSSMERR_APPLE_DOTMAC_REQ_SERVER_AUTH          = -2147408792
	CSSMERR_APPLE_DOTMAC_REQ_SERVER_ERR           = -2147408794
	CSSMERR_APPLE_DOTMAC_REQ_SERVER_NOT_AVAIL     = -2147408790
	CSSMERR_APPLE_DOTMAC_REQ_SERVER_PARAM         = -2147408793
	CSSMERR_APPLE_DOTMAC_REQ_SERVER_SERVICE_ERROR = -2147408788
	CSSMERR_APPLE_DOTMAC_REQ_SERVER_UNIMPL        = -2147408791
)
View Source
const (
	CSSMERR_CL_CRL_ALREADY_SIGNED        = -2147411897
	CSSMERR_CL_FUNCTION_FAILED           = -2147411958
	CSSMERR_CL_FUNCTION_NOT_IMPLEMENTED  = -2147411961
	CSSMERR_CL_INTERNAL_ERROR            = -2147411967
	CSSMERR_CL_INVALID_CERTGROUP_POINTER = -2147411902
	CSSMERR_CL_INVALID_CERT_POINTER      = -2147411901
	CSSMERR_CL_INVALID_CONTEXT_HANDLE    = -2147411904
	CSSMERR_CL_INVALID_CRL_POINTER       = -2147411900
	CSSMERR_CL_INVALID_DATA              = -2147411898
	CSSMERR_CL_INVALID_FIELD_POINTER     = -2147411899
	CSSMERR_CL_INVALID_INPUT_POINTER     = -2147411963
	CSSMERR_CL_INVALID_NUMBER_OF_FIELDS  = -2147411896
	CSSMERR_CL_INVALID_OUTPUT_POINTER    = -2147411962
	CSSMERR_CL_INVALID_PASSTHROUGH_ID    = -2147411882
	CSSMERR_CL_INVALID_POINTER           = -2147411964
	CSSMERR_CL_MDS_ERROR                 = -2147411965
	CSSMERR_CL_MEMORY_ERROR              = -2147411966
	CSSMERR_CL_OS_ACCESS_DENIED          = -2147411959
	CSSMERR_CL_SELF_CHECK_FAILED         = -2147411960
	CSSMERR_CL_UNKNOWN_FORMAT            = -2147411890
	CSSMERR_CL_UNKNOWN_TAG               = -2147411889
	CSSMERR_CL_VERIFICATION_FAILURE      = -2147411895
)
View Source
const (
	CSSMERR_CSPDL_APPLE_DL_CONVERSION_ERROR       = -2147415035
	CSSMERR_CSP_APPLE_ADD_APPLICATION_ACL_SUBJECT = -2147415040
	CSSMERR_CSP_APPLE_INVALID_KEY_END_DATE        = -2147415036
	CSSMERR_CSP_APPLE_INVALID_KEY_START_DATE      = -2147415037
	CSSMERR_CSP_APPLE_PUBLIC_KEY_INCOMPLETE       = -2147415039
	CSSMERR_CSP_APPLE_SIGNATURE_MISMATCH          = -2147415038
	CSSMERR_CSP_APPLE_SSLv2_ROLLBACK              = -2147415034
)
View Source
const (
	CSSMERR_CSP_FUNCTION_FAILED          = -2147416054
	CSSMERR_CSP_FUNCTION_NOT_IMPLEMENTED = -2147416057
	CSSMERR_CSP_INTERNAL_ERROR           = -2147416063
	CSSMERR_CSP_INVALID_INPUT_POINTER    = -2147416059
	CSSMERR_CSP_INVALID_OUTPUT_POINTER   = -2147416058
	CSSMERR_CSP_INVALID_POINTER          = -2147416060
	CSSMERR_CSP_MDS_ERROR                = -2147416061
	CSSMERR_CSP_MEMORY_ERROR             = -2147416062
	CSSMERR_CSP_OS_ACCESS_DENIED         = -2147416055
	CSSMERR_CSP_SELF_CHECK_FAILED        = -2147416056
)
View Source
const (
	CSSMERR_CSP_INVALID_CONTEXT_HANDLE = -2147416000
	CSSMERR_CSP_INVALID_CRYPTO_DATA    = -2147415976
	CSSMERR_CSP_INVALID_DATA           = -2147415994
	CSSMERR_CSP_INVALID_PASSTHROUGH_ID = -2147415978
	CSSMERR_CSP_PRIVILEGE_NOT_GRANTED  = -2147415989
)
View Source
const (
	CSSMERR_CSP_ACL_ADD_FAILED                 = -2147416010
	CSSMERR_CSP_ACL_BASE_CERTS_NOT_SUPPORTED   = -2147416025
	CSSMERR_CSP_ACL_CHALLENGE_CALLBACK_FAILED  = -2147416019
	CSSMERR_CSP_ACL_CHANGE_FAILED              = -2147416015
	CSSMERR_CSP_ACL_DELETE_FAILED              = -2147416012
	CSSMERR_CSP_ACL_ENTRY_TAG_NOT_FOUND        = -2147416017
	CSSMERR_CSP_ACL_REPLACE_FAILED             = -2147416011
	CSSMERR_CSP_ACL_SUBJECT_TYPE_NOT_SUPPORTED = -2147416021
	CSSMERR_CSP_INVALID_ACCESS_CREDENTIALS     = -2147416027
	CSSMERR_CSP_INVALID_ACL_BASE_CERTS         = -2147416026
	CSSMERR_CSP_INVALID_ACL_CHALLENGE_CALLBACK = -2147416020
	CSSMERR_CSP_INVALID_ACL_EDIT_MODE          = -2147416016
	CSSMERR_CSP_INVALID_ACL_ENTRY_TAG          = -2147416018
	CSSMERR_CSP_INVALID_ACL_SUBJECT_VALUE      = -2147416022
	CSSMERR_CSP_INVALID_NEW_ACL_ENTRY          = -2147416014
	CSSMERR_CSP_INVALID_NEW_ACL_OWNER          = -2147416013
	CSSMERR_CSP_INVALID_SAMPLE_VALUE           = -2147416024
	CSSMERR_CSP_OBJECT_ACL_NOT_SUPPORTED       = -2147416029
	CSSMERR_CSP_OBJECT_ACL_REQUIRED            = -2147416028
	CSSMERR_CSP_OBJECT_MANIP_AUTH_DENIED       = -2147416030
	CSSMERR_CSP_OBJECT_USE_AUTH_DENIED         = -2147416031
	CSSMERR_CSP_OPERATION_AUTH_DENIED          = -2147416032
	CSSMERR_CSP_SAMPLE_VALUE_NOT_SUPPORTED     = -2147416023
)
View Source
const (
	CSSMERR_CSSM_FUNCTION_FAILED               = -2147418102
	CSSMERR_CSSM_FUNCTION_NOT_IMPLEMENTED      = -2147418105
	CSSMERR_CSSM_INTERNAL_ERROR                = -2147418111
	CSSMERR_CSSM_INVALID_GUID                  = -2147418100
	CSSMERR_CSSM_INVALID_INPUT_POINTER         = -2147418107
	CSSMERR_CSSM_INVALID_OUTPUT_POINTER        = -2147418106
	CSSMERR_CSSM_INVALID_POINTER               = -2147418108
	CSSMERR_CSSM_MDS_ERROR                     = -2147418109
	CSSMERR_CSSM_MEMORY_ERROR                  = -2147418110
	CSSMERR_CSSM_MODULE_MANIFEST_VERIFY_FAILED = -2147418101
	CSSMERR_CSSM_OS_ACCESS_DENIED              = -2147418103
	CSSMERR_CSSM_SELF_CHECK_FAILED             = -2147418104
)
View Source
const (
	CSSMERR_CSSM_FUNCTION_INTEGRITY_FAIL = -2147417851
	CSSMERR_CSSM_INVALID_ADDIN_HANDLE    = -2147417855
	CSSMERR_CSSM_INVALID_HANDLE_USAGE    = -2147417853
	CSSMERR_CSSM_NOT_INITIALIZED         = -2147417854
	CSSMERR_CSSM_PVC_REFERENT_NOT_FOUND  = -2147417852
)
View Source
const (
	CSSMERR_CSSM_INCOMPATIBLE_VERSION   = -2147418047
	CSSMERR_CSSM_INVALID_CONTEXT_HANDLE = -2147418048
	CSSMERR_CSSM_PRIVILEGE_NOT_GRANTED  = -2147418037
)
View Source
const (
	CSSMERR_AC_DEVICE_FAILED                        = -2147405595
	CSSMERR_AC_DEVICE_RESET                         = -2147405596
	CSSMERR_AC_INSUFFICIENT_CLIENT_IDENTIFICATION   = -2147405597
	CSSMERR_AC_IN_DARK_WAKE                         = -2147405594
	CSSMERR_AC_NO_USER_INTERACTION                  = -2147405600
	CSSMERR_AC_SERVICE_NOT_AVAILABLE                = -2147405598
	CSSMERR_AC_USER_CANCELED                        = -2147405599
	CSSMERR_CL_DEVICE_FAILED                        = -2147411739
	CSSMERR_CL_DEVICE_RESET                         = -2147411740
	CSSMERR_CL_INSUFFICIENT_CLIENT_IDENTIFICATION   = -2147411741
	CSSMERR_CL_IN_DARK_WAKE                         = -2147411738
	CSSMERR_CL_NO_USER_INTERACTION                  = -2147411744
	CSSMERR_CL_SERVICE_NOT_AVAILABLE                = -2147411742
	CSSMERR_CL_USER_CANCELED                        = -2147411743
	CSSMERR_CSP_DEVICE_FAILED                       = -2147415835
	CSSMERR_CSP_DEVICE_RESET                        = -2147415836
	CSSMERR_CSP_INSUFFICIENT_CLIENT_IDENTIFICATION  = -2147415837
	CSSMERR_CSP_IN_DARK_WAKE                        = -2147415834
	CSSMERR_CSP_NO_USER_INTERACTION                 = -2147415840
	CSSMERR_CSP_SERVICE_NOT_AVAILABLE               = -2147415838
	CSSMERR_CSP_USER_CANCELED                       = -2147415839
	CSSMERR_CSSM_DEVICE_FAILED                      = -2147417883
	CSSMERR_CSSM_DEVICE_RESET                       = -2147417884
	CSSMERR_CSSM_INSUFFICIENT_CLIENT_IDENTIFICATION = -2147417885
	CSSMERR_CSSM_IN_DARK_WAKE                       = -2147417882
	CSSMERR_CSSM_NO_USER_INTERACTION                = -2147417888
	CSSMERR_CSSM_SERVICE_NOT_AVAILABLE              = -2147417886
	CSSMERR_CSSM_USER_CANCELED                      = -2147417887
	CSSMERR_DL_DEVICE_FAILED                        = -2147413787
	CSSMERR_DL_DEVICE_RESET                         = -2147413788
	CSSMERR_DL_INSUFFICIENT_CLIENT_IDENTIFICATION   = -2147413789
	CSSMERR_DL_IN_DARK_WAKE                         = -2147413786
	CSSMERR_DL_NO_USER_INTERACTION                  = -2147413792
	CSSMERR_DL_SERVICE_NOT_AVAILABLE                = -2147413790
	CSSMERR_DL_USER_CANCELED                        = -2147413791
	CSSMERR_TP_DEVICE_FAILED                        = -2147409691
	CSSMERR_TP_DEVICE_RESET                         = -2147409692
	CSSMERR_TP_INSUFFICIENT_CLIENT_IDENTIFICATION   = -2147409693
	CSSMERR_TP_IN_DARK_WAKE                         = -2147409690
	CSSMERR_TP_NO_USER_INTERACTION                  = -2147409696
	CSSMERR_TP_SERVICE_NOT_AVAILABLE                = -2147409694
	CSSMERR_TP_USER_CANCELED                        = -2147409695
)
View Source
const (
	CSSMERR_DL_FUNCTION_FAILED          = -2147414006
	CSSMERR_DL_FUNCTION_NOT_IMPLEMENTED = -2147414009
	CSSMERR_DL_INTERNAL_ERROR           = -2147414015
	CSSMERR_DL_INVALID_CL_HANDLE        = -2147413934
	CSSMERR_DL_INVALID_CSP_HANDLE       = -2147413936
	CSSMERR_DL_INVALID_DB_LIST_POINTER  = -2147413939
	CSSMERR_DL_INVALID_DL_HANDLE        = -2147413935
	CSSMERR_DL_INVALID_INPUT_POINTER    = -2147414011
	CSSMERR_DL_INVALID_OUTPUT_POINTER   = -2147414010
	CSSMERR_DL_INVALID_POINTER          = -2147414012
	CSSMERR_DL_MDS_ERROR                = -2147414013
	CSSMERR_DL_MEMORY_ERROR             = -2147414014
	CSSMERR_DL_OS_ACCESS_DENIED         = -2147414007
	CSSMERR_DL_SELF_CHECK_FAILED        = -2147414008
)
View Source
const (
	CSSMERR_DL_INVALID_DB_HANDLE      = -2147413942
	CSSMERR_DL_INVALID_NETWORK_ADDR   = -2147413929
	CSSMERR_DL_INVALID_PASSTHROUGH_ID = -2147413930
)
View Source
const (
	CSSMERR_DL_ACL_ADD_FAILED                 = -2147413962
	CSSMERR_DL_ACL_BASE_CERTS_NOT_SUPPORTED   = -2147413977
	CSSMERR_DL_ACL_CHALLENGE_CALLBACK_FAILED  = -2147413971
	CSSMERR_DL_ACL_CHANGE_FAILED              = -2147413967
	CSSMERR_DL_ACL_DELETE_FAILED              = -2147413964
	CSSMERR_DL_ACL_ENTRY_TAG_NOT_FOUND        = -2147413969
	CSSMERR_DL_ACL_REPLACE_FAILED             = -2147413963
	CSSMERR_DL_ACL_SUBJECT_TYPE_NOT_SUPPORTED = -2147413973
	CSSMERR_DL_INVALID_ACCESS_CREDENTIALS     = -2147413979
	CSSMERR_DL_INVALID_ACL_BASE_CERTS         = -2147413978
	CSSMERR_DL_INVALID_ACL_CHALLENGE_CALLBACK = -2147413972
	CSSMERR_DL_INVALID_ACL_EDIT_MODE          = -2147413968
	CSSMERR_DL_INVALID_ACL_ENTRY_TAG          = -2147413970
	CSSMERR_DL_INVALID_ACL_SUBJECT_VALUE      = -2147413974
	CSSMERR_DL_INVALID_NEW_ACL_ENTRY          = -2147413966
	CSSMERR_DL_INVALID_NEW_ACL_OWNER          = -2147413965
	CSSMERR_DL_INVALID_SAMPLE_VALUE           = -2147413976
	CSSMERR_DL_OBJECT_ACL_NOT_SUPPORTED       = -2147413981
	CSSMERR_DL_OBJECT_ACL_REQUIRED            = -2147413980
	CSSMERR_DL_OBJECT_MANIP_AUTH_DENIED       = -2147413982
	CSSMERR_DL_OBJECT_USE_AUTH_DENIED         = -2147413983
	CSSMERR_DL_OPERATION_AUTH_DENIED          = -2147413984
	CSSMERR_DL_SAMPLE_VALUE_NOT_SUPPORTED     = -2147413975
)
View Source
const (
	CSSMERR_TP_CRL_ALREADY_SIGNED        = -2147409849
	CSSMERR_TP_FUNCTION_FAILED           = -2147409910
	CSSMERR_TP_FUNCTION_NOT_IMPLEMENTED  = -2147409913
	CSSMERR_TP_INTERNAL_ERROR            = -2147409919
	CSSMERR_TP_INVALID_CERTGROUP_POINTER = -2147409854
	CSSMERR_TP_INVALID_CERT_POINTER      = -2147409853
	CSSMERR_TP_INVALID_CL_HANDLE         = -2147409838
	CSSMERR_TP_INVALID_CONTEXT_HANDLE    = -2147409856
	CSSMERR_TP_INVALID_CRL_POINTER       = -2147409852
	CSSMERR_TP_INVALID_CSP_HANDLE        = -2147409840
	CSSMERR_TP_INVALID_DATA              = -2147409850
	CSSMERR_TP_INVALID_DB_HANDLE         = -2147409846
	CSSMERR_TP_INVALID_DB_LIST           = -2147409844
	CSSMERR_TP_INVALID_DB_LIST_POINTER   = -2147409843
	CSSMERR_TP_INVALID_DL_HANDLE         = -2147409839
	CSSMERR_TP_INVALID_FIELD_POINTER     = -2147409851
	CSSMERR_TP_INVALID_INPUT_POINTER     = -2147409915
	CSSMERR_TP_INVALID_NETWORK_ADDR      = -2147409833
	CSSMERR_TP_INVALID_NUMBER_OF_FIELDS  = -2147409848
	CSSMERR_TP_INVALID_OUTPUT_POINTER    = -2147409914
	CSSMERR_TP_INVALID_PASSTHROUGH_ID    = -2147409834
	CSSMERR_TP_INVALID_POINTER           = -2147409916
	CSSMERR_TP_MDS_ERROR                 = -2147409917
	CSSMERR_TP_MEMORY_ERROR              = -2147409918
	CSSMERR_TP_OS_ACCESS_DENIED          = -2147409911
	CSSMERR_TP_SELF_CHECK_FAILED         = -2147409912
	CSSMERR_TP_UNKNOWN_FORMAT            = -2147409842
	CSSMERR_TP_UNKNOWN_TAG               = -2147409841
	CSSMERR_TP_VERIFICATION_FAILURE      = -2147409847
)
View Source
const (
	CSSM_ACL_AUTHORIZATION_CHANGE_ACL   = 65536
	CSSM_ACL_AUTHORIZATION_CHANGE_OWNER = 65537
	CSSM_ACL_AUTHORIZATION_INTEGRITY    = 65539
	CSSM_ACL_AUTHORIZATION_PARTITION_ID = 65538
	CSSM_ACL_AUTHORIZATION_PREAUTH_BASE = 16842752
	CSSM_ACL_AUTHORIZATION_PREAUTH_END  = 16908288
)
View Source
const (
	CSSM_ACL_AUTHORIZATION_ANY                      = 1
	CSSM_ACL_AUTHORIZATION_DBS_CREATE               = 22
	CSSM_ACL_AUTHORIZATION_DBS_DELETE               = 23
	CSSM_ACL_AUTHORIZATION_DB_DELETE                = 17
	CSSM_ACL_AUTHORIZATION_DB_INSERT                = 19
	CSSM_ACL_AUTHORIZATION_DB_MODIFY                = 20
	CSSM_ACL_AUTHORIZATION_DB_READ                  = 21
	CSSM_ACL_AUTHORIZATION_DECRYPT                  = 24
	CSSM_ACL_AUTHORIZATION_DELETE                   = 25
	CSSM_ACL_AUTHORIZATION_DERIVE                   = 28
	CSSM_ACL_AUTHORIZATION_ENCRYPT                  = 35
	CSSM_ACL_AUTHORIZATION_EXPORT_CLEAR             = 37
	CSSM_ACL_AUTHORIZATION_EXPORT_WRAPPED           = 38
	CSSM_ACL_AUTHORIZATION_GENKEY                   = 41
	CSSM_ACL_AUTHORIZATION_IMPORT_CLEAR             = 47
	CSSM_ACL_AUTHORIZATION_IMPORT_WRAPPED           = 48
	CSSM_ACL_AUTHORIZATION_LOGIN                    = 57
	CSSM_ACL_AUTHORIZATION_MAC                      = 59
	CSSM_ACL_AUTHORIZATION_SIGN                     = 115
	CSSM_ACL_AUTHORIZATION_TAG_VENDOR_DEFINED_START = 65536
)
View Source
const (
	CSSM_ACL_CODE_SIGNATURE_INVALID = 0
	CSSM_ACL_CODE_SIGNATURE_OSX     = 1
)
View Source
const (
	CSSM_ACL_EDIT_MODE_ADD     = 1
	CSSM_ACL_EDIT_MODE_DELETE  = 2
	CSSM_ACL_EDIT_MODE_REPLACE = 3
)
View Source
const (
	CSSM_ACL_KEYCHAIN_PROMPT_INVALID            = 64
	CSSM_ACL_KEYCHAIN_PROMPT_INVALID_ACT        = 128
	CSSM_ACL_KEYCHAIN_PROMPT_REQUIRE_PASSPHRASE = 1
	CSSM_ACL_KEYCHAIN_PROMPT_UNSIGNED           = 16
	CSSM_ACL_KEYCHAIN_PROMPT_UNSIGNED_ACT       = 32
)
View Source
const (
	CSSM_ACL_MATCH_BITS       = 3
	CSSM_ACL_MATCH_GID        = 2
	CSSM_ACL_MATCH_HONOR_ROOT = 256
	CSSM_ACL_MATCH_UID        = 1
)
View Source
const (
	CSSM_ACL_PREAUTH_TRACKING_AUTHORIZED = 2147483648
	CSSM_ACL_PREAUTH_TRACKING_BLOCKED    = 0
	CSSM_ACL_PREAUTH_TRACKING_COUNT_MASK = 255
	CSSM_ACL_PREAUTH_TRACKING_UNKNOWN    = 1073741824
)
View Source
const (
	CSSM_ACL_SUBJECT_TYPE_ANY                 = 1
	CSSM_ACL_SUBJECT_TYPE_BIOMETRIC           = 8
	CSSM_ACL_SUBJECT_TYPE_EXT_PAM_NAME        = 78
	CSSM_ACL_SUBJECT_TYPE_HASHED_SUBJECT      = 44
	CSSM_ACL_SUBJECT_TYPE_LOGIN_NAME          = 58
	CSSM_ACL_SUBJECT_TYPE_PASSWORD            = 79
	CSSM_ACL_SUBJECT_TYPE_PROMPTED_BIOMETRIC  = 83
	CSSM_ACL_SUBJECT_TYPE_PROMPTED_PASSWORD   = 84
	CSSM_ACL_SUBJECT_TYPE_PROTECTED_BIOMETRIC = 86
	CSSM_ACL_SUBJECT_TYPE_PROTECTED_PASSWORD  = 87
	CSSM_ACL_SUBJECT_TYPE_PUBLIC_KEY          = 89
	CSSM_ACL_SUBJECT_TYPE_THRESHOLD           = 123
)
View Source
const (
	CSSM_ACL_SUBJECT_TYPE_ASYMMETRIC_KEY  = 65547
	CSSM_ACL_SUBJECT_TYPE_CODE_SIGNATURE  = 116
	CSSM_ACL_SUBJECT_TYPE_COMMENT         = 12
	CSSM_ACL_SUBJECT_TYPE_KEYCHAIN_PROMPT = 65536
	CSSM_ACL_SUBJECT_TYPE_PARTITION       = 65548
	CSSM_ACL_SUBJECT_TYPE_PREAUTH         = 65545
	CSSM_ACL_SUBJECT_TYPE_PREAUTH_SOURCE  = 65546
	CSSM_ACL_SUBJECT_TYPE_PROCESS         = 65539
	CSSM_ACL_SUBJECT_TYPE_SYMMETRIC_KEY   = 65541
)
View Source
const (
	CSSMERR_AC_INVALID_BASE_ACLS          = -2147405567
	CSSMERR_AC_INVALID_ENCODING           = -2147405565
	CSSMERR_AC_INVALID_REQUESTOR          = -2147405563
	CSSMERR_AC_INVALID_REQUEST_DESCRIPTOR = -2147405562
	CSSMERR_AC_INVALID_TUPLE_CREDENTIALS  = -2147405566
	CSSMERR_AC_INVALID_VALIDITY_PERIOD    = -2147405564
	CSSM_AC_BASE_AC_ERROR                 = -2147405568
)
View Source
const (
	CSSM_ADDR_CUSTOM   = 1
	CSSM_ADDR_NAME     = 4
	CSSM_ADDR_NONE     = 0
	CSSM_ADDR_SOCKADDR = 3
	CSSM_ADDR_URL      = 2
)
View Source
const (
	CSSM_ALGCLASS_ASYMMETRIC = 8
	CSSM_ALGCLASS_CUSTOM     = 1
	CSSM_ALGCLASS_DERIVEKEY  = 10
	CSSM_ALGCLASS_DIGEST     = 4
	CSSM_ALGCLASS_KEYGEN     = 9
	CSSM_ALGCLASS_MAC        = 7
	CSSM_ALGCLASS_NONE       = 0
	CSSM_ALGCLASS_RANDOMGEN  = 5
	CSSM_ALGCLASS_SIGNATURE  = 2
	CSSM_ALGCLASS_SYMMETRIC  = 3
	CSSM_ALGCLASS_UNIQUEGEN  = 6
)
View Source
const (
	CSSM_ALGID_AES               = 2147483649
	CSSM_ALGID_APPLE_YARROW      = 2147483648
	CSSM_ALGID_ASC               = 2147483655
	CSSM_ALGID_ECDH_X963_KDF     = 2147483677
	CSSM_ALGID_ECDSA_SPECIFIED   = 2147483676
	CSSM_ALGID_ENTROPY_DEFAULT   = 2147483665
	CSSM_ALGID_FEE               = 2147483650
	CSSM_ALGID_FEED              = 2147483653
	CSSM_ALGID_FEEDEXP           = 2147483654
	CSSM_ALGID_FEE_MD5           = 2147483651
	CSSM_ALGID_FEE_SHA1          = 2147483652
	CSSM_ALGID_KEYCHAIN_KEY      = 2147483657
	CSSM_ALGID_OPENSSH1          = 2147483671
	CSSM_ALGID_PBE_OPENSSL_MD5   = 2147483661
	CSSM_ALGID_PKCS12_PBE_ENCR   = 2147483658
	CSSM_ALGID_PKCS12_PBE_MAC    = 2147483659
	CSSM_ALGID_SECURE_PASSPHRASE = 2147483660
	CSSM_ALGID_SHA1HMAC_LEGACY   = 2147483656
	CSSM_ALGID_SHA224            = 2147483666
	CSSM_ALGID_SHA224WithECDSA   = 2147483672
	CSSM_ALGID_SHA224WithRSA     = 2147483667
	CSSM_ALGID_SHA256            = 2147483662
	CSSM_ALGID_SHA256WithECDSA   = 2147483673
	CSSM_ALGID_SHA256WithRSA     = 2147483668
	CSSM_ALGID_SHA384            = 2147483663
	CSSM_ALGID_SHA384WithECDSA   = 2147483674
	CSSM_ALGID_SHA384WithRSA     = 2147483669
	CSSM_ALGID_SHA512            = 2147483664
	CSSM_ALGID_SHA512WithECDSA   = 2147483675
	CSSM_ALGID_SHA512WithRSA     = 2147483670
	CSSM_ALGID__FIRST_UNUSED     = 2147483678
)
View Source
const (
	CSSM_ALGID_3DES                = 77
	CSSM_ALGID_3DES_1KEY           = 20
	CSSM_ALGID_3DES_1KEY_EEE       = 19
	CSSM_ALGID_3DES_2KEY           = 18
	CSSM_ALGID_3DES_2KEY_EDE       = 18
	CSSM_ALGID_3DES_2KEY_EEE       = 21
	CSSM_ALGID_3DES_3KEY           = 17
	CSSM_ALGID_3DES_3KEY_EDE       = 17
	CSSM_ALGID_3DES_3KEY_EEE       = 20
	CSSM_ALGID_BATON               = 72
	CSSM_ALGID_BLOWFISH            = 28
	CSSM_ALGID_CAST                = 27
	CSSM_ALGID_CAST3               = 53
	CSSM_ALGID_CAST5               = 54
	CSSM_ALGID_CDMF                = 52
	CSSM_ALGID_CRAB                = 41
	CSSM_ALGID_CUSTOM              = 1
	CSSM_ALGID_ConcatBaseAndData   = 58
	CSSM_ALGID_ConcatBaseAndKey    = 56
	CSSM_ALGID_ConcatDataAndBase   = 59
	CSSM_ALGID_ConcatKeyAndBase    = 57
	CSSM_ALGID_DES                 = 14
	CSSM_ALGID_DESRandom           = 50
	CSSM_ALGID_DESX                = 15
	CSSM_ALGID_DH                  = 2
	CSSM_ALGID_DSA                 = 43
	CSSM_ALGID_DSA_BSAFE           = 83
	CSSM_ALGID_ECAES               = 90
	CSSM_ALGID_ECC                 = 93
	CSSM_ALGID_ECDH                = 84
	CSSM_ALGID_ECDSA               = 73
	CSSM_ALGID_ECES                = 89
	CSSM_ALGID_ECMQV               = 85
	CSSM_ALGID_ECNRA               = 87
	CSSM_ALGID_ElGamal             = 46
	CSSM_ALGID_ExtractFromKey      = 61
	CSSM_ALGID_FASTHASH            = 76
	CSSM_ALGID_FEAL                = 32
	CSSM_ALGID_FIPS186Random       = 92
	CSSM_ALGID_FortezzaTimestamp   = 80
	CSSM_ALGID_GOST                = 39
	CSSM_ALGID_GenericSecret       = 55
	CSSM_ALGID_HAVAL               = 10
	CSSM_ALGID_HAVAL3              = 98
	CSSM_ALGID_HAVAL4              = 99
	CSSM_ALGID_HAVAL5              = 100
	CSSM_ALGID_IBCHASH             = 12
	CSSM_ALGID_IDEA                = 22
	CSSM_ALGID_IntelPlatformRandom = 96
	CSSM_ALGID_JUNIPER             = 75
	CSSM_ALGID_KEA                 = 4
	CSSM_ALGID_KHAFRE              = 37
	CSSM_ALGID_KHUFU               = 36
	CSSM_ALGID_LAST                = 2147483647
	CSSM_ALGID_LOKI                = 35
	CSSM_ALGID_LUCIFER             = 30
	CSSM_ALGID_MADRYGA             = 31
	CSSM_ALGID_MAYFLY              = 74
	CSSM_ALGID_MD2                 = 5
	CSSM_ALGID_MD2Random           = 47
	CSSM_ALGID_MD2WithRSA          = 45
	CSSM_ALGID_MD4                 = 6
	CSSM_ALGID_MD5                 = 7
	CSSM_ALGID_MD5HMAC             = 102
	CSSM_ALGID_MD5Random           = 48
	CSSM_ALGID_MD5WithRSA          = 44
	CSSM_ALGID_MMB                 = 38
	CSSM_ALGID_MQV                 = 94
	CSSM_ALGID_NHASH               = 9
	CSSM_ALGID_NONE                = 0
	CSSM_ALGID_NRA                 = 95
	CSSM_ALGID_PH                  = 3
	CSSM_ALGID_PKCS12_SHA1_PBE     = 86
	CSSM_ALGID_PKCS5_PBKDF1_MD2    = 68
	CSSM_ALGID_PKCS5_PBKDF1_MD5    = 67
	CSSM_ALGID_PKCS5_PBKDF1_SHA1   = 69
	CSSM_ALGID_PKCS5_PBKDF2        = 103
	CSSM_ALGID_RC2                 = 23
	CSSM_ALGID_RC4                 = 25
	CSSM_ALGID_RC5                 = 24
	CSSM_ALGID_RDES                = 16
	CSSM_ALGID_REDOC               = 33
	CSSM_ALGID_REDOC3              = 34
	CSSM_ALGID_RIPEMAC             = 13
	CSSM_ALGID_RIPEMD              = 11
	CSSM_ALGID_RSA                 = 42
	CSSM_ALGID_RUNNING_COUNTER     = 104
	CSSM_ALGID_SAFER               = 40
	CSSM_ALGID_SEAL                = 26
	CSSM_ALGID_SHA1                = 8
	CSSM_ALGID_SHA1HMAC            = 91
	CSSM_ALGID_SHA1WithDSA         = 81
	CSSM_ALGID_SHA1WithECDSA       = 82
	CSSM_ALGID_SHA1WithECNRA       = 88
	CSSM_ALGID_SHA1WithRSA         = 51
	CSSM_ALGID_SHARandom           = 49
	CSSM_ALGID_SKIPJACK            = 29
	CSSM_ALGID_SSL3KeyAndMacDerive = 64
	CSSM_ALGID_SSL3MD5             = 78
	CSSM_ALGID_SSL3MD5_MAC         = 65
	CSSM_ALGID_SSL3MasterDerive    = 63
	CSSM_ALGID_SSL3PreMasterGen    = 62
	CSSM_ALGID_SSL3PrePrimaryGen   = 62
	CSSM_ALGID_SSL3PrimaryDerive   = 63
	CSSM_ALGID_SSL3SHA1            = 79
	CSSM_ALGID_SSL3SHA1_MAC        = 66
	CSSM_ALGID_TIGER               = 101
	CSSM_ALGID_UTC                 = 97
	CSSM_ALGID_VENDOR_DEFINED      = 2147483648
	CSSM_ALGID_WrapLynks           = 70
	CSSM_ALGID_WrapSET_OAEP        = 71
	CSSM_ALGID_XORBaseAndData      = 60
)
View Source
const (
	CSSM_ALGMODE_BC             = 14
	CSSM_ALGMODE_CBC            = 4
	CSSM_ALGMODE_CBC128         = 36
	CSSM_ALGMODE_CBC64          = 25
	CSSM_ALGMODE_CBCC           = 16
	CSSM_ALGMODE_CBCPD          = 20
	CSSM_ALGMODE_CBCPadIV8      = 6
	CSSM_ALGMODE_CBC_IV8        = 5
	CSSM_ALGMODE_CFB            = 7
	CSSM_ALGMODE_CFB16          = 29
	CSSM_ALGMODE_CFB32          = 28
	CSSM_ALGMODE_CFB8           = 30
	CSSM_ALGMODE_CFBPadIV8      = 9
	CSSM_ALGMODE_CFB_IV8        = 8
	CSSM_ALGMODE_COUNTER        = 13
	CSSM_ALGMODE_CUSTOM         = 1
	CSSM_ALGMODE_ECB            = 2
	CSSM_ALGMODE_ECB128         = 34
	CSSM_ALGMODE_ECB64          = 24
	CSSM_ALGMODE_ECB96          = 35
	CSSM_ALGMODE_ECBPad         = 3
	CSSM_ALGMODE_ISO_9796       = 41
	CSSM_ALGMODE_LAST           = 2147483647
	CSSM_ALGMODE_NONE           = 0
	CSSM_ALGMODE_OAEP_HASH      = 37
	CSSM_ALGMODE_OFB            = 10
	CSSM_ALGMODE_OFB64          = 26
	CSSM_ALGMODE_OFBNLF         = 17
	CSSM_ALGMODE_OFBPadIV8      = 12
	CSSM_ALGMODE_OFB_IV8        = 11
	CSSM_ALGMODE_PBC            = 18
	CSSM_ALGMODE_PCBC           = 15
	CSSM_ALGMODE_PFB            = 19
	CSSM_ALGMODE_PKCS1_EME_OAEP = 39
	CSSM_ALGMODE_PKCS1_EME_V15  = 38
	CSSM_ALGMODE_PKCS1_EMSA_V15 = 40
	CSSM_ALGMODE_PRIVATE_KEY    = 22
	CSSM_ALGMODE_PRIVATE_WRAP   = 32
	CSSM_ALGMODE_PUBLIC_KEY     = 21
	CSSM_ALGMODE_RELAYX         = 33
	CSSM_ALGMODE_SHUFFLE        = 23
	CSSM_ALGMODE_VENDOR_DEFINED = 2147483648
	CSSM_ALGMODE_WRAP           = 31
	CSSM_ALGMODE_X9_31          = 42
)
View Source
const (
	CSSM_APPLECSPDL_DB_CHANGE_PASSWORD = 5
	CSSM_APPLECSPDL_DB_GET_HANDLE      = 6
	CSSM_APPLECSPDL_DB_GET_SETTINGS    = 2
	CSSM_APPLECSPDL_DB_IS_LOCKED       = 4
	CSSM_APPLECSPDL_DB_LOCK            = 0
	CSSM_APPLECSPDL_DB_SET_SETTINGS    = 3
	CSSM_APPLECSPDL_DB_UNLOCK          = 1
	CSSM_APPLECSP_KEYDIGEST            = 256
	CSSM_APPLECSP_PUBKEY               = 257
	CSSM_APPLESCPDL_CSP_GET_KEYHANDLE  = 7
	CSSM_APPLE_PRIVATE_CSPDL_CODE_10   = 10
	CSSM_APPLE_PRIVATE_CSPDL_CODE_11   = 11
	CSSM_APPLE_PRIVATE_CSPDL_CODE_12   = 12
	CSSM_APPLE_PRIVATE_CSPDL_CODE_13   = 13
	CSSM_APPLE_PRIVATE_CSPDL_CODE_14   = 14
	CSSM_APPLE_PRIVATE_CSPDL_CODE_15   = 15
	CSSM_APPLE_PRIVATE_CSPDL_CODE_16   = 16
	CSSM_APPLE_PRIVATE_CSPDL_CODE_17   = 17
	CSSM_APPLE_PRIVATE_CSPDL_CODE_18   = 18
	CSSM_APPLE_PRIVATE_CSPDL_CODE_19   = 19
	CSSM_APPLE_PRIVATE_CSPDL_CODE_20   = 20
	CSSM_APPLE_PRIVATE_CSPDL_CODE_21   = 21
	CSSM_APPLE_PRIVATE_CSPDL_CODE_22   = 22
	CSSM_APPLE_PRIVATE_CSPDL_CODE_23   = 23
	CSSM_APPLE_PRIVATE_CSPDL_CODE_24   = 24
	CSSM_APPLE_PRIVATE_CSPDL_CODE_25   = 25
	CSSM_APPLE_PRIVATE_CSPDL_CODE_26   = 26
	CSSM_APPLE_PRIVATE_CSPDL_CODE_27   = 27
	CSSM_APPLE_PRIVATE_CSPDL_CODE_28   = 28
	CSSM_APPLE_PRIVATE_CSPDL_CODE_8    = 8
	CSSM_APPLE_PRIVATE_CSPDL_CODE_9    = 9
)
View Source
const (
	CSSM_APPLEFILEDL_COMMIT            = 1
	CSSM_APPLEFILEDL_DELETE_FILE       = 6
	CSSM_APPLEFILEDL_MAKE_BACKUP       = 4
	CSSM_APPLEFILEDL_MAKE_COPY         = 5
	CSSM_APPLEFILEDL_ROLLBACK          = 2
	CSSM_APPLEFILEDL_TAKE_FILE_LOCK    = 3
	CSSM_APPLEFILEDL_TOGGLE_AUTOCOMMIT = 0
)
View Source
const (
	CSSM_APPLEX509CL_OBTAIN_CSR = 0
	CSSM_APPLEX509CL_VERIFY_CSR = 1
)
View Source
const (
	CSSM_APPLE_UNLOCK_TYPE_KEYBAG          = 3
	CSSM_APPLE_UNLOCK_TYPE_KEY_DIRECT      = 1
	CSSM_APPLE_UNLOCK_TYPE_WRAPPED_PRIVATE = 2
)
View Source
const (
	CSSM_ASC_OPTIMIZE_ASCII     = 5
	CSSM_ASC_OPTIMIZE_DEFAULT   = 0
	CSSM_ASC_OPTIMIZE_SECURITY  = 2
	CSSM_ASC_OPTIMIZE_SIZE      = 1
	CSSM_ASC_OPTIMIZE_TIME      = 3
	CSSM_ASC_OPTIMIZE_TIME_SIZE = 4
)
View Source
const (
	CSSM_ATTRIBUTE_DATA_ACCESS_CREDENTIALS = 2147483648
	CSSM_ATTRIBUTE_DATA_CRYPTO_DATA        = 805306368
	CSSM_ATTRIBUTE_DATA_CSSM_DATA          = 536870912
	CSSM_ATTRIBUTE_DATA_DATE               = 1610612736
	CSSM_ATTRIBUTE_DATA_DL_DB_HANDLE       = 33554432
	CSSM_ATTRIBUTE_DATA_KEY                = 1073741824
	CSSM_ATTRIBUTE_DATA_KR_PROFILE         = 50331648
	CSSM_ATTRIBUTE_DATA_NONE               = 0
	CSSM_ATTRIBUTE_DATA_RANGE              = 1879048192
	CSSM_ATTRIBUTE_DATA_STRING             = 1342177280
	CSSM_ATTRIBUTE_DATA_UINT32             = 268435456
	CSSM_ATTRIBUTE_DATA_VERSION            = 16777216
	CSSM_ATTRIBUTE_TYPE_MASK               = 4278190080
)
View Source
const (
	CSSM_ATTRIBUTE_ACCESS_CREDENTIALS   = 2147483684
	CSSM_ATTRIBUTE_ALG_ID               = 268435485
	CSSM_ATTRIBUTE_ALG_PARAMS           = 536870928
	CSSM_ATTRIBUTE_BASE                 = 536870939
	CSSM_ATTRIBUTE_BLOCK_SIZE           = 268435468
	CSSM_ATTRIBUTE_CSP_HANDLE           = 268435490
	CSSM_ATTRIBUTE_CUSTOM               = 536870913
	CSSM_ATTRIBUTE_DESCRIPTION          = 1342177282
	CSSM_ATTRIBUTE_DL_DB_HANDLE         = 33554467
	CSSM_ATTRIBUTE_EFFECTIVE_BITS       = 268435476
	CSSM_ATTRIBUTE_END_DATE             = 1610612758
	CSSM_ATTRIBUTE_INIT_VECTOR          = 536870916
	CSSM_ATTRIBUTE_ITERATION_COUNT      = 268435486
	CSSM_ATTRIBUTE_IV_SIZE              = 268435471
	CSSM_ATTRIBUTE_KEY                  = 1073741827
	CSSM_ATTRIBUTE_KEYATTR              = 268435480
	CSSM_ATTRIBUTE_KEYUSAGE             = 268435479
	CSSM_ATTRIBUTE_KEY_LENGTH           = 268435466
	CSSM_ATTRIBUTE_KEY_LENGTH_RANGE     = 1879048203
	CSSM_ATTRIBUTE_KEY_TYPE             = 268435474
	CSSM_ATTRIBUTE_KRPROFILE_LOCAL      = 50331680
	CSSM_ATTRIBUTE_KRPROFILE_REMOTE     = 50331681
	CSSM_ATTRIBUTE_LABEL                = 536870929
	CSSM_ATTRIBUTE_MODE                 = 268435475
	CSSM_ATTRIBUTE_NONE                 = 0
	CSSM_ATTRIBUTE_OUTPUT_SIZE          = 268435469
	CSSM_ATTRIBUTE_PADDING              = 268435462
	CSSM_ATTRIBUTE_PASSPHRASE           = 805306377
	CSSM_ATTRIBUTE_PRIME                = 536870938
	CSSM_ATTRIBUTE_PRIVATE_KEY_FORMAT   = 268435494
	CSSM_ATTRIBUTE_PUBLIC_KEY_FORMAT    = 268435493
	CSSM_ATTRIBUTE_RANDOM               = 536870919
	CSSM_ATTRIBUTE_ROUNDS               = 268435470
	CSSM_ATTRIBUTE_ROUNDS_RANGE         = 1879048223
	CSSM_ATTRIBUTE_SALT                 = 536870917
	CSSM_ATTRIBUTE_SEED                 = 805306376
	CSSM_ATTRIBUTE_START_DATE           = 1610612757
	CSSM_ATTRIBUTE_SUBPRIME             = 536870940
	CSSM_ATTRIBUTE_SYMMETRIC_KEY_FORMAT = 268435495
	CSSM_ATTRIBUTE_VERSION              = 16777241
	CSSM_ATTRIBUTE_WRAPPED_KEY_FORMAT   = 268435496
)
View Source
const (
	CSSM_ATTRIBUTE_ALERT_TITLE       = 545259527
	CSSM_ATTRIBUTE_ASC_OPTIMIZATION  = 276824067
	CSSM_ATTRIBUTE_FEE_CURVE_TYPE    = 276824066
	CSSM_ATTRIBUTE_FEE_PRIME_TYPE    = 276824065
	CSSM_ATTRIBUTE_PARAM_KEY         = 1082130437
	CSSM_ATTRIBUTE_PROMPT            = 545259526
	CSSM_ATTRIBUTE_PUBLIC_KEY        = 1082130432
	CSSM_ATTRIBUTE_RSA_BLINDING      = 276824068
	CSSM_ATTRIBUTE_VERIFY_PASSPHRASE = 276824072
)
View Source
const (
	CSSM_AC_BASE_ERROR           = -2147405824
	CSSM_AC_PRIVATE_ERROR        = -2147404800
	CSSM_BASE_ERROR              = -2147418112
	CSSM_CL_BASE_ERROR           = -2147411968
	CSSM_CL_PRIVATE_ERROR        = -2147410944
	CSSM_CSP_BASE_ERROR          = -2147416064
	CSSM_CSP_PRIVATE_ERROR       = -2147415040
	CSSM_CSSM_BASE_ERROR         = -2147418112
	CSSM_CSSM_PRIVATE_ERROR      = -2147417088
	CSSM_DL_BASE_ERROR           = -2147414016
	CSSM_DL_PRIVATE_ERROR        = -2147412992
	CSSM_ERRORCODE_COMMON_EXTENT = 256
	CSSM_ERRORCODE_CUSTOM_OFFSET = 1024
	CSSM_ERRORCODE_MODULE_EXTENT = 2048
	CSSM_KR_BASE_ERROR           = -2147407872
	CSSM_KR_PRIVATE_ERROR        = -2147406848
	CSSM_TP_BASE_ERROR           = -2147409920
	CSSM_TP_PRIVATE_ERROR        = -2147408896
)
View Source
const (
	CSSM_CERTGROUP_CERT_PAIR    = 3
	CSSM_CERTGROUP_DATA         = 0
	CSSM_CERTGROUP_ENCODED_CERT = 1
	CSSM_CERTGROUP_PARSED_CERT  = 2
)
View Source
const (
	CSSM_CERT_BUNDLE_ENCODING_BER     = 2
	CSSM_CERT_BUNDLE_ENCODING_CUSTOM  = 1
	CSSM_CERT_BUNDLE_ENCODING_DER     = 3
	CSSM_CERT_BUNDLE_ENCODING_PGP     = 5
	CSSM_CERT_BUNDLE_ENCODING_SEXPR   = 4
	CSSM_CERT_BUNDLE_ENCODING_UNKNOWN = 0
)
View Source
const (
	CSSM_CERT_BUNDLE_CUSTOM                      = 1
	CSSM_CERT_BUNDLE_LAST                        = 32767
	CSSM_CERT_BUNDLE_PFX                         = 5
	CSSM_CERT_BUNDLE_PGP_KEYRING                 = 7
	CSSM_CERT_BUNDLE_PKCS12                      = 4
	CSSM_CERT_BUNDLE_PKCS7_SIGNED_DATA           = 2
	CSSM_CERT_BUNDLE_PKCS7_SIGNED_ENVELOPED_DATA = 3
	CSSM_CERT_BUNDLE_SPKI_SEQUENCE               = 6
	CSSM_CERT_BUNDLE_UNKNOWN                     = 0
	CSSM_CL_CUSTOM_CERT_BUNDLE_TYPE              = 32768
)
View Source
const (
	CSSM_CERT_ENCODING_BER       = 2
	CSSM_CERT_ENCODING_CUSTOM    = 1
	CSSM_CERT_ENCODING_DER       = 3
	CSSM_CERT_ENCODING_LAST      = 32767
	CSSM_CERT_ENCODING_MULTIPLE  = 32766
	CSSM_CERT_ENCODING_NDR       = 4
	CSSM_CERT_ENCODING_PGP       = 6
	CSSM_CERT_ENCODING_SEXPR     = 5
	CSSM_CERT_ENCODING_UNKNOWN   = 0
	CSSM_CL_CUSTOM_CERT_ENCODING = 32768
)
View Source
const (
	CSSM_CERT_PARSE_FORMAT_COMPLEX   = 3
	CSSM_CERT_PARSE_FORMAT_CUSTOM    = 1
	CSSM_CERT_PARSE_FORMAT_LAST      = 32767
	CSSM_CERT_PARSE_FORMAT_MULTIPLE  = 32766
	CSSM_CERT_PARSE_FORMAT_NONE      = 0
	CSSM_CERT_PARSE_FORMAT_OID_NAMED = 4
	CSSM_CERT_PARSE_FORMAT_SEXPR     = 2
	CSSM_CERT_PARSE_FORMAT_TUPLE     = 5
	CSSM_CL_CUSTOM_CERT_PARSE_FORMAT = 32768
)
View Source
const (
	CSSM_CERT_STATUS_EXPIRED                      = 1
	CSSM_CERT_STATUS_IS_FROM_NET                  = 32
	CSSM_CERT_STATUS_IS_IN_ANCHORS                = 8
	CSSM_CERT_STATUS_IS_IN_INPUT_CERTS            = 4
	CSSM_CERT_STATUS_IS_ROOT                      = 16
	CSSM_CERT_STATUS_NOT_VALID_YET                = 2
	CSSM_CERT_STATUS_TRUST_SETTINGS_DENY          = 1024
	CSSM_CERT_STATUS_TRUST_SETTINGS_FOUND_ADMIN   = 128
	CSSM_CERT_STATUS_TRUST_SETTINGS_FOUND_SYSTEM  = 256
	CSSM_CERT_STATUS_TRUST_SETTINGS_FOUND_USER    = 64
	CSSM_CERT_STATUS_TRUST_SETTINGS_IGNORED_ERROR = 2048
	CSSM_CERT_STATUS_TRUST_SETTINGS_TRUST         = 512
)
View Source
const (
	CSSM_CERT_ACL_ENTRY       = 12
	CSSM_CERT_Intel           = 8
	CSSM_CERT_LAST            = 32767
	CSSM_CERT_MULTIPLE        = 32766
	CSSM_CERT_PGP             = 4
	CSSM_CERT_SDSIv1          = 6
	CSSM_CERT_SPKI            = 5
	CSSM_CERT_TUPLE           = 11
	CSSM_CERT_UNKNOWN         = 0
	CSSM_CERT_X9_ATTRIBUTE    = 10
	CSSM_CERT_X_509_ATTRIBUTE = 9
	CSSM_CERT_X_509v1         = 1
	CSSM_CERT_X_509v2         = 2
	CSSM_CERT_X_509v3         = 3
	CSSM_CL_CUSTOM_CERT_TYPE  = 32768
)
View Source
const (
	CSSMERR_CL_INVALID_BUNDLE_INFO    = -2147411708
	CSSMERR_CL_INVALID_BUNDLE_POINTER = -2147411711
	CSSMERR_CL_INVALID_CACHE_HANDLE   = -2147411710
	CSSMERR_CL_INVALID_CRL_INDEX      = -2147411707
	CSSMERR_CL_INVALID_RESULTS_HANDLE = -2147411709
	CSSMERR_CL_INVALID_SCOPE          = -2147411706
	CSSMERR_CL_NO_FIELD_VALUES        = -2147411705
	CSSMERR_CL_SCOPE_NOT_SUPPORTED    = -2147411704
	CSSM_CL_BASE_CL_ERROR             = -2147411712
)
View Source
const (
	CSSM_CL_TEMPLATE_INTERMEDIATE_CERT = 1
	CSSM_CL_TEMPLATE_PKIX_CERTTEMPLATE = 2
)
View Source
const (
	CSSM_CONTEXT_EVENT_CREATE = 1
	CSSM_CONTEXT_EVENT_DELETE = 2
	CSSM_CONTEXT_EVENT_UPDATE = 3
)
View Source
const (
	CSSM_CRLGROUP_CRL_PAIR    = 3
	CSSM_CRLGROUP_DATA        = 0
	CSSM_CRLGROUP_ENCODED_CRL = 1
	CSSM_CRLGROUP_PARSED_CRL  = 2
)
View Source
const (
	CSSM_CRL_ENCODING_BER      = 2
	CSSM_CRL_ENCODING_BLOOM    = 4
	CSSM_CRL_ENCODING_CUSTOM   = 1
	CSSM_CRL_ENCODING_DER      = 3
	CSSM_CRL_ENCODING_MULTIPLE = 32766
	CSSM_CRL_ENCODING_SEXPR    = 5
	CSSM_CRL_ENCODING_UNKNOWN  = 0
)
View Source
const (
	CSSM_CL_CUSTOM_CRL_PARSE_FORMAT = 32768
	CSSM_CRL_PARSE_FORMAT_COMPLEX   = 3
	CSSM_CRL_PARSE_FORMAT_CUSTOM    = 1
	CSSM_CRL_PARSE_FORMAT_LAST      = 32767
	CSSM_CRL_PARSE_FORMAT_MULTIPLE  = 32766
	CSSM_CRL_PARSE_FORMAT_NONE      = 0
	CSSM_CRL_PARSE_FORMAT_OID_NAMED = 4
	CSSM_CRL_PARSE_FORMAT_SEXPR     = 2
	CSSM_CRL_PARSE_FORMAT_TUPLE     = 5
)
View Source
const (
	CSSM_CRL_TYPE_MULTIPLE = 32766
	CSSM_CRL_TYPE_SPKI     = 3
	CSSM_CRL_TYPE_UNKNOWN  = 0
	CSSM_CRL_TYPE_X_509v1  = 1
	CSSM_CRL_TYPE_X_509v2  = 2
)
View Source
const (
	CSSMERR_CSP_ALGID_MISMATCH                    = -2147415789
	CSSMERR_CSP_ALREADY_LOGGED_IN                 = -2147415726
	CSSMERR_CSP_ATTACH_HANDLE_BUSY                = -2147415802
	CSSMERR_CSP_BLOCK_SIZE_MISMATCH               = -2147415731
	CSSMERR_CSP_CRYPTO_DATA_CALLBACK_FAILED       = -2147415722
	CSSMERR_CSP_DEVICE_ERROR                      = -2147415804
	CSSMERR_CSP_DEVICE_MEMORY_ERROR               = -2147415803
	CSSMERR_CSP_DEVICE_VERIFY_FAILED              = -2147415728
	CSSMERR_CSP_INPUT_LENGTH_ERROR                = -2147415807
	CSSMERR_CSP_INVALID_ALGORITHM                 = -2147415759
	CSSMERR_CSP_INVALID_ATTR_ACCESS_CREDENTIALS   = -2147415678
	CSSMERR_CSP_INVALID_ATTR_ALG_PARAMS           = -2147415704
	CSSMERR_CSP_INVALID_ATTR_BASE                 = -2147415686
	CSSMERR_CSP_INVALID_ATTR_BLOCK_SIZE           = -2147415738
	CSSMERR_CSP_INVALID_ATTR_DL_DB_HANDLE         = -2147415680
	CSSMERR_CSP_INVALID_ATTR_EFFECTIVE_BITS       = -2147415696
	CSSMERR_CSP_INVALID_ATTR_END_DATE             = -2147415692
	CSSMERR_CSP_INVALID_ATTR_INIT_VECTOR          = -2147415752
	CSSMERR_CSP_INVALID_ATTR_ITERATION_COUNT      = -2147415682
	CSSMERR_CSP_INVALID_ATTR_KEY                  = -2147415754
	CSSMERR_CSP_INVALID_ATTR_KEY_LENGTH           = -2147415740
	CSSMERR_CSP_INVALID_ATTR_KEY_TYPE             = -2147415700
	CSSMERR_CSP_INVALID_ATTR_LABEL                = -2147415702
	CSSMERR_CSP_INVALID_ATTR_MODE                 = -2147415698
	CSSMERR_CSP_INVALID_ATTR_OUTPUT_SIZE          = -2147415708
	CSSMERR_CSP_INVALID_ATTR_PADDING              = -2147415748
	CSSMERR_CSP_INVALID_ATTR_PASSPHRASE           = -2147415742
	CSSMERR_CSP_INVALID_ATTR_PRIME                = -2147415688
	CSSMERR_CSP_INVALID_ATTR_PRIVATE_KEY_FORMAT   = -2147415674
	CSSMERR_CSP_INVALID_ATTR_PUBLIC_KEY_FORMAT    = -2147415676
	CSSMERR_CSP_INVALID_ATTR_RANDOM               = -2147415746
	CSSMERR_CSP_INVALID_ATTR_ROUNDS               = -2147415706
	CSSMERR_CSP_INVALID_ATTR_SALT                 = -2147415750
	CSSMERR_CSP_INVALID_ATTR_SEED                 = -2147415744
	CSSMERR_CSP_INVALID_ATTR_START_DATE           = -2147415694
	CSSMERR_CSP_INVALID_ATTR_SUBPRIME             = -2147415684
	CSSMERR_CSP_INVALID_ATTR_SYMMETRIC_KEY_FORMAT = -2147415672
	CSSMERR_CSP_INVALID_ATTR_VERSION              = -2147415690
	CSSMERR_CSP_INVALID_ATTR_WRAPPED_KEY_FORMAT   = -2147415670
	CSSMERR_CSP_INVALID_CONTEXT                   = -2147415760
	CSSMERR_CSP_INVALID_DATA_COUNT                = -2147415768
	CSSMERR_CSP_INVALID_DIGEST_ALGORITHM          = -2147415723
	CSSMERR_CSP_INVALID_INPUT_VECTOR              = -2147415766
	CSSMERR_CSP_INVALID_KEY                       = -2147415792
	CSSMERR_CSP_INVALID_KEYATTR_MASK              = -2147415780
	CSSMERR_CSP_INVALID_KEYUSAGE_MASK             = -2147415782
	CSSMERR_CSP_INVALID_KEY_CLASS                 = -2147415790
	CSSMERR_CSP_INVALID_KEY_FORMAT                = -2147415776
	CSSMERR_CSP_INVALID_KEY_LABEL                 = -2147415778
	CSSMERR_CSP_INVALID_KEY_POINTER               = -2147415783
	CSSMERR_CSP_INVALID_KEY_REFERENCE             = -2147415791
	CSSMERR_CSP_INVALID_LOGIN_NAME                = -2147415727
	CSSMERR_CSP_INVALID_OUTPUT_VECTOR             = -2147415765
	CSSMERR_CSP_INVALID_SIGNATURE                 = -2147415733
	CSSMERR_CSP_KEY_BLOB_TYPE_INCORRECT           = -2147415787
	CSSMERR_CSP_KEY_HEADER_INCONSISTENT           = -2147415786
	CSSMERR_CSP_KEY_LABEL_ALREADY_EXISTS          = -2147415724
	CSSMERR_CSP_KEY_USAGE_INCORRECT               = -2147415788
	CSSMERR_CSP_MISSING_ATTR_ACCESS_CREDENTIALS   = -2147415677
	CSSMERR_CSP_MISSING_ATTR_ALG_PARAMS           = -2147415703
	CSSMERR_CSP_MISSING_ATTR_BASE                 = -2147415685
	CSSMERR_CSP_MISSING_ATTR_BLOCK_SIZE           = -2147415737
	CSSMERR_CSP_MISSING_ATTR_DL_DB_HANDLE         = -2147415679
	CSSMERR_CSP_MISSING_ATTR_EFFECTIVE_BITS       = -2147415695
	CSSMERR_CSP_MISSING_ATTR_END_DATE             = -2147415691
	CSSMERR_CSP_MISSING_ATTR_INIT_VECTOR          = -2147415751
	CSSMERR_CSP_MISSING_ATTR_ITERATION_COUNT      = -2147415681
	CSSMERR_CSP_MISSING_ATTR_KEY                  = -2147415753
	CSSMERR_CSP_MISSING_ATTR_KEY_LENGTH           = -2147415739
	CSSMERR_CSP_MISSING_ATTR_KEY_TYPE             = -2147415699
	CSSMERR_CSP_MISSING_ATTR_LABEL                = -2147415701
	CSSMERR_CSP_MISSING_ATTR_MODE                 = -2147415697
	CSSMERR_CSP_MISSING_ATTR_OUTPUT_SIZE          = -2147415707
	CSSMERR_CSP_MISSING_ATTR_PADDING              = -2147415747
	CSSMERR_CSP_MISSING_ATTR_PASSPHRASE           = -2147415741
	CSSMERR_CSP_MISSING_ATTR_PRIME                = -2147415687
	CSSMERR_CSP_MISSING_ATTR_PRIVATE_KEY_FORMAT   = -2147415673
	CSSMERR_CSP_MISSING_ATTR_PUBLIC_KEY_FORMAT    = -2147415675
	CSSMERR_CSP_MISSING_ATTR_RANDOM               = -2147415745
	CSSMERR_CSP_MISSING_ATTR_ROUNDS               = -2147415705
	CSSMERR_CSP_MISSING_ATTR_SALT                 = -2147415749
	CSSMERR_CSP_MISSING_ATTR_SEED                 = -2147415743
	CSSMERR_CSP_MISSING_ATTR_START_DATE           = -2147415693
	CSSMERR_CSP_MISSING_ATTR_SUBPRIME             = -2147415683
	CSSMERR_CSP_MISSING_ATTR_SYMMETRIC_KEY_FORMAT = -2147415671
	CSSMERR_CSP_MISSING_ATTR_VERSION              = -2147415689
	CSSMERR_CSP_MISSING_ATTR_WRAPPED_KEY_FORMAT   = -2147415669
	CSSMERR_CSP_NOT_LOGGED_IN                     = -2147415801
	CSSMERR_CSP_OUTPUT_LENGTH_ERROR               = -2147415806
	CSSMERR_CSP_PRIVATE_KEY_ALREADY_EXISTS        = -2147415725
	CSSMERR_CSP_PRIVATE_KEY_NOT_FOUND             = -2147415730
	CSSMERR_CSP_PRIVILEGE_NOT_SUPPORTED           = -2147415805
	CSSMERR_CSP_PUBLIC_KEY_INCONSISTENT           = -2147415729
	CSSMERR_CSP_QUERY_SIZE_UNKNOWN                = -2147415732
	CSSMERR_CSP_STAGED_OPERATION_IN_PROGRESS      = -2147415736
	CSSMERR_CSP_STAGED_OPERATION_NOT_STARTED      = -2147415735
	CSSMERR_CSP_UNSUPPORTED_KEYATTR_MASK          = -2147415779
	CSSMERR_CSP_UNSUPPORTED_KEYUSAGE_MASK         = -2147415781
	CSSMERR_CSP_UNSUPPORTED_KEY_FORMAT            = -2147415785
	CSSMERR_CSP_UNSUPPORTED_KEY_LABEL             = -2147415777
	CSSMERR_CSP_UNSUPPORTED_KEY_SIZE              = -2147415784
	CSSMERR_CSP_VECTOR_OF_BUFS_UNSUPPORTED        = -2147415767
	CSSMERR_CSP_VERIFY_FAILED                     = -2147415734
	CSSM_CSP_BASE_CSP_ERROR                       = -2147415808
)
View Source
const (
	CSSM_CSP_RDR_EXISTS       = 2
	CSSM_CSP_RDR_HW           = 4
	CSSM_CSP_RDR_TOKENPRESENT = 1
)
View Source
const (
	CSSM_CSP_HARDWARE = 2
	CSSM_CSP_HYBRID   = 3
	CSSM_CSP_SOFTWARE = 1
)
View Source
const (
	CSSM_CSP_TOK_CLOCK_EXISTS = 64
	CSSM_CSP_TOK_RNG          = 1
)
View Source
const (
	CSSM_CSP_STORES_CERTIFICATES      = 134217728
	CSSM_CSP_STORES_GENERIC           = 268435456
	CSSM_CSP_STORES_PRIVATE_KEYS      = 16777216
	CSSM_CSP_STORES_PUBLIC_KEYS       = 33554432
	CSSM_CSP_STORES_SESSION_KEYS      = 67108864
	CSSM_CSP_TOK_LOGIN_REQUIRED       = 4
	CSSM_CSP_TOK_PRIVATE_KEY_PASSWORD = 4194304
	CSSM_CSP_TOK_PROT_AUTHENTICATION  = 256
	CSSM_CSP_TOK_SESSION_KEY_PASSWORD = 2097152
	CSSM_CSP_TOK_USER_PIN_EXPIRED     = 1048576
	CSSM_CSP_TOK_USER_PIN_INITIALIZED = 8
	CSSM_CSP_TOK_WRITE_PROTECTED      = 2
)
View Source
const (
	CSSMERR_CSSM_ADDIN_AUTHENTICATE_FAILED             = -2147417828
	CSSMERR_CSSM_ADDIN_LOAD_FAILED                     = -2147417834
	CSSMERR_CSSM_ADDIN_UNLOAD_FAILED                   = -2147417832
	CSSMERR_CSSM_ATTRIBUTE_NOT_IN_CONTEXT              = -2147417822
	CSSMERR_CSSM_BUFFER_TOO_SMALL                      = -2147417824
	CSSMERR_CSSM_EMM_AUTHENTICATE_FAILED               = -2147417829
	CSSMERR_CSSM_EMM_LOAD_FAILED                       = -2147417836
	CSSMERR_CSSM_EMM_UNLOAD_FAILED                     = -2147417835
	CSSMERR_CSSM_EVENT_NOTIFICATION_CALLBACK_NOT_FOUND = -2147417819
	CSSMERR_CSSM_INVALID_ADDIN_FUNCTION_TABLE          = -2147417830
	CSSMERR_CSSM_INVALID_ATTRIBUTE                     = -2147417823
	CSSMERR_CSSM_INVALID_KEY_HIERARCHY                 = -2147417833
	CSSMERR_CSSM_INVALID_PVC                           = -2147417837
	CSSMERR_CSSM_INVALID_SERVICE_MASK                  = -2147417827
	CSSMERR_CSSM_INVALID_SUBSERVICEID                  = -2147417825
	CSSMERR_CSSM_LIB_REF_NOT_FOUND                     = -2147417831
	CSSMERR_CSSM_MODULE_MANAGER_INITIALIZE_FAIL        = -2147417821
	CSSMERR_CSSM_MODULE_MANAGER_NOT_FOUND              = -2147417820
	CSSMERR_CSSM_MODULE_NOT_LOADED                     = -2147417826
	CSSMERR_CSSM_PVC_ALREADY_CONFIGURED                = -2147417838
	CSSMERR_CSSM_SCOPE_NOT_SUPPORTED                   = -2147417839
	CSSM_CSSM_BASE_CSSM_ERROR                          = -2147417840
)
View Source
const (
	CSSM_CUSTOM_COMMON_ERROR_EXTENT                 = 224
	CSSM_ERRCODE_DEVICE_FAILED                      = 229
	CSSM_ERRCODE_DEVICE_RESET                       = 228
	CSSM_ERRCODE_INSUFFICIENT_CLIENT_IDENTIFICATION = 227
	CSSM_ERRCODE_IN_DARK_WAKE                       = 230
	CSSM_ERRCODE_NO_USER_INTERACTION                = 224
	CSSM_ERRCODE_SERVICE_NOT_AVAILABLE              = 226
	CSSM_ERRCODE_USER_CANCELED                      = 225
)
View Source
const (
	CSSM_DB_ACCESS_PRIVILEGED = 4
	CSSM_DB_ACCESS_READ       = 1
	CSSM_DB_ACCESS_WRITE      = 2
)
View Source
const (
	CSSM_DB_ATTRIBUTE_FORMAT_BIG_NUM      = 3
	CSSM_DB_ATTRIBUTE_FORMAT_BLOB         = 6
	CSSM_DB_ATTRIBUTE_FORMAT_COMPLEX      = 8
	CSSM_DB_ATTRIBUTE_FORMAT_MULTI_UINT32 = 7
	CSSM_DB_ATTRIBUTE_FORMAT_REAL         = 4
	CSSM_DB_ATTRIBUTE_FORMAT_SINT32       = 1
	CSSM_DB_ATTRIBUTE_FORMAT_STRING       = 0
	CSSM_DB_ATTRIBUTE_FORMAT_TIME_DATE    = 5
	CSSM_DB_ATTRIBUTE_FORMAT_UINT32       = 2
)
View Source
const (
	CSSM_DB_ATTRIBUTE_NAME_AS_INTEGER = 2
	CSSM_DB_ATTRIBUTE_NAME_AS_OID     = 1
	CSSM_DB_ATTRIBUTE_NAME_AS_STRING  = 0
)
View Source
const (
	CSSM_DB_CERT_USE_OWNER   = 4
	CSSM_DB_CERT_USE_PRIVACY = 32
	CSSM_DB_CERT_USE_REVOKED = 8
	CSSM_DB_CERT_USE_SIGNING = 16
	CSSM_DB_CERT_USE_SYSTEM  = 2
	CSSM_DB_CERT_USE_TRUSTED = 1
)
View Source
const (
	CSSM_DB_CONTAINS                   = 4
	CSSM_DB_CONTAINS_FINAL_SUBSTRING   = 6
	CSSM_DB_CONTAINS_INITIAL_SUBSTRING = 5
	CSSM_DB_EQUAL                      = 0
	CSSM_DB_GREATER_THAN               = 3
	CSSM_DB_LESS_THAN                  = 2
	CSSM_DB_NOT_EQUAL                  = 1
)
View Source
const (
	CSSM_DB_INDEX_ON_ATTRIBUTE = 1
	CSSM_DB_INDEX_ON_RECORD    = 2
	CSSM_DB_INDEX_ON_UNKNOWN   = 0
)
View Source
const (
	CSSM_DB_INDEX_NONUNIQUE = 1
	CSSM_DB_INDEX_UNIQUE    = 0
)
View Source
const (
	CSSM_DB_MODIFY_ATTRIBUTE_ADD     = 1
	CSSM_DB_MODIFY_ATTRIBUTE_DELETE  = 2
	CSSM_DB_MODIFY_ATTRIBUTE_NONE    = 0
	CSSM_DB_MODIFY_ATTRIBUTE_REPLACE = 3
)
View Source
const (
	CSSM_DB_AND  = 1
	CSSM_DB_NONE = 0
	CSSM_DB_OR   = 2
)
View Source
const (
	CSSM_DB_RECORDTYPE_APP_DEFINED_END   = 4294967295
	CSSM_DB_RECORDTYPE_APP_DEFINED_START = 2147483648
	CSSM_DB_RECORDTYPE_OPEN_GROUP_END    = 18
	CSSM_DB_RECORDTYPE_OPEN_GROUP_START  = 10
	CSSM_DB_RECORDTYPE_SCHEMA_END        = 4
	CSSM_DB_RECORDTYPE_SCHEMA_START      = 0
	CSSM_DL_DB_RECORD_ALL_KEYS           = 18
	CSSM_DL_DB_RECORD_ANY                = 10
	CSSM_DL_DB_RECORD_CERT               = 11
	CSSM_DL_DB_RECORD_CRL                = 12
	CSSM_DL_DB_RECORD_GENERIC            = 14
	CSSM_DL_DB_RECORD_POLICY             = 13
	CSSM_DL_DB_RECORD_PRIVATE_KEY        = 16
	CSSM_DL_DB_RECORD_PUBLIC_KEY         = 15
	CSSM_DL_DB_RECORD_SYMMETRIC_KEY      = 17
	CSSM_DL_DB_SCHEMA_ATTRIBUTES         = 2
	CSSM_DL_DB_SCHEMA_INDEXES            = 1
	CSSM_DL_DB_SCHEMA_INFO               = 0
	CSSM_DL_DB_SCHEMA_PARSING_MODULE     = 3
)
View Source
const (
	CSSM_DB_FILESYSTEMSCAN_MODE = 1
	CSSM_DB_TRANSACTIONAL_MODE  = 0
)
View Source
const (
	CSSMERR_DL_DATABASE_CORRUPT                = -2147413759
	CSSMERR_DL_DATASTORE_ALREADY_EXISTS        = -2147413736
	CSSMERR_DL_DATASTORE_DOESNOT_EXIST         = -2147413737
	CSSMERR_DL_DATASTORE_IS_OPEN               = -2147413734
	CSSMERR_DL_DB_LOCKED                       = -2147413735
	CSSMERR_DL_ENDOFDATA                       = -2147413715
	CSSMERR_DL_FIELD_SPECIFIED_MULTIPLE        = -2147413742
	CSSMERR_DL_INCOMPATIBLE_FIELD_FORMAT       = -2147413741
	CSSMERR_DL_INVALID_ACCESS_REQUEST          = -2147413724
	CSSMERR_DL_INVALID_DB_LOCATION             = -2147413725
	CSSMERR_DL_INVALID_DB_NAME                 = -2147413738
	CSSMERR_DL_INVALID_FIELD_NAME              = -2147413750
	CSSMERR_DL_INVALID_INDEX_INFO              = -2147413723
	CSSMERR_DL_INVALID_MODIFY_MODE             = -2147413718
	CSSMERR_DL_INVALID_NEW_OWNER               = -2147413721
	CSSMERR_DL_INVALID_OPEN_PARAMETERS         = -2147413717
	CSSMERR_DL_INVALID_PARSING_MODULE          = -2147413740
	CSSMERR_DL_INVALID_QUERY                   = -2147413714
	CSSMERR_DL_INVALID_RECORDTYPE              = -2147413751
	CSSMERR_DL_INVALID_RECORD_INDEX            = -2147413752
	CSSMERR_DL_INVALID_RECORD_UID              = -2147413720
	CSSMERR_DL_INVALID_RESULTS_HANDLE          = -2147413726
	CSSMERR_DL_INVALID_SELECTION_TAG           = -2147413722
	CSSMERR_DL_INVALID_UNIQUE_INDEX_DATA       = -2147413719
	CSSMERR_DL_INVALID_VALUE                   = -2147413713
	CSSMERR_DL_MISSING_VALUE                   = -2147413732
	CSSMERR_DL_MULTIPLE_VALUES_UNSUPPORTED     = -2147413712
	CSSMERR_DL_RECORD_MODIFIED                 = -2147413716
	CSSMERR_DL_RECORD_NOT_FOUND                = -2147413733
	CSSMERR_DL_STALE_UNIQUE_RECORD             = -2147413711
	CSSMERR_DL_UNSUPPORTED_FIELD_FORMAT        = -2147413749
	CSSMERR_DL_UNSUPPORTED_INDEX_INFO          = -2147413748
	CSSMERR_DL_UNSUPPORTED_LOCALITY            = -2147413747
	CSSMERR_DL_UNSUPPORTED_NUM_ATTRIBUTES      = -2147413746
	CSSMERR_DL_UNSUPPORTED_NUM_INDEXES         = -2147413745
	CSSMERR_DL_UNSUPPORTED_NUM_RECORDTYPES     = -2147413744
	CSSMERR_DL_UNSUPPORTED_NUM_SELECTION_PREDS = -2147413729
	CSSMERR_DL_UNSUPPORTED_OPERATOR            = -2147413727
	CSSMERR_DL_UNSUPPORTED_QUERY               = -2147413731
	CSSMERR_DL_UNSUPPORTED_QUERY_LIMITS        = -2147413730
	CSSMERR_DL_UNSUPPORTED_RECORDTYPE          = -2147413743
	CSSM_DL_BASE_DL_ERROR                      = -2147413760
)
View Source
const (
	CSSM_DL_DB_RECORD_APPLESHARE_PASSWORD = 2147483650
	CSSM_DL_DB_RECORD_EXTENDED_ATTRIBUTE  = 2147487748
	CSSM_DL_DB_RECORD_GENERIC_PASSWORD    = 2147483648
	CSSM_DL_DB_RECORD_INTERNET_PASSWORD   = 2147483649
	CSSM_DL_DB_RECORD_METADATA            = 2147516416
	CSSM_DL_DB_RECORD_UNLOCK_REFERRAL     = 2147487747
	CSSM_DL_DB_RECORD_USER_TRUST          = 2147487745
	CSSM_DL_DB_RECORD_X509_CERTIFICATE    = 2147487744
	CSSM_DL_DB_RECORD_X509_CRL            = 2147487746
)
View Source
const (
	CSSM_DL_CUSTOM    = 1
	CSSM_DL_FFS       = 5
	CSSM_DL_LDAP      = 2
	CSSM_DL_MEMORY    = 6
	CSSM_DL_ODBC      = 3
	CSSM_DL_PKCS11    = 4
	CSSM_DL_REMOTEDIR = 7
	CSSM_DL_UNKNOWN   = 0
)
View Source
const (
	CSSM_ELAPSED_TIME_COMPLETE = -2
	CSSM_ELAPSED_TIME_UNKNOWN  = -1
)
View Source
const (
	CSSM_ERRCODE_FUNCTION_FAILED               = 10
	CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED      = 7
	CSSM_ERRCODE_INTERNAL_ERROR                = 1
	CSSM_ERRCODE_INVALID_GUID                  = 12
	CSSM_ERRCODE_INVALID_INPUT_POINTER         = 5
	CSSM_ERRCODE_INVALID_OUTPUT_POINTER        = 6
	CSSM_ERRCODE_INVALID_POINTER               = 4
	CSSM_ERRCODE_MDS_ERROR                     = 3
	CSSM_ERRCODE_MEMORY_ERROR                  = 2
	CSSM_ERRCODE_MODULE_MANIFEST_VERIFY_FAILED = 11
	CSSM_ERRCODE_OS_ACCESS_DENIED              = 9
	CSSM_ERRCODE_SELF_CHECK_FAILED             = 8
)
View Source
const (
	CSSM_ERRCODE_CRL_ALREADY_SIGNED        = 71
	CSSM_ERRCODE_INCOMPATIBLE_VERSION      = 65
	CSSM_ERRCODE_INVALID_AC_HANDLE         = 85
	CSSM_ERRCODE_INVALID_CERTGROUP_POINTER = 66
	CSSM_ERRCODE_INVALID_CERT_POINTER      = 67
	CSSM_ERRCODE_INVALID_CL_HANDLE         = 82
	CSSM_ERRCODE_INVALID_CONTEXT_HANDLE    = 64
	CSSM_ERRCODE_INVALID_CRL_POINTER       = 68
	CSSM_ERRCODE_INVALID_CRYPTO_DATA       = 88
	CSSM_ERRCODE_INVALID_CSP_HANDLE        = 80
	CSSM_ERRCODE_INVALID_DATA              = 70
	CSSM_ERRCODE_INVALID_DB_HANDLE         = 74
	CSSM_ERRCODE_INVALID_DB_LIST           = 76
	CSSM_ERRCODE_INVALID_DB_LIST_POINTER   = 77
	CSSM_ERRCODE_INVALID_DL_HANDLE         = 81
	CSSM_ERRCODE_INVALID_FIELD_POINTER     = 69
	CSSM_ERRCODE_INVALID_KR_HANDLE         = 84
	CSSM_ERRCODE_INVALID_NETWORK_ADDR      = 87
	CSSM_ERRCODE_INVALID_NUMBER_OF_FIELDS  = 72
	CSSM_ERRCODE_INVALID_PASSTHROUGH_ID    = 86
	CSSM_ERRCODE_INVALID_TP_HANDLE         = 83
	CSSM_ERRCODE_PRIVILEGE_NOT_GRANTED     = 75
	CSSM_ERRCODE_UNKNOWN_FORMAT            = 78
	CSSM_ERRCODE_UNKNOWN_TAG               = 79
	CSSM_ERRCODE_VERIFICATION_FAILURE      = 73
)
View Source
const (
	CSSM_ERRCODE_ACL_ADD_FAILED                 = 54
	CSSM_ERRCODE_ACL_BASE_CERTS_NOT_SUPPORTED   = 39
	CSSM_ERRCODE_ACL_CHALLENGE_CALLBACK_FAILED  = 45
	CSSM_ERRCODE_ACL_CHANGE_FAILED              = 49
	CSSM_ERRCODE_ACL_DELETE_FAILED              = 52
	CSSM_ERRCODE_ACL_ENTRY_TAG_NOT_FOUND        = 47
	CSSM_ERRCODE_ACL_REPLACE_FAILED             = 53
	CSSM_ERRCODE_ACL_SUBJECT_TYPE_NOT_SUPPORTED = 43
	CSSM_ERRCODE_INVALID_ACCESS_CREDENTIALS     = 37
	CSSM_ERRCODE_INVALID_ACL_BASE_CERTS         = 38
	CSSM_ERRCODE_INVALID_ACL_CHALLENGE_CALLBACK = 44
	CSSM_ERRCODE_INVALID_ACL_EDIT_MODE          = 48
	CSSM_ERRCODE_INVALID_ACL_ENTRY_TAG          = 46
	CSSM_ERRCODE_INVALID_ACL_SUBJECT_VALUE      = 42
	CSSM_ERRCODE_INVALID_NEW_ACL_ENTRY          = 50
	CSSM_ERRCODE_INVALID_NEW_ACL_OWNER          = 51
	CSSM_ERRCODE_INVALID_SAMPLE_VALUE           = 40
	CSSM_ERRCODE_OBJECT_ACL_NOT_SUPPORTED       = 35
	CSSM_ERRCODE_OBJECT_ACL_REQUIRED            = 36
	CSSM_ERRCODE_OBJECT_MANIP_AUTH_DENIED       = 34
	CSSM_ERRCODE_OBJECT_USE_AUTH_DENIED         = 33
	CSSM_ERRCODE_OPERATION_AUTH_DENIED          = 32
	CSSM_ERRCODE_SAMPLE_VALUE_NOT_SUPPORTED     = 41
)
View Source
const (
	CSSM_EVIDENCE_FORM_APPLE_CERTGROUP = 2147483649
	CSSM_EVIDENCE_FORM_APPLE_CERT_INFO = 2147483650
	CSSM_EVIDENCE_FORM_APPLE_HEADER    = 2147483648
)
View Source
const (
	CSSM_EVIDENCE_FORM_CERT          = 1
	CSSM_EVIDENCE_FORM_CERT_ID       = 3
	CSSM_EVIDENCE_FORM_CRL           = 2
	CSSM_EVIDENCE_FORM_CRL_ID        = 4
	CSSM_EVIDENCE_FORM_CRL_NEXTTIME  = 7
	CSSM_EVIDENCE_FORM_CRL_THISTIME  = 6
	CSSM_EVIDENCE_FORM_POLICYINFO    = 8
	CSSM_EVIDENCE_FORM_TUPLEGROUP    = 9
	CSSM_EVIDENCE_FORM_UNSPECIFIC    = 0
	CSSM_EVIDENCE_FORM_VERIFIER_TIME = 5
)
View Source
const (
	CSSM_FALSE = 0
	CSSM_TRUE  = 1
)
View Source
const (
	CSSM_FEE_CURVE_TYPE_ANSI_X9_62  = 3
	CSSM_FEE_CURVE_TYPE_DEFAULT     = 0
	CSSM_FEE_CURVE_TYPE_MONTGOMERY  = 1
	CSSM_FEE_CURVE_TYPE_WEIERSTRASS = 2
)
View Source
const (
	CSSM_FEE_PRIME_TYPE_DEFAULT  = 0
	CSSM_FEE_PRIME_TYPE_FEE      = 2
	CSSM_FEE_PRIME_TYPE_GENERAL  = 3
	CSSM_FEE_PRIME_TYPE_MERSENNE = 1
)
View Source
const (
	CSSM_HINT_ADDRESS_APP = 1
	CSSM_HINT_ADDRESS_SP  = 2
	CSSM_HINT_NONE        = 0
)
View Source
const (
	CSSM_KEYATTR_PARTIAL            = 65536
	CSSM_KEYATTR_PUBLIC_KEY_ENCRYPT = 131072
)
View Source
const (
	CSSM_KEYATTR_ALWAYS_SENSITIVE  = 16
	CSSM_KEYATTR_EXTRACTABLE       = 32
	CSSM_KEYATTR_MODIFIABLE        = 4
	CSSM_KEYATTR_NEVER_EXTRACTABLE = 64
	CSSM_KEYATTR_PERMANENT         = 1
	CSSM_KEYATTR_PRIVATE           = 2
	CSSM_KEYATTR_RETURN_DATA       = 268435456
	CSSM_KEYATTR_RETURN_DEFAULT    = 0
	CSSM_KEYATTR_RETURN_NONE       = 1073741824
	CSSM_KEYATTR_RETURN_REF        = 536870912
	CSSM_KEYATTR_SENSITIVE         = 8
)
View Source
const (
	CSSM_KEYBLOB_OTHER     = 4294967295
	CSSM_KEYBLOB_RAW       = 0
	CSSM_KEYBLOB_REFERENCE = 2
	CSSM_KEYBLOB_WRAPPED   = 3
)
View Source
const (
	CSSM_KEYBLOB_RAW_FORMAT_BSAFE        = 6
	CSSM_KEYBLOB_RAW_FORMAT_CCA          = 9
	CSSM_KEYBLOB_RAW_FORMAT_FIPS186      = 5
	CSSM_KEYBLOB_RAW_FORMAT_MSCAPI       = 3
	CSSM_KEYBLOB_RAW_FORMAT_NONE         = 0
	CSSM_KEYBLOB_RAW_FORMAT_OCTET_STRING = 12
	CSSM_KEYBLOB_RAW_FORMAT_OTHER        = 4294967295
	CSSM_KEYBLOB_RAW_FORMAT_PGP          = 4
	CSSM_KEYBLOB_RAW_FORMAT_PKCS1        = 1
	CSSM_KEYBLOB_RAW_FORMAT_PKCS3        = 2
	CSSM_KEYBLOB_RAW_FORMAT_PKCS8        = 10
	CSSM_KEYBLOB_RAW_FORMAT_SPKI         = 11
)
View Source
const (
	CSSM_KEYBLOB_RAW_FORMAT_OPENSSH  = 2147483649
	CSSM_KEYBLOB_RAW_FORMAT_OPENSSH2 = 2147483651
	CSSM_KEYBLOB_RAW_FORMAT_OPENSSL  = 2147483650
	CSSM_KEYBLOB_RAW_FORMAT_X509     = 2147483648
)
View Source
const (
	CSSM_KEYBLOB_REF_FORMAT_INTEGER = 0
	CSSM_KEYBLOB_REF_FORMAT_OTHER   = 4294967295
	CSSM_KEYBLOB_REF_FORMAT_SPKI    = 2
	CSSM_KEYBLOB_REF_FORMAT_STRING  = 1
)
View Source
const (
	CSSM_KEYBLOB_WRAPPED_FORMAT_APPLE_CUSTOM = 100
	CSSM_KEYBLOB_WRAPPED_FORMAT_OPENSSH1     = 102
	CSSM_KEYBLOB_WRAPPED_FORMAT_OPENSSL      = 101
)
View Source
const (
	CSSM_KEYBLOB_WRAPPED_FORMAT_MSCAPI = 3
	CSSM_KEYBLOB_WRAPPED_FORMAT_NONE   = 0
	CSSM_KEYBLOB_WRAPPED_FORMAT_OTHER  = 4294967295
	CSSM_KEYBLOB_WRAPPED_FORMAT_PKCS7  = 2
	CSSM_KEYBLOB_WRAPPED_FORMAT_PKCS8  = 1
)
View Source
const (
	CSSM_KEYCLASS_OTHER       = 4294967295
	CSSM_KEYCLASS_PRIVATE_KEY = 1
	CSSM_KEYCLASS_PUBLIC_KEY  = 0
	CSSM_KEYCLASS_SECRET_PART = 3
	CSSM_KEYCLASS_SESSION_KEY = 2
)
View Source
const (
	CSSM_KEYUSE_ANY            = 2147483648
	CSSM_KEYUSE_DECRYPT        = 2
	CSSM_KEYUSE_DERIVE         = 256
	CSSM_KEYUSE_ENCRYPT        = 1
	CSSM_KEYUSE_SIGN           = 4
	CSSM_KEYUSE_SIGN_RECOVER   = 16
	CSSM_KEYUSE_UNWRAP         = 128
	CSSM_KEYUSE_VERIFY         = 8
	CSSM_KEYUSE_VERIFY_RECOVER = 32
	CSSM_KEYUSE_WRAP           = 64
)
View Source
const (
	CSSM_KEY_HIERARCHY_EXPORT = 2
	CSSM_KEY_HIERARCHY_INTEG  = 1
	CSSM_KEY_HIERARCHY_NONE   = 0
)
View Source
const (
	CSSM_LIST_ELEMENT_DATUM   = 0
	CSSM_LIST_ELEMENT_SUBLIST = 1
	CSSM_LIST_ELEMENT_WORDID  = 2
)
View Source
const (
	CSSM_LIST_TYPE_CUSTOM  = 1
	CSSM_LIST_TYPE_SEXPR   = 2
	CSSM_LIST_TYPE_UNKNOWN = 0
)
View Source
const (
	CSSM_MDS_BASE_ERROR    = -2147414016
	CSSM_MDS_PRIVATE_ERROR = -2147412992
)
View Source
const (
	CSSM_NET_PROTO_CMP         = 10
	CSSM_NET_PROTO_CMPS        = 11
	CSSM_NET_PROTO_CUSTOM      = 1
	CSSM_NET_PROTO_FTP         = 7
	CSSM_NET_PROTO_FTPS        = 8
	CSSM_NET_PROTO_LDAP        = 3
	CSSM_NET_PROTO_LDAPNS      = 5
	CSSM_NET_PROTO_LDAPS       = 4
	CSSM_NET_PROTO_NONE        = 0
	CSSM_NET_PROTO_OCSP        = 9
	CSSM_NET_PROTO_UNSPECIFIED = 2
	CSSM_NET_PROTO_X500DAP     = 6
)
View Source
const (
	CSSM_NOTIFY_FAULT  = 3
	CSSM_NOTIFY_INSERT = 1
	CSSM_NOTIFY_REMOVE = 2
)
View Source
const (
	CSSM_PADDING_ALTERNATE      = 4
	CSSM_PADDING_CIPHERSTEALING = 8
	CSSM_PADDING_CUSTOM         = 1
	CSSM_PADDING_FF             = 5
	CSSM_PADDING_NONE           = 0
	CSSM_PADDING_ONE            = 3
	CSSM_PADDING_PKCS1          = 10
	CSSM_PADDING_PKCS5          = 6
	CSSM_PADDING_PKCS7          = 7
	CSSM_PADDING_RANDOM         = 9
	CSSM_PADDING_SIGRAW         = 11
	CSSM_PADDING_VENDOR_DEFINED = 2147483648
	CSSM_PADDING_ZERO           = 2
)
View Source
const (
	CSSM_PKCS_OAEP_MGF1_MD5  = 2
	CSSM_PKCS_OAEP_MGF1_SHA1 = 1
	CSSM_PKCS_OAEP_MGF_NONE  = 0
)
View Source
const (
	CSSM_PKCS_OAEP_PSOURCE_NONE       = 0
	CSSM_PKCS_OAEP_PSOURCE_Pspecified = 1
)
View Source
const (
	CSSM_PRIVILEGE_SCOPE_NONE    = 0
	CSSM_PRIVILEGE_SCOPE_PROCESS = 1
	CSSM_PRIVILEGE_SCOPE_THREAD  = 2
)
View Source
const (
	CSSM_PVC_APP  = 1
	CSSM_PVC_NONE = 0
	CSSM_PVC_SP   = 2
)
View Source
const (
	CSSM_SAMPLE_TYPE_ASYMMETRIC_KEY       = 65547
	CSSM_SAMPLE_TYPE_COMMENT              = 12
	CSSM_SAMPLE_TYPE_KEYBAG_KEY           = 65549
	CSSM_SAMPLE_TYPE_KEYCHAIN_CHANGE_LOCK = 65538
	CSSM_SAMPLE_TYPE_KEYCHAIN_LOCK        = 65537
	CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT      = 65536
	CSSM_SAMPLE_TYPE_PREAUTH              = 65545
	CSSM_SAMPLE_TYPE_PROCESS              = 65539
	CSSM_SAMPLE_TYPE_RETRY_ID             = 85
	CSSM_SAMPLE_TYPE_SYMMETRIC_KEY        = 65541
)
View Source
const (
	CSSM_SAMPLE_TYPE_BIOMETRIC           = 8
	CSSM_SAMPLE_TYPE_HASHED_PASSWORD     = 43
	CSSM_SAMPLE_TYPE_PASSWORD            = 79
	CSSM_SAMPLE_TYPE_PROMPTED_BIOMETRIC  = 83
	CSSM_SAMPLE_TYPE_PROMPTED_PASSWORD   = 84
	CSSM_SAMPLE_TYPE_PROTECTED_BIOMETRIC = 86
	CSSM_SAMPLE_TYPE_PROTECTED_PASSWORD  = 87
	CSSM_SAMPLE_TYPE_SIGNED_NONCE        = 117
	CSSM_SAMPLE_TYPE_SIGNED_SECRET       = 118
	CSSM_SAMPLE_TYPE_THRESHOLD           = 123
)
View Source
const (
	CSSM_SERVICE_AC   = 32
	CSSM_SERVICE_CL   = 8
	CSSM_SERVICE_CSP  = 2
	CSSM_SERVICE_CSSM = 1
	CSSM_SERVICE_DL   = 4
	CSSM_SERVICE_KR   = 64
	CSSM_SERVICE_TP   = 16
)
View Source
const (
	CSSM_TP_ACTION_ALLOW_EXPIRED        = 1
	CSSM_TP_ACTION_ALLOW_EXPIRED_ROOT   = 8
	CSSM_TP_ACTION_FETCH_CERT_FROM_NET  = 4
	CSSM_TP_ACTION_IMPLICIT_ANCHORS     = 64
	CSSM_TP_ACTION_LEAF_IS_CA           = 2
	CSSM_TP_ACTION_REQUIRE_REV_PER_CERT = 16
	CSSM_TP_ACTION_TRUST_SETTINGS       = 32
)
View Source
const (
	CSSM_TP_ACTION_CRL_SUFFICIENT         = 4
	CSSM_TP_ACTION_FETCH_CRL_FROM_NET     = 2
	CSSM_TP_ACTION_REQUIRE_CRL_IF_PRESENT = 8
	CSSM_TP_ACTION_REQUIRE_CRL_PER_CERT   = 1
)
View Source
const (
	CSSM_TP_AUTHORITY_REQUEST_CERTISSUE      = 1
	CSSM_TP_AUTHORITY_REQUEST_CERTNOTARIZE   = 6
	CSSM_TP_AUTHORITY_REQUEST_CERTRESUME     = 4
	CSSM_TP_AUTHORITY_REQUEST_CERTREVOKE     = 2
	CSSM_TP_AUTHORITY_REQUEST_CERTSUSPEND    = 3
	CSSM_TP_AUTHORITY_REQUEST_CERTUSERECOVER = 7
	CSSM_TP_AUTHORITY_REQUEST_CERTVERIFY     = 5
	CSSM_TP_AUTHORITY_REQUEST_CRLISSUE       = 256
)
View Source
const (
	CSSMERR_TP_AUTHENTICATION_FAILED              = -2147409657
	CSSMERR_TP_CERTGROUP_INCOMPLETE               = -2147409656
	CSSMERR_TP_CERTIFICATE_CANT_OPERATE           = -2147409655
	CSSMERR_TP_CERT_EXPIRED                       = -2147409654
	CSSMERR_TP_CERT_NOT_VALID_YET                 = -2147409653
	CSSMERR_TP_CERT_REVOKED                       = -2147409652
	CSSMERR_TP_CERT_SUSPENDED                     = -2147409651
	CSSMERR_TP_INSUFFICIENT_CREDENTIALS           = -2147409650
	CSSMERR_TP_INVALID_ACTION                     = -2147409649
	CSSMERR_TP_INVALID_ACTION_DATA                = -2147409648
	CSSMERR_TP_INVALID_ANCHOR_CERT                = -2147409646
	CSSMERR_TP_INVALID_AUTHORITY                  = -2147409645
	CSSMERR_TP_INVALID_CALLBACK                   = -2147409625
	CSSMERR_TP_INVALID_CALLERAUTH_CONTEXT_POINTER = -2147409663
	CSSMERR_TP_INVALID_CERTGROUP                  = -2147409660
	CSSMERR_TP_INVALID_CERTIFICATE                = -2147409643
	CSSMERR_TP_INVALID_CERT_AUTHORITY             = -2147409642
	CSSMERR_TP_INVALID_CRL                        = -2147409638
	CSSMERR_TP_INVALID_CRLGROUP                   = -2147409659
	CSSMERR_TP_INVALID_CRLGROUP_POINTER           = -2147409658
	CSSMERR_TP_INVALID_CRL_AUTHORITY              = -2147409641
	CSSMERR_TP_INVALID_CRL_ENCODING               = -2147409640
	CSSMERR_TP_INVALID_CRL_TYPE                   = -2147409639
	CSSMERR_TP_INVALID_FORM_TYPE                  = -2147409637
	CSSMERR_TP_INVALID_ID                         = -2147409636
	CSSMERR_TP_INVALID_IDENTIFIER                 = -2147409635
	CSSMERR_TP_INVALID_IDENTIFIER_POINTER         = -2147409662
	CSSMERR_TP_INVALID_INDEX                      = -2147409634
	CSSMERR_TP_INVALID_KEYCACHE_HANDLE            = -2147409661
	CSSMERR_TP_INVALID_NAME                       = -2147409633
	CSSMERR_TP_INVALID_POLICY_IDENTIFIERS         = -2147409632
	CSSMERR_TP_INVALID_REASON                     = -2147409630
	CSSMERR_TP_INVALID_REQUEST_INPUTS             = -2147409629
	CSSMERR_TP_INVALID_RESPONSE_VECTOR            = -2147409628
	CSSMERR_TP_INVALID_SIGNATURE                  = -2147409627
	CSSMERR_TP_INVALID_STOP_ON_POLICY             = -2147409626
	CSSMERR_TP_INVALID_TIMESTRING                 = -2147409631
	CSSMERR_TP_INVALID_TUPLE                      = -2147409624
	CSSMERR_TP_INVALID_TUPLEGROUP                 = -2147409614
	CSSMERR_TP_INVALID_TUPLEGROUP_POINTER         = -2147409615
	CSSMERR_TP_NOT_SIGNER                         = -2147409623
	CSSMERR_TP_NOT_TRUSTED                        = -2147409622
	CSSMERR_TP_NO_DEFAULT_AUTHORITY               = -2147409621
	CSSMERR_TP_REJECTED_FORM                      = -2147409620
	CSSMERR_TP_REQUEST_LOST                       = -2147409619
	CSSMERR_TP_REQUEST_REJECTED                   = -2147409618
	CSSMERR_TP_UNSUPPORTED_ADDR_TYPE              = -2147409617
	CSSMERR_TP_UNSUPPORTED_SERVICE                = -2147409616
	CSSMERR_TP_VERIFY_ACTION_FAILED               = -2147409644
	CSSM_TP_BASE_TP_ERROR                         = -2147409664
)
View Source
const (
	CSSM_TP_CERTCHANGE_HOLD    = 2
	CSSM_TP_CERTCHANGE_NONE    = 0
	CSSM_TP_CERTCHANGE_RELEASE = 3
	CSSM_TP_CERTCHANGE_REVOKE  = 1
)
View Source
const (
	CSSM_TP_CERTCHANGE_REASON_AFFILIATIONCHANGE   = 4
	CSSM_TP_CERTCHANGE_REASON_CACOMPROMISE        = 2
	CSSM_TP_CERTCHANGE_REASON_CEASEOPERATION      = 3
	CSSM_TP_CERTCHANGE_REASON_HOLDRELEASE         = 7
	CSSM_TP_CERTCHANGE_REASON_KEYCOMPROMISE       = 1
	CSSM_TP_CERTCHANGE_REASON_SUPERCEDED          = 5
	CSSM_TP_CERTCHANGE_REASON_SUSPECTEDCOMPROMISE = 6
	CSSM_TP_CERTCHANGE_REASON_UNKNOWN             = 0
)
View Source
const (
	CSSM_TP_CERTCHANGE_NOT_AUTHORIZED = 5
	CSSM_TP_CERTCHANGE_OK             = 1
	CSSM_TP_CERTCHANGE_OKWITHNEWTIME  = 2
	CSSM_TP_CERTCHANGE_REJECTED       = 4
	CSSM_TP_CERTCHANGE_STATUS_UNKNOWN = 0
	CSSM_TP_CERTCHANGE_WRONGCA        = 3
)
View Source
const (
	CSSM_TP_CERTISSUE_NOT_AUTHORIZED    = 5
	CSSM_TP_CERTISSUE_OK                = 1
	CSSM_TP_CERTISSUE_OKWITHCERTMODS    = 2
	CSSM_TP_CERTISSUE_OKWITHSERVICEMODS = 3
	CSSM_TP_CERTISSUE_REJECTED          = 4
	CSSM_TP_CERTISSUE_STATUS_UNKNOWN    = 0
	CSSM_TP_CERTISSUE_WILL_BE_REVOKED   = 6
)
View Source
const (
	CSSM_TP_CERTNOTARIZE_NOT_AUTHORIZED    = 5
	CSSM_TP_CERTNOTARIZE_OK                = 1
	CSSM_TP_CERTNOTARIZE_OKWITHOUTFIELDS   = 2
	CSSM_TP_CERTNOTARIZE_OKWITHSERVICEMODS = 3
	CSSM_TP_CERTNOTARIZE_REJECTED          = 4
	CSSM_TP_CERTNOTARIZE_STATUS_UNKNOWN    = 0
)
View Source
const (
	CSSM_TP_CERTRECLAIM_NOMATCH        = 2
	CSSM_TP_CERTRECLAIM_NOT_AUTHORIZED = 4
	CSSM_TP_CERTRECLAIM_OK             = 1
	CSSM_TP_CERTRECLAIM_REJECTED       = 3
	CSSM_TP_CERTRECLAIM_STATUS_UNKNOWN = 0
)
View Source
const (
	CSSM_TP_CERTVERIFY_EXPIRED                   = 5
	CSSM_TP_CERTVERIFY_INVALID                   = 2
	CSSM_TP_CERTVERIFY_INVALID_AUTHORITY         = 7
	CSSM_TP_CERTVERIFY_INVALID_BASIC_CONSTRAINTS = 13
	CSSM_TP_CERTVERIFY_INVALID_CERTGROUP         = 10
	CSSM_TP_CERTVERIFY_INVALID_CERT_VALUE        = 9
	CSSM_TP_CERTVERIFY_INVALID_CRL_DIST_PT       = 14
	CSSM_TP_CERTVERIFY_INVALID_NAME_TREE         = 15
	CSSM_TP_CERTVERIFY_INVALID_POLICY            = 11
	CSSM_TP_CERTVERIFY_INVALID_POLICY_IDS        = 12
	CSSM_TP_CERTVERIFY_INVALID_SIGNATURE         = 8
	CSSM_TP_CERTVERIFY_NOT_VALID_YET             = 6
	CSSM_TP_CERTVERIFY_REVOKED                   = 3
	CSSM_TP_CERTVERIFY_SUSPENDED                 = 4
	CSSM_TP_CERTVERIFY_UNKNOWN                   = 0
	CSSM_TP_CERTVERIFY_UNKNOWN_CRITICAL_EXT      = 16
	CSSM_TP_CERTVERIFY_VALID                     = 1
)
View Source
const (
	CSSM_TP_CONFIRM_ACCEPT         = 1
	CSSM_TP_CONFIRM_REJECT         = 2
	CSSM_TP_CONFIRM_STATUS_UNKNOWN = 0
)
View Source
const (
	CSSM_TP_CRLISSUE_INVALID_DOMAIN     = 3
	CSSM_TP_CRLISSUE_NOT_AUTHORIZED     = 6
	CSSM_TP_CRLISSUE_NOT_CURRENT        = 2
	CSSM_TP_CRLISSUE_OK                 = 1
	CSSM_TP_CRLISSUE_REJECTED           = 5
	CSSM_TP_CRLISSUE_STATUS_UNKNOWN     = 0
	CSSM_TP_CRLISSUE_UNKNOWN_IDENTIFIER = 4
)
View Source
const (
	CSSM_TP_FORM_TYPE_GENERIC      = 0
	CSSM_TP_FORM_TYPE_REGISTRATION = 1
)
View Source
const (
	CSSM_TP_CERT_DIR_UPDATE   = 8
	CSSM_TP_CERT_NOTIFY_RENEW = 4
	CSSM_TP_CERT_PUBLISH      = 2
	CSSM_TP_CRL_DISTRIBUTE    = 16
	CSSM_TP_KEY_ARCHIVE       = 1
)
View Source
const (
	CSSM_TP_STOP_ON_FIRST_FAIL = 3
	CSSM_TP_STOP_ON_FIRST_PASS = 2
	CSSM_TP_STOP_ON_NONE       = 1
	CSSM_TP_STOP_ON_POLICY     = 0
)
View Source
const (
	CSSM_USEE_AUTHENTICATION = 6
	CSSM_USEE_DOMESTIC       = 1
	CSSM_USEE_FINANCIAL      = 2
	CSSM_USEE_INSURANCE      = 9
	CSSM_USEE_KEYEXCH        = 7
	CSSM_USEE_KRENT          = 4
	CSSM_USEE_KRLE           = 3
	CSSM_USEE_LAST           = 255
	CSSM_USEE_MEDICAL        = 8
	CSSM_USEE_NONE           = 0
	CSSM_USEE_SSL            = 5
	CSSM_USEE_WEAK           = 10
)
View Source
const (
	CSSM_WORDID_ASYMMETRIC_KEY       = 65547
	CSSM_WORDID_KEY                  = 65543
	CSSM_WORDID_KEYBAG_KEY           = 65549
	CSSM_WORDID_KEYCHAIN_CHANGE_LOCK = 65538
	CSSM_WORDID_KEYCHAIN_LOCK        = 65537
	CSSM_WORDID_KEYCHAIN_PROMPT      = 65536
	CSSM_WORDID_PARTITION            = 65548
	CSSM_WORDID_PIN                  = 65544
	CSSM_WORDID_PREAUTH              = 65545
	CSSM_WORDID_PREAUTH_SOURCE       = 65546
	CSSM_WORDID_PROCESS              = 65539
	CSSM_WORDID_SYMMETRIC_KEY        = 65541
	CSSM_WORDID_SYSTEM               = 65542
	CSSM_WORDID__FIRST_UNUSED        = 65550
	CSSM_WORDID__RESERVED_1          = 65540
)
View Source
const (
	CSSM_WORDID_A                    = 2
	CSSM_WORDID_ACL                  = 3
	CSSM_WORDID_ALPHA                = 4
	CSSM_WORDID_B                    = 5
	CSSM_WORDID_BER                  = 6
	CSSM_WORDID_BINARY               = 7
	CSSM_WORDID_BIOMETRIC            = 8
	CSSM_WORDID_C                    = 9
	CSSM_WORDID_CANCELED             = 10
	CSSM_WORDID_CERT                 = 11
	CSSM_WORDID_COMMENT              = 12
	CSSM_WORDID_CRL                  = 13
	CSSM_WORDID_CUSTOM               = 14
	CSSM_WORDID_D                    = 15
	CSSM_WORDID_DATE                 = 16
	CSSM_WORDID_DBS_CREATE           = 22
	CSSM_WORDID_DBS_DELETE           = 23
	CSSM_WORDID_DB_DELETE            = 17
	CSSM_WORDID_DB_EXEC_STORED_QUERY = 18
	CSSM_WORDID_DB_INSERT            = 19
	CSSM_WORDID_DB_MODIFY            = 20
	CSSM_WORDID_DB_READ              = 21
	CSSM_WORDID_DECRYPT              = 24
	CSSM_WORDID_DELETE               = 25
	CSSM_WORDID_DELTA_CRL            = 26
	CSSM_WORDID_DER                  = 27
	CSSM_WORDID_DERIVE               = 28
	CSSM_WORDID_DISPLAY              = 29
	CSSM_WORDID_DO                   = 30
	CSSM_WORDID_DSA                  = 31
	CSSM_WORDID_DSA_SHA1             = 32
	CSSM_WORDID_E                    = 33
	CSSM_WORDID_ELGAMAL              = 34
	CSSM_WORDID_ENCRYPT              = 35
	CSSM_WORDID_ENTRY                = 36
	CSSM_WORDID_EXPORT_CLEAR         = 37
	CSSM_WORDID_EXPORT_WRAPPED       = 38
	CSSM_WORDID_G                    = 39
	CSSM_WORDID_GE                   = 40
	CSSM_WORDID_GENKEY               = 41
	CSSM_WORDID_HASH                 = 42
	CSSM_WORDID_HASHED_PASSWORD      = 43
	CSSM_WORDID_HASHED_SUBJECT       = 44
	CSSM_WORDID_HAVAL                = 45
	CSSM_WORDID_IBCHASH              = 46
	CSSM_WORDID_IMPORT_CLEAR         = 47
	CSSM_WORDID_IMPORT_WRAPPED       = 48
	CSSM_WORDID_INTEL                = 49
	CSSM_WORDID_ISSUER               = 50
	CSSM_WORDID_ISSUER_INFO          = 51
	CSSM_WORDID_KEA                  = 53
	CSSM_WORDID_KEYHOLDER            = 54
	CSSM_WORDID_K_OF_N               = 52
	CSSM_WORDID_L                    = 55
	CSSM_WORDID_LE                   = 56
	CSSM_WORDID_LOGIN                = 57
	CSSM_WORDID_LOGIN_NAME           = 58
	CSSM_WORDID_MAC                  = 59
	CSSM_WORDID_MD2                  = 60
	CSSM_WORDID_MD2WITHRSA           = 61
	CSSM_WORDID_MD4                  = 62
	CSSM_WORDID_MD5                  = 63
	CSSM_WORDID_MD5WITHRSA           = 64
	CSSM_WORDID_N                    = 65
	CSSM_WORDID_NAME                 = 66
	CSSM_WORDID_NDR                  = 67
	CSSM_WORDID_NHASH                = 68
	CSSM_WORDID_NOT_AFTER            = 69
	CSSM_WORDID_NOT_BEFORE           = 70
	CSSM_WORDID_NULL                 = 71
	CSSM_WORDID_NUMERIC              = 72
	CSSM_WORDID_OBJECT_HASH          = 73
	CSSM_WORDID_ONE_TIME             = 74
	CSSM_WORDID_ONLINE               = 75
	CSSM_WORDID_OWNER                = 76
	CSSM_WORDID_P                    = 77
	CSSM_WORDID_PAM_NAME             = 78
	CSSM_WORDID_PASSWORD             = 79
	CSSM_WORDID_PGP                  = 80
	CSSM_WORDID_PREFIX               = 81
	CSSM_WORDID_PRIVATE_KEY          = 82
	CSSM_WORDID_PROMPTED_BIOMETRIC   = 83
	CSSM_WORDID_PROMPTED_PASSWORD    = 84
	CSSM_WORDID_PROPAGATE            = 85
	CSSM_WORDID_PROTECTED_BIOMETRIC  = 86
	CSSM_WORDID_PROTECTED_PASSWORD   = 87
	CSSM_WORDID_PROTECTED_PIN        = 88
	CSSM_WORDID_PUBLIC_KEY           = 89
	CSSM_WORDID_PUBLIC_KEY_FROM_CERT = 90
	CSSM_WORDID_Q                    = 91
	CSSM_WORDID_RANGE                = 92
	CSSM_WORDID_REVAL                = 93
	CSSM_WORDID_RIPEMAC              = 94
	CSSM_WORDID_RIPEMD               = 95
	CSSM_WORDID_RIPEMD160            = 96
	CSSM_WORDID_RSA                  = 97
	CSSM_WORDID_RSA_ISO9796          = 98
	CSSM_WORDID_RSA_PKCS             = 99
	CSSM_WORDID_RSA_PKCS1            = 102
	CSSM_WORDID_RSA_PKCS1_MD5        = 103
	CSSM_WORDID_RSA_PKCS1_SHA1       = 104
	CSSM_WORDID_RSA_PKCS1_SIG        = 105
	CSSM_WORDID_RSA_PKCS_MD5         = 100
	CSSM_WORDID_RSA_PKCS_SHA1        = 101
	CSSM_WORDID_RSA_RAW              = 106
	CSSM_WORDID_SDSIV1               = 107
	CSSM_WORDID_SEQUENCE             = 108
	CSSM_WORDID_SET                  = 109
	CSSM_WORDID_SEXPR                = 110
	CSSM_WORDID_SHA1                 = 111
	CSSM_WORDID_SHA1WITHDSA          = 112
	CSSM_WORDID_SHA1WITHECDSA        = 113
	CSSM_WORDID_SHA1WITHRSA          = 114
	CSSM_WORDID_SIGN                 = 115
	CSSM_WORDID_SIGNATURE            = 116
	CSSM_WORDID_SIGNED_NONCE         = 117
	CSSM_WORDID_SIGNED_SECRET        = 118
	CSSM_WORDID_SPKI                 = 119
	CSSM_WORDID_SUBJECT              = 120
	CSSM_WORDID_SUBJECT_INFO         = 121
	CSSM_WORDID_TAG                  = 122
	CSSM_WORDID_THRESHOLD            = 123
	CSSM_WORDID_TIME                 = 124
	CSSM_WORDID_URI                  = 125
	CSSM_WORDID_VENDOR_END           = 2147418112
	CSSM_WORDID_VENDOR_START         = 65536
	CSSM_WORDID_VERSION              = 126
	CSSM_WORDID_X509V1               = 128
	CSSM_WORDID_X509V2               = 129
	CSSM_WORDID_X509V3               = 130
	CSSM_WORDID_X509_ATTRIBUTE       = 127
	CSSM_WORDID_X9_ATTRIBUTE         = 131
	CSSM_WORDID__NLU_                = 0
	CSSM_WORDID__STAR_               = 1
	CSSM_WORDID__UNK_                = -1
)
View Source
const (
	SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA         = 17
	SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA             = 19
	SSL_DHE_DSS_WITH_DES_CBC_SHA                  = 18
	SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA         = 20
	SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA             = 22
	SSL_DHE_RSA_WITH_DES_CBC_SHA                  = 21
	SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA          = 11
	SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA              = 13
	SSL_DH_DSS_WITH_DES_CBC_SHA                   = 12
	SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA          = 14
	SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA              = 16
	SSL_DH_RSA_WITH_DES_CBC_SHA                   = 15
	SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA         = 25
	SSL_DH_anon_EXPORT_WITH_RC4_40_MD5            = 23
	SSL_DH_anon_WITH_3DES_EDE_CBC_SHA             = 27
	SSL_DH_anon_WITH_DES_CBC_SHA                  = 26
	SSL_DH_anon_WITH_RC4_128_MD5                  = 24
	SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA        = 29
	SSL_FORTEZZA_DMS_WITH_NULL_SHA                = 28
	SSL_NO_SUCH_CIPHERSUITE                       = 65535
	SSL_NULL_WITH_NULL_NULL                       = 0
	SSL_RSA_EXPORT_WITH_DES40_CBC_SHA             = 8
	SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5            = 6
	SSL_RSA_EXPORT_WITH_RC4_40_MD5                = 3
	SSL_RSA_WITH_3DES_EDE_CBC_MD5                 = 65411
	SSL_RSA_WITH_3DES_EDE_CBC_SHA                 = 10
	SSL_RSA_WITH_DES_CBC_MD5                      = 65410
	SSL_RSA_WITH_DES_CBC_SHA                      = 9
	SSL_RSA_WITH_IDEA_CBC_MD5                     = 65409
	SSL_RSA_WITH_IDEA_CBC_SHA                     = 7
	SSL_RSA_WITH_NULL_MD5                         = 1
	SSL_RSA_WITH_NULL_SHA                         = 2
	SSL_RSA_WITH_RC2_CBC_MD5                      = 65408
	SSL_RSA_WITH_RC4_128_MD5                      = 4
	SSL_RSA_WITH_RC4_128_SHA                      = 5
	TLS_AES_128_CCM_8_SHA256                      = 4869
	TLS_AES_128_CCM_SHA256                        = 4868
	TLS_AES_128_GCM_SHA256                        = 4865
	TLS_AES_256_GCM_SHA384                        = 4866
	TLS_CHACHA20_POLY1305_SHA256                  = 4867
	TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA             = 19
	TLS_DHE_DSS_WITH_AES_128_CBC_SHA              = 50
	TLS_DHE_DSS_WITH_AES_128_CBC_SHA256           = 64
	TLS_DHE_DSS_WITH_AES_128_GCM_SHA256           = 162
	TLS_DHE_DSS_WITH_AES_256_CBC_SHA              = 56
	TLS_DHE_DSS_WITH_AES_256_CBC_SHA256           = 106
	TLS_DHE_DSS_WITH_AES_256_GCM_SHA384           = 163
	TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA             = 143
	TLS_DHE_PSK_WITH_AES_128_CBC_SHA              = 144
	TLS_DHE_PSK_WITH_AES_128_CBC_SHA256           = 178
	TLS_DHE_PSK_WITH_AES_128_GCM_SHA256           = 170
	TLS_DHE_PSK_WITH_AES_256_CBC_SHA              = 145
	TLS_DHE_PSK_WITH_AES_256_CBC_SHA384           = 179
	TLS_DHE_PSK_WITH_AES_256_GCM_SHA384           = 171
	TLS_DHE_PSK_WITH_NULL_SHA                     = 45
	TLS_DHE_PSK_WITH_NULL_SHA256                  = 180
	TLS_DHE_PSK_WITH_NULL_SHA384                  = 181
	TLS_DHE_PSK_WITH_RC4_128_SHA                  = 142
	TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA             = 22
	TLS_DHE_RSA_WITH_AES_128_CBC_SHA              = 51
	TLS_DHE_RSA_WITH_AES_128_CBC_SHA256           = 103
	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256           = 158
	TLS_DHE_RSA_WITH_AES_256_CBC_SHA              = 57
	TLS_DHE_RSA_WITH_AES_256_CBC_SHA256           = 107
	TLS_DHE_RSA_WITH_AES_256_GCM_SHA384           = 159
	TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA              = 13
	TLS_DH_DSS_WITH_AES_128_CBC_SHA               = 48
	TLS_DH_DSS_WITH_AES_128_CBC_SHA256            = 62
	TLS_DH_DSS_WITH_AES_128_GCM_SHA256            = 164
	TLS_DH_DSS_WITH_AES_256_CBC_SHA               = 54
	TLS_DH_DSS_WITH_AES_256_CBC_SHA256            = 104
	TLS_DH_DSS_WITH_AES_256_GCM_SHA384            = 165
	TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA              = 16
	TLS_DH_RSA_WITH_AES_128_CBC_SHA               = 49
	TLS_DH_RSA_WITH_AES_128_CBC_SHA256            = 63
	TLS_DH_RSA_WITH_AES_128_GCM_SHA256            = 160
	TLS_DH_RSA_WITH_AES_256_CBC_SHA               = 55
	TLS_DH_RSA_WITH_AES_256_CBC_SHA256            = 105
	TLS_DH_RSA_WITH_AES_256_GCM_SHA384            = 161
	TLS_DH_anon_WITH_3DES_EDE_CBC_SHA             = 27
	TLS_DH_anon_WITH_AES_128_CBC_SHA              = 52
	TLS_DH_anon_WITH_AES_128_CBC_SHA256           = 108
	TLS_DH_anon_WITH_AES_128_GCM_SHA256           = 166
	TLS_DH_anon_WITH_AES_256_CBC_SHA              = 58
	TLS_DH_anon_WITH_AES_256_CBC_SHA256           = 109
	TLS_DH_anon_WITH_AES_256_GCM_SHA384           = 167
	TLS_DH_anon_WITH_RC4_128_MD5                  = 24
	TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA         = 49160
	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA          = 49161
	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256       = 49187
	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256       = 49195
	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA          = 49162
	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384       = 49188
	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384       = 49196
	TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 = 52393
	TLS_ECDHE_ECDSA_WITH_NULL_SHA                 = 49158
	TLS_ECDHE_ECDSA_WITH_RC4_128_SHA              = 49159
	TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA            = 49205
	TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA            = 49206
	TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256   = 52396
	TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA           = 49170
	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA            = 49171
	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256         = 49191
	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256         = 49199
	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA            = 49172
	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384         = 49192
	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384         = 49200
	TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   = 52392
	TLS_ECDHE_RSA_WITH_NULL_SHA                   = 49168
	TLS_ECDHE_RSA_WITH_RC4_128_SHA                = 49169
	TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA          = 49155
	TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA           = 49156
	TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256        = 49189
	TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256        = 49197
	TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA           = 49157
	TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384        = 49190
	TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384        = 49198
	TLS_ECDH_ECDSA_WITH_NULL_SHA                  = 49153
	TLS_ECDH_ECDSA_WITH_RC4_128_SHA               = 49154
	TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA            = 49165
	TLS_ECDH_RSA_WITH_AES_128_CBC_SHA             = 49166
	TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256          = 49193
	TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256          = 49201
	TLS_ECDH_RSA_WITH_AES_256_CBC_SHA             = 49167
	TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384          = 49194
	TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384          = 49202
	TLS_ECDH_RSA_WITH_NULL_SHA                    = 49163
	TLS_ECDH_RSA_WITH_RC4_128_SHA                 = 49164
	TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA           = 49175
	TLS_ECDH_anon_WITH_AES_128_CBC_SHA            = 49176
	TLS_ECDH_anon_WITH_AES_256_CBC_SHA            = 49177
	TLS_ECDH_anon_WITH_NULL_SHA                   = 49173
	TLS_ECDH_anon_WITH_RC4_128_SHA                = 49174
	TLS_EMPTY_RENEGOTIATION_INFO_SCSV             = 255
	TLS_NULL_WITH_NULL_NULL                       = 0
	TLS_PSK_WITH_3DES_EDE_CBC_SHA                 = 139
	TLS_PSK_WITH_AES_128_CBC_SHA                  = 140
	TLS_PSK_WITH_AES_128_CBC_SHA256               = 174
	TLS_PSK_WITH_AES_128_GCM_SHA256               = 168
	TLS_PSK_WITH_AES_256_CBC_SHA                  = 141
	TLS_PSK_WITH_AES_256_CBC_SHA384               = 175
	TLS_PSK_WITH_AES_256_GCM_SHA384               = 169
	TLS_PSK_WITH_CHACHA20_POLY1305_SHA256         = 52395
	TLS_PSK_WITH_NULL_SHA                         = 44
	TLS_PSK_WITH_NULL_SHA256                      = 176
	TLS_PSK_WITH_NULL_SHA384                      = 177
	TLS_PSK_WITH_RC4_128_SHA                      = 138
	TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA             = 147
	TLS_RSA_PSK_WITH_AES_128_CBC_SHA              = 148
	TLS_RSA_PSK_WITH_AES_128_CBC_SHA256           = 182
	TLS_RSA_PSK_WITH_AES_128_GCM_SHA256           = 172
	TLS_RSA_PSK_WITH_AES_256_CBC_SHA              = 149
	TLS_RSA_PSK_WITH_AES_256_CBC_SHA384           = 183
	TLS_RSA_PSK_WITH_AES_256_GCM_SHA384           = 173
	TLS_RSA_PSK_WITH_NULL_SHA                     = 46
	TLS_RSA_PSK_WITH_NULL_SHA256                  = 184
	TLS_RSA_PSK_WITH_NULL_SHA384                  = 185
	TLS_RSA_PSK_WITH_RC4_128_SHA                  = 146
	TLS_RSA_WITH_3DES_EDE_CBC_SHA                 = 10
	TLS_RSA_WITH_AES_128_CBC_SHA                  = 47
	TLS_RSA_WITH_AES_128_CBC_SHA256               = 60
	TLS_RSA_WITH_AES_128_GCM_SHA256               = 156
	TLS_RSA_WITH_AES_256_CBC_SHA                  = 53
	TLS_RSA_WITH_AES_256_CBC_SHA256               = 61
	TLS_RSA_WITH_AES_256_GCM_SHA384               = 157
	TLS_RSA_WITH_NULL_MD5                         = 1
	TLS_RSA_WITH_NULL_SHA                         = 2
	TLS_RSA_WITH_NULL_SHA256                      = 59
	TLS_RSA_WITH_RC4_128_MD5                      = 4
	TLS_RSA_WITH_RC4_128_SHA                      = 5
)
View Source
const (
	ErrAuthorizationBadAddress            = -60033
	ErrAuthorizationCanceled              = -60006
	ErrAuthorizationDenied                = -60005
	ErrAuthorizationExternalizeNotAllowed = -60009
	ErrAuthorizationInteractionNotAllowed = -60007
	ErrAuthorizationInternal              = -60008
	ErrAuthorizationInternalizeNotAllowed = -60010
	ErrAuthorizationInvalidFlags          = -60011
	ErrAuthorizationInvalidPointer        = -60004
	ErrAuthorizationInvalidRef            = -60002
	ErrAuthorizationInvalidSet            = -60001
	ErrAuthorizationInvalidTag            = -60003
	ErrAuthorizationSuccess               = 0
	ErrAuthorizationToolEnvironmentError  = -60032
	ErrAuthorizationToolExecuteFailure    = -60031
)
View Source
const (
	ErrSSLATSCertificateHashAlgorithmViolation     = -9885
	ErrSSLATSCertificateTrustViolation             = -9886
	ErrSSLATSCiphersuiteViolation                  = -9882
	ErrSSLATSLeafCertificateHashAlgorithmViolation = -9884
	ErrSSLATSMinimumKeySizeViolation               = -9883
	ErrSSLATSMinimumVersionViolation               = -9881
	ErrSSLATSViolation                             = -9880
	ErrSSLBadCert                                  = -9808
	ErrSSLBadCertificateStatusResponse             = -9862
	ErrSSLBadCipherSuite                           = -9818
	ErrSSLBadConfiguration                         = -9848
	ErrSSLBadRecordMac                             = -9846
	ErrSSLBufferOverflow                           = -9817
	ErrSSLCertExpired                              = -9814
	ErrSSLCertNotYetValid                          = -9815
	ErrSSLCertificateRequired                      = -9863
	ErrSSLClientCertRequested                      = -9842
	ErrSSLClientHelloReceived                      = -9851
	ErrSSLClosedAbort                              = -9806
	ErrSSLClosedGraceful                           = -9805
	ErrSSLClosedNoNotify                           = -9816
	ErrSSLConfigurationFailed                      = -9854
	ErrSSLConnectionRefused                        = -9844
	ErrSSLCrypto                                   = -9809
	ErrSSLDecodeError                              = -9859
	ErrSSLDecompressFail                           = -9857
	ErrSSLDecryptionFail                           = -9845
	ErrSSLEarlyDataRejected                        = -9890
	ErrSSLFatalAlert                               = -9802
	ErrSSLHandshakeFail                            = -9858
	ErrSSLHostNameMismatch                         = -9843
	ErrSSLIllegalParam                             = -9830
	ErrSSLInappropriateFallback                    = -9860
	ErrSSLInternal                                 = -9810
	ErrSSLMissingExtension                         = -9861
	ErrSSLModuleAttach                             = -9811
	ErrSSLNegotiation                              = -9801
	ErrSSLNetworkTimeout                           = -9853
	ErrSSLNoRootCert                               = -9813
	ErrSSLPeerAccessDenied                         = -9832
	ErrSSLPeerAuthCompleted                        = -9841
	ErrSSLPeerBadCert                              = -9825
	ErrSSLPeerBadRecordMac                         = -9820
	ErrSSLPeerCertExpired                          = -9828
	ErrSSLPeerCertRevoked                          = -9827
	ErrSSLPeerCertUnknown                          = -9829
	ErrSSLPeerDecodeError                          = -9833
	ErrSSLPeerDecompressFail                       = -9823
	ErrSSLPeerDecryptError                         = -9834
	ErrSSLPeerDecryptionFail                       = -9821
	ErrSSLPeerExportRestriction                    = -9835
	ErrSSLPeerHandshakeFail                        = -9824
	ErrSSLPeerInsufficientSecurity                 = -9837
	ErrSSLPeerInternalError                        = -9838
	ErrSSLPeerNoRenegotiation                      = -9840
	ErrSSLPeerProtocolVersion                      = -9836
	ErrSSLPeerRecordOverflow                       = -9822
	ErrSSLPeerUnexpectedMsg                        = -9819
	ErrSSLPeerUnknownCA                            = -9831
	ErrSSLPeerUnsupportedCert                      = -9826
	ErrSSLPeerUserCancelled                        = -9839
	ErrSSLProtocol                                 = -9800
	ErrSSLRecordOverflow                           = -9847
	ErrSSLSessionNotFound                          = -9804
	ErrSSLTransportReset                           = -9852
	ErrSSLUnexpectedMessage                        = -9856
	ErrSSLUnexpectedRecord                         = -9849
	ErrSSLUnknownPSKIdentity                       = -9864
	ErrSSLUnknownRootCert                          = -9812
	ErrSSLUnrecognizedName                         = -9865
	ErrSSLUnsupportedExtension                     = -9855
	ErrSSLWeakPeerEphemeralDHKey                   = -9850
	ErrSSLWouldBlock                               = -9803
	ErrSSLXCertChainInvalid                        = -9807
)
View Source
const (
	ErrSecCSAmbiguousBundleFormat        = -67011
	ErrSecCSBadBundleFormat              = -67028
	ErrSecCSBadCallbackValue             = -67020
	ErrSecCSBadDictionaryFormat          = -67058
	ErrSecCSBadDiskImageFormat           = -67001
	ErrSecCSBadFrameworkVersion          = -67009
	ErrSecCSBadLVArch                    = -67017
	ErrSecCSBadMainExecutable            = -67010
	ErrSecCSBadNestedCode                = -67021
	ErrSecCSBadObjectFormat              = -67049
	ErrSecCSBadResource                  = -67054
	ErrSecCSBadTeamIdentifier            = -66997
	ErrSecCSCMSConstructionFailed        = -66991
	ErrSecCSCMSTooLarge                  = -67036
	ErrSecCSCancelled                    = -67006
	ErrSecCSDBAccess                     = -67032
	ErrSecCSDBDenied                     = -67033
	ErrSecCSDSStoreSymlink               = -67012
	ErrSecCSDbCorrupt                    = -67024
	ErrSecCSFileHardQuarantined          = -67026
	ErrSecCSGuestInvalid                 = -67063
	ErrSecCSHelperFailed                 = -67019
	ErrSecCSHostProtocolContradiction    = -67043
	ErrSecCSHostProtocolDedicationError  = -67042
	ErrSecCSHostProtocolInvalidAttribute = -67031
	ErrSecCSHostProtocolInvalidHash      = -67035
	ErrSecCSHostProtocolNotProxy         = -67041
	ErrSecCSHostProtocolRelativePath     = -67044
	ErrSecCSHostProtocolStateError       = -67040
	ErrSecCSHostProtocolUnrelated        = -67039
	ErrSecCSHostReject                   = -67047
	ErrSecCSInfoPlistFailed              = -67030
	ErrSecCSInternalError                = -67048
	ErrSecCSInvalidAssociatedFileData    = -66999
	ErrSecCSInvalidAttributeValues       = -67066
	ErrSecCSInvalidEntitlements          = -66994
	ErrSecCSInvalidFlags                 = -67070
	ErrSecCSInvalidObjectRef             = -67071
	ErrSecCSInvalidPlatform              = -67005
	ErrSecCSInvalidRuntimeVersion        = -66993
	ErrSecCSInvalidSymlink               = -67003
	ErrSecCSInvalidTeamIdentifier        = -66998
	ErrSecCSMultipleGuests               = -67064
	ErrSecCSNoMainExecutable             = -67029
	ErrSecCSNoMatches                    = -67027
	ErrSecCSNoSuchCode                   = -67065
	ErrSecCSNotAHost                     = -67046
	ErrSecCSNotAppLike                   = -67002
	ErrSecCSNotSupported                 = -67037
	ErrSecCSObjectRequired               = -67069
	ErrSecCSOutdated                     = -67025
	ErrSecCSRegularFile                  = -67015
	ErrSecCSRemoteSignerFailed           = -66990
	ErrSecCSReqFailed                    = -67050
	ErrSecCSReqInvalid                   = -67052
	ErrSecCSReqUnsupported               = -67051
	ErrSecCSResourceDirectoryFailed      = -67023
	ErrSecCSResourceNotSupported         = -67016
	ErrSecCSResourceRulesInvalid         = -67053
	ErrSecCSResourcesInvalid             = -67055
	ErrSecCSResourcesNotFound            = -67056
	ErrSecCSResourcesNotSealed           = -67057
	ErrSecCSRevokedNotarization          = -66992
	ErrSecCSSigDBAccess                  = -67032
	ErrSecCSSigDBDenied                  = -67033
	ErrSecCSSignatureFailed              = -67061
	ErrSecCSSignatureInvalid             = -67045
	ErrSecCSSignatureNotVerifiable       = -67060
	ErrSecCSSignatureUnsupported         = -67059
	ErrSecCSSignatureUntrusted           = -66996
	ErrSecCSStaticCodeChanged            = -67034
	ErrSecCSStaticCodeNotFound           = -67068
	ErrSecCSTooBig                       = -67004
	ErrSecCSUnimplemented                = -67072
	ErrSecCSUnsealedAppRoot              = -67014
	ErrSecCSUnsealedFrameworkRoot        = -67008
	ErrSecCSUnsigned                     = -67062
	ErrSecCSUnsignedNestedCode           = -67022
	ErrSecCSUnsupportedDigestAlgorithm   = -67000
	ErrSecCSUnsupportedGuestAttributes   = -67067
	ErrSecCSVetoed                       = -67018
	ErrSecCSWeakResourceEnvelope         = -67007
	ErrSecCSWeakResourceRules            = -67013
	ErrSecMultipleExecSegments           = -66995
)
View Source
const (
	ErrSecACLAddFailed                       = -67698
	ErrSecACLChangeFailed                    = -67699
	ErrSecACLDeleteFailed                    = -67696
	ErrSecACLNotSimple                       = -25240
	ErrSecACLReplaceFailed                   = -67697
	ErrSecAddinLoadFailed                    = -67711
	ErrSecAddinUnloadFailed                  = -67714
	ErrSecAlgorithmMismatch                  = -67730
	ErrSecAllocate                           = -108
	ErrSecAlreadyLoggedIn                    = -67814
	ErrSecAppleAddAppACLSubject              = -67589
	ErrSecAppleInvalidKeyEndDate             = -67593
	ErrSecAppleInvalidKeyStartDate           = -67592
	ErrSecApplePublicKeyIncomplete           = -67590
	ErrSecAppleSSLv2Rollback                 = -67595
	ErrSecAppleSignatureMismatch             = -67591
	ErrSecAttachHandleBusy                   = -67728
	ErrSecAttributeNotInContext              = -67720
	ErrSecAuthFailed                         = -25293
	ErrSecBadReq                             = -909
	ErrSecBlockSizeMismatch                  = -67810
	ErrSecBufferTooSmall                     = -25301
	ErrSecCRLAlreadySigned                   = -67684
	ErrSecCRLBadURI                          = -67617
	ErrSecCRLExpired                         = -67613
	ErrSecCRLNotFound                        = -67615
	ErrSecCRLNotTrusted                      = -67620
	ErrSecCRLNotValidYet                     = -67614
	ErrSecCRLPolicyFailed                    = -67621
	ErrSecCRLServerDown                      = -67616
	ErrSecCallbackFailed                     = -67695
	ErrSecCertificateCannotOperate           = -67817
	ErrSecCertificateDuplicateExtension      = -67903
	ErrSecCertificateExpired                 = -67818
	ErrSecCertificateIsCA                    = -67902
	ErrSecCertificateNameNotAllowed          = -67900
	ErrSecCertificateNotValidYet             = -67819
	ErrSecCertificatePolicyNotAllowed        = -67899
	ErrSecCertificateRevoked                 = -67820
	ErrSecCertificateSuspended               = -67821
	ErrSecCertificateValidityPeriodTooLong   = -67901
	ErrSecCodeSigningBadCertChainLength      = -67647
	ErrSecCodeSigningBadPathLengthConstraint = -67649
	ErrSecCodeSigningDevelopment             = -67651
	ErrSecCodeSigningNoBasicConstraints      = -67648
	ErrSecCodeSigningNoExtendedKeyUsage      = -67650
	ErrSecConversionError                    = -67594
	ErrSecCoreFoundationUnknown              = -4960
	ErrSecCreateChainFailed                  = -25318
	ErrSecDataNotAvailable                   = -25316
	ErrSecDataNotModifiable                  = -25317
	ErrSecDataTooLarge                       = -25302
	ErrSecDatabaseLocked                     = -67869
	ErrSecDatastoreIsOpen                    = -67870
	ErrSecDecode                             = -26275
	ErrSecDeviceError                        = -67727
	ErrSecDeviceFailed                       = -67588
	ErrSecDeviceReset                        = -67587
	ErrSecDeviceVerifyFailed                 = -67812
	ErrSecDiskFull                           = -34
	ErrSecDskFull                            = -34
	ErrSecDuplicateCallback                  = -25297
	ErrSecDuplicateItem                      = -25299
	ErrSecDuplicateKeychain                  = -25296
	ErrSecEMMLoadFailed                      = -67709
	ErrSecEMMUnloadFailed                    = -67710
	ErrSecEndOfData                          = -67634
	ErrSecEventNotificationCallbackNotFound  = -67723
	ErrSecExtendedKeyUsageNotCritical        = -67881
	ErrSecFieldSpecifiedMultiple             = -67866
	ErrSecFileTooBig                         = -67597
	ErrSecFunctionFailed                     = -67677
	ErrSecFunctionIntegrityFail              = -67670
	ErrSecHostNameMismatch                   = -67602
	ErrSecIDPFailure                         = -67622
	ErrSecIO                                 = -36
	ErrSecInDarkWake                         = -25320
	ErrSecIncompatibleDatabaseBlob           = -67600
	ErrSecIncompatibleFieldFormat            = -67867
	ErrSecIncompatibleKeyBlob                = -67601
	ErrSecIncompatibleVersion                = -67704
	ErrSecIncompleteCertRevocationCheck      = -67635
	ErrSecInputLengthError                   = -67724
	ErrSecInsufficientClientID               = -67586
	ErrSecInsufficientCredentials            = -67822
	ErrSecInteractionNotAllowed              = -25308
	ErrSecInteractionRequired                = -25315
	ErrSecInternalComponent                  = -2070
	ErrSecInternalError                      = -67671
	ErrSecInvaldCRLAuthority                 = -67827
	ErrSecInvalidACL                         = -67702
	ErrSecInvalidAccessCredentials           = -67700
	ErrSecInvalidAccessRequest               = -67876
	ErrSecInvalidAction                      = -67823
	ErrSecInvalidAddinFunctionTable          = -67716
	ErrSecInvalidAlgorithm                   = -67747
	ErrSecInvalidAlgorithmParms              = -67770
	ErrSecInvalidAttributeAccessCredentials  = -67796
	ErrSecInvalidAttributeBase               = -67788
	ErrSecInvalidAttributeBlockSize          = -67764
	ErrSecInvalidAttributeDLDBHandle         = -67794
	ErrSecInvalidAttributeEffectiveBits      = -67778
	ErrSecInvalidAttributeEndDate            = -67782
	ErrSecInvalidAttributeInitVector         = -67750
	ErrSecInvalidAttributeIterationCount     = -67792
	ErrSecInvalidAttributeKey                = -67748
	ErrSecInvalidAttributeKeyLength          = -67762
	ErrSecInvalidAttributeKeyType            = -67774
	ErrSecInvalidAttributeLabel              = -67772
	ErrSecInvalidAttributeMode               = -67776
	ErrSecInvalidAttributeOutputSize         = -67766
	ErrSecInvalidAttributePadding            = -67754
	ErrSecInvalidAttributePassphrase         = -67760
	ErrSecInvalidAttributePrime              = -67786
	ErrSecInvalidAttributePrivateKeyFormat   = -67800
	ErrSecInvalidAttributePublicKeyFormat    = -67798
	ErrSecInvalidAttributeRandom             = -67756
	ErrSecInvalidAttributeRounds             = -67768
	ErrSecInvalidAttributeSalt               = -67752
	ErrSecInvalidAttributeSeed               = -67758
	ErrSecInvalidAttributeStartDate          = -67780
	ErrSecInvalidAttributeSubprime           = -67790
	ErrSecInvalidAttributeSymmetricKeyFormat = -67802
	ErrSecInvalidAttributeVersion            = -67784
	ErrSecInvalidAttributeWrappedKeyFormat   = -67804
	ErrSecInvalidAuthority                   = -67824
	ErrSecInvalidAuthorityKeyID              = -67606
	ErrSecInvalidBaseACLs                    = -67851
	ErrSecInvalidBundleInfo                  = -67857
	ErrSecInvalidCRL                         = -67830
	ErrSecInvalidCRLAuthority                = -67827
	ErrSecInvalidCRLEncoding                 = -67828
	ErrSecInvalidCRLGroup                    = -67816
	ErrSecInvalidCRLIndex                    = -67858
	ErrSecInvalidCRLType                     = -67829
	ErrSecInvalidCallback                    = -25298
	ErrSecInvalidCertAuthority               = -67826
	ErrSecInvalidCertificateGroup            = -67691
	ErrSecInvalidCertificateRef              = -67690
	ErrSecInvalidContext                     = -67746
	ErrSecInvalidDBList                      = -67681
	ErrSecInvalidDBLocation                  = -67875
	ErrSecInvalidData                        = -67673
	ErrSecInvalidDatabaseBlob                = -67598
	ErrSecInvalidDigestAlgorithm             = -67815
	ErrSecInvalidEncoding                    = -67853
	ErrSecInvalidExtendedKeyUsage            = -67609
	ErrSecInvalidFormType                    = -67831
	ErrSecInvalidGUID                        = -67679
	ErrSecInvalidHandle                      = -67680
	ErrSecInvalidHandleUsage                 = -67668
	ErrSecInvalidID                          = -67832
	ErrSecInvalidIDLinkage                   = -67610
	ErrSecInvalidIdentifier                  = -67833
	ErrSecInvalidIndex                       = -67834
	ErrSecInvalidIndexInfo                   = -67877
	ErrSecInvalidInputVector                 = -67744
	ErrSecInvalidItemRef                     = -25304
	ErrSecInvalidKeyAttributeMask            = -67738
	ErrSecInvalidKeyBlob                     = -67599
	ErrSecInvalidKeyFormat                   = -67742
	ErrSecInvalidKeyHierarchy                = -67713
	ErrSecInvalidKeyLabel                    = -67740
	ErrSecInvalidKeyRef                      = -67712
	ErrSecInvalidKeyUsageForPolicy           = -67608
	ErrSecInvalidKeyUsageMask                = -67736
	ErrSecInvalidKeychain                    = -25295
	ErrSecInvalidLoginName                   = -67813
	ErrSecInvalidModifyMode                  = -67879
	ErrSecInvalidName                        = -67689
	ErrSecInvalidNetworkAddress              = -67683
	ErrSecInvalidNewOwner                    = -67878
	ErrSecInvalidNumberOfFields              = -67685
	ErrSecInvalidOutputVector                = -67745
	ErrSecInvalidOwnerEdit                   = -25244
	ErrSecInvalidPVC                         = -67708
	ErrSecInvalidParsingModule               = -67868
	ErrSecInvalidPassthroughID               = -67682
	ErrSecInvalidPasswordRef                 = -25261
	ErrSecInvalidPointer                     = -67675
	ErrSecInvalidPolicyIdentifiers           = -67835
	ErrSecInvalidPrefsDomain                 = -25319
	ErrSecInvalidQuery                       = -67693
	ErrSecInvalidReason                      = -67837
	ErrSecInvalidRecord                      = -67701
	ErrSecInvalidRequestInputs               = -67838
	ErrSecInvalidRequestor                   = -67855
	ErrSecInvalidResponseVector              = -67839
	ErrSecInvalidRoot                        = -67612
	ErrSecInvalidSampleValue                 = -67703
	ErrSecInvalidScope                       = -67706
	ErrSecInvalidSearchRef                   = -25305
	ErrSecInvalidServiceMask                 = -67717
	ErrSecInvalidSignature                   = -67688
	ErrSecInvalidStopOnPolicy                = -67840
	ErrSecInvalidSubServiceID                = -67719
	ErrSecInvalidSubjectKeyID                = -67607
	ErrSecInvalidSubjectName                 = -67655
	ErrSecInvalidTimeString                  = -67836
	ErrSecInvalidTrustSetting                = -25242
	ErrSecInvalidTrustSettings               = -25262
	ErrSecInvalidTuple                       = -67841
	ErrSecInvalidTupleCredendtials           = -67852
	ErrSecInvalidTupleCredentials            = -67852
	ErrSecInvalidTupleGroup                  = -67850
	ErrSecInvalidValidityPeriod              = -67854
	ErrSecInvalidValue                       = -67694
	ErrSecItemNotFound                       = -25300
	ErrSecKeyBlobTypeIncorrect               = -67732
	ErrSecKeyHeaderInconsistent              = -67733
	ErrSecKeyIsSensitive                     = -25258
	ErrSecKeySizeNotAllowed                  = -25311
	ErrSecKeyUsageIncorrect                  = -67731
	ErrSecLibraryReferenceNotFound           = -67715
	ErrSecMDSError                           = -67674
	ErrSecMemoryError                        = -67672
	ErrSecMissingAlgorithmParms              = -67771
	ErrSecMissingAttributeAccessCredentials  = -67797
	ErrSecMissingAttributeBase               = -67789
	ErrSecMissingAttributeBlockSize          = -67765
	ErrSecMissingAttributeDLDBHandle         = -67795
	ErrSecMissingAttributeEffectiveBits      = -67779
	ErrSecMissingAttributeEndDate            = -67783
	ErrSecMissingAttributeInitVector         = -67751
	ErrSecMissingAttributeIterationCount     = -67793
	ErrSecMissingAttributeKey                = -67749
	ErrSecMissingAttributeKeyLength          = -67763
	ErrSecMissingAttributeKeyType            = -67775
	ErrSecMissingAttributeLabel              = -67773
	ErrSecMissingAttributeMode               = -67777
	ErrSecMissingAttributeOutputSize         = -67767
	ErrSecMissingAttributePadding            = -67755
	ErrSecMissingAttributePassphrase         = -67761
	ErrSecMissingAttributePrime              = -67787
	ErrSecMissingAttributePrivateKeyFormat   = -67801
	ErrSecMissingAttributePublicKeyFormat    = -67799
	ErrSecMissingAttributeRandom             = -67757
	ErrSecMissingAttributeRounds             = -67769
	ErrSecMissingAttributeSalt               = -67753
	ErrSecMissingAttributeSeed               = -67759
	ErrSecMissingAttributeStartDate          = -67781
	ErrSecMissingAttributeSubprime           = -67791
	ErrSecMissingAttributeSymmetricKeyFormat = -67803
	ErrSecMissingAttributeVersion            = -67785
	ErrSecMissingAttributeWrappedKeyFormat   = -67805
	ErrSecMissingEntitlement                 = -34018
	ErrSecMissingQualifiedCertStatement      = -67904
	ErrSecMissingRequiredExtension           = -67880
	ErrSecMissingValue                       = -67871
	ErrSecMobileMeCSRVerifyFailure           = -67665
	ErrSecMobileMeFailedConsistencyCheck     = -67666
	ErrSecMobileMeNoRequestPending           = -67664
	ErrSecMobileMeRequestAlreadyPending      = -67663
	ErrSecMobileMeRequestQueued              = -67657
	ErrSecMobileMeRequestRedirected          = -67658
	ErrSecMobileMeServerAlreadyExists        = -67661
	ErrSecMobileMeServerError                = -67659
	ErrSecMobileMeServerNotAvailable         = -67660
	ErrSecMobileMeServerServiceErr           = -67662
	ErrSecModuleManagerInitializeFailed      = -67721
	ErrSecModuleManagerNotFound              = -67722
	ErrSecModuleManifestVerifyFailed         = -67678
	ErrSecModuleNotLoaded                    = -67718
	ErrSecMultiplePrivKeys                   = -25259
	ErrSecMultipleValuesUnsupported          = -67842
	ErrSecNetworkFailure                     = -67636
	ErrSecNoAccessForItem                    = -25243
	ErrSecNoBasicConstraints                 = -67604
	ErrSecNoBasicConstraintsCA               = -67605
	ErrSecNoCertificateModule                = -25313
	ErrSecNoDefaultAuthority                 = -67844
	ErrSecNoDefaultKeychain                  = -25307
	ErrSecNoFieldValues                      = -67859
	ErrSecNoPolicyModule                     = -25314
	ErrSecNoStorageModule                    = -25312
	ErrSecNoSuchAttr                         = -25303
	ErrSecNoSuchClass                        = -25306
	ErrSecNoSuchKeychain                     = -25294
	ErrSecNoTrustSettings                    = -25263
	ErrSecNotAvailable                       = -25291
	ErrSecNotInitialized                     = -67667
	ErrSecNotLoggedIn                        = -67729
	ErrSecNotSigner                          = -26267
	ErrSecNotTrusted                         = -67843
	ErrSecOCSPBadRequest                     = -67631
	ErrSecOCSPBadResponse                    = -67630
	ErrSecOCSPNoSigner                       = -67640
	ErrSecOCSPNotTrustedToAnchor             = -67637
	ErrSecOCSPResponderInternalError         = -67642
	ErrSecOCSPResponderMalformedReq          = -67641
	ErrSecOCSPResponderSignatureRequired     = -67644
	ErrSecOCSPResponderTryLater              = -67643
	ErrSecOCSPResponderUnauthorized          = -67645
	ErrSecOCSPResponseNonceMismatch          = -67646
	ErrSecOCSPSignatureError                 = -67639
	ErrSecOCSPStatusUnrecognized             = -67633
	ErrSecOCSPUnavailable                    = -67632
	ErrSecOpWr                               = -49
	ErrSecOutputLengthError                  = -67725
	ErrSecPVCAlreadyConfigured               = -67707
	ErrSecPVCReferentNotFound                = -67669
	ErrSecParam                              = -50
	ErrSecPassphraseRequired                 = -25260
	ErrSecPathLengthConstraintExceeded       = -67611
	ErrSecPkcs12VerifyFailure                = -25264
	ErrSecPolicyNotFound                     = -25241
	ErrSecPrivilegeNotGranted                = -67705
	ErrSecPrivilegeNotSupported              = -67726
	ErrSecPublicKeyInconsistent              = -67811
	ErrSecQuerySizeUnknown                   = -67809
	ErrSecQuotaExceeded                      = -67596
	ErrSecReadOnly                           = -25292
	ErrSecReadOnlyAttr                       = -25309
	ErrSecRecordModified                     = -67638
	ErrSecRejectedForm                       = -67845
	ErrSecRequestDescriptor                  = -67856
	ErrSecRequestLost                        = -67846
	ErrSecRequestRejected                    = -67847
	ErrSecResourceSignBadCertChainLength     = -67652
	ErrSecResourceSignBadExtKeyUsage         = -67653
	ErrSecRestrictedAPI                      = -34020
	ErrSecSMIMEBadExtendedKeyUsage           = -67624
	ErrSecSMIMEBadKeyUsage                   = -67625
	ErrSecSMIMEEmailAddressesNotFound        = -67623
	ErrSecSMIMEKeyUsageNotCritical           = -67626
	ErrSecSMIMENoEmailAddress                = -67627
	ErrSecSMIMESubjAltNameNotCritical        = -67628
	ErrSecSSLBadExtendedKeyUsage             = -67629
	ErrSecSelfCheckFailed                    = -67676
	ErrSecServiceNotAvailable                = -67585
	ErrSecSigningTimeMissing                 = -67894
	ErrSecStagedOperationInProgress          = -67806
	ErrSecStagedOperationNotStarted          = -67807
	ErrSecSuccess                            = 0
	ErrSecTagNotFound                        = -67692
	ErrSecTimestampAddInfoNotAvailable       = -67892
	ErrSecTimestampBadAlg                    = -67886
	ErrSecTimestampBadDataFormat             = -67888
	ErrSecTimestampBadRequest                = -67887
	ErrSecTimestampInvalid                   = -67883
	ErrSecTimestampMissing                   = -67882
	ErrSecTimestampNotTrusted                = -67884
	ErrSecTimestampRejection                 = -67895
	ErrSecTimestampRevocationNotification    = -67898
	ErrSecTimestampRevocationWarning         = -67897
	ErrSecTimestampServiceNotAvailable       = -67885
	ErrSecTimestampSystemFailure             = -67893
	ErrSecTimestampTimeNotAvailable          = -67889
	ErrSecTimestampUnacceptedExtension       = -67891
	ErrSecTimestampUnacceptedPolicy          = -67890
	ErrSecTimestampWaiting                   = -67896
	ErrSecTrustNotAvailable                  = -25245
	ErrSecTrustSettingDeny                   = -67654
	ErrSecUnimplemented                      = -4
	ErrSecUnknownCRLExtension                = -67619
	ErrSecUnknownCertExtension               = -67618
	ErrSecUnknownCriticalExtensionFlag       = -67603
	ErrSecUnknownFormat                      = -25257
	ErrSecUnknownQualifiedCertStatement      = -67656
	ErrSecUnknownTag                         = -67687
	ErrSecUnsupportedAddressType             = -67848
	ErrSecUnsupportedFieldFormat             = -67860
	ErrSecUnsupportedFormat                  = -25256
	ErrSecUnsupportedIndexInfo               = -67861
	ErrSecUnsupportedKeyAttributeMask        = -67739
	ErrSecUnsupportedKeyFormat               = -67734
	ErrSecUnsupportedKeyLabel                = -67741
	ErrSecUnsupportedKeySize                 = -67735
	ErrSecUnsupportedKeyUsageMask            = -67737
	ErrSecUnsupportedLocality                = -67862
	ErrSecUnsupportedNumAttributes           = -67863
	ErrSecUnsupportedNumIndexes              = -67864
	ErrSecUnsupportedNumRecordTypes          = -67865
	ErrSecUnsupportedNumSelectionPreds       = -67873
	ErrSecUnsupportedOperator                = -67874
	ErrSecUnsupportedQueryLimits             = -67872
	ErrSecUnsupportedService                 = -67849
	ErrSecUnsupportedVectorOfBuffers         = -67743
	ErrSecUserCanceled                       = -128
	ErrSecVerificationFailure                = -67686
	ErrSecVerifyActionFailed                 = -67825
	ErrSecVerifyFailed                       = -67808
	ErrSecWrPerm                             = -61
	ErrSecWrongSecVersion                    = -25310
)
View Source
const (
	ErrSessionAuthorizationDenied = -60502
	ErrSessionInternal            = -60008
	ErrSessionInvalidAttributes   = -60501
	ErrSessionInvalidFlags        = -60011
	ErrSessionInvalidId           = -60500
	ErrSessionSuccess             = 0
	ErrSessionValueNotSet         = -60503
)
View Source
const (
	KSecCSAllowNetworkAccess           = 65536
	KSecCSBasicValidateOnly            = 6
	KSecCSCheckAllArchitectures        = 1
	KSecCSCheckGatekeeperArchitectures = 65
	KSecCSCheckNestedCode              = 8
	KSecCSDoNotValidateExecutable      = 2
	KSecCSDoNotValidateResources       = 4
	KSecCSFastExecutableValidation     = 131072
	KSecCSFullReport                   = 32
	KSecCSRestrictSidebandData         = 512
	KSecCSRestrictSymlinks             = 128
	KSecCSRestrictToAppLike            = 256
	KSecCSSingleThreaded               = 4096
	KSecCSStrictValidate               = 16
	KSecCSUseSoftwareSigningCert       = 1024
	KSecCSValidatePEH                  = 2048
)
View Source
const (
	KSecCSDedicatedHost     = 1
	KSecCSGenerateGuestHash = 2
)
View Source
const (
	KSecCSCalculateCMSDigest     = 64
	KSecCSContentInformation     = 16
	KSecCSDynamicInformation     = 8
	KSecCSInternalInformation    = 1
	KSecCSRequirementInformation = 4
	KSecCSSigningInformation     = 2
	KSecCSSkipResourceDirectory  = 32
)
View Source
const (
	KSecKeyAlias            = 2
	KSecKeyAlwaysSensitive  = 15
	KSecKeyApplicationTag   = 7
	KSecKeyDecrypt          = 19
	KSecKeyDerive           = 20
	KSecKeyEffectiveKeySize = 11
	KSecKeyEncrypt          = 18
	KSecKeyEndDate          = 13
	KSecKeyExtractable      = 16
	KSecKeyKeyClass         = 0
	KSecKeyKeyCreator       = 8
	KSecKeyKeySizeInBits    = 10
	KSecKeyKeyType          = 9
	KSecKeyLabel            = 6
	KSecKeyModifiable       = 5
	KSecKeyNeverExtractable = 17
	KSecKeyPermanent        = 3
	KSecKeyPrintName        = 1
	KSecKeyPrivate          = 4
	KSecKeySensitive        = 14
	KSecKeySign             = 21
	KSecKeySignRecover      = 23
	KSecKeyStartDate        = 12
	KSecKeyUnwrap           = 26
	KSecKeyVerify           = 22
	KSecKeyVerifyRecover    = 24
	KSecKeyWrap             = 25
)
View Source
const (
	KSecRevocationCRLMethod               = 2
	KSecRevocationNetworkAccessDisabled   = 16
	KSecRevocationOCSPMethod              = 1
	KSecRevocationPreferCRL               = 4
	KSecRevocationRequirePositiveResponse = 8
	KSecRevocationUseAnyAvailableMethod   = 3
)
View Source
const (
	KSecCertEncodingItemAttr         = 1667591779
	KSecCertTypeItemAttr             = 1668577648
	KSecIssuerItemAttr               = 1769173877
	KSecPublicKeyHashItemAttr        = 1752198009
	KSecSerialNumberItemAttr         = 1936614002
	KSecSubjectItemAttr              = 1937072746
	KSecSubjectKeyIdentifierItemAttr = 1936419172
)
View Source
const (
	KSecTransformErrorAbortInProgress         = 19
	KSecTransformErrorAborted                 = 20
	KSecTransformErrorAttributeNotFound       = 1
	KSecTransformErrorInvalidAlgorithm        = 6
	KSecTransformErrorInvalidConnection       = 15
	KSecTransformErrorInvalidInput            = 10
	KSecTransformErrorInvalidInputDictionary  = 5
	KSecTransformErrorInvalidLength           = 7
	KSecTransformErrorInvalidOperation        = 2
	KSecTransformErrorInvalidType             = 8
	KSecTransformErrorMissingParameter        = 14
	KSecTransformErrorMoreThanOneOutput       = 4
	KSecTransformErrorNameAlreadyRegistered   = 11
	KSecTransformErrorNotInitializedCorrectly = 3
	KSecTransformErrorUnsupportedAttribute    = 12
	KSecTransformInvalidArgument              = 21
	KSecTransformInvalidOverride              = 17
	KSecTransformOperationNotSupportedOnGroup = 13
	KSecTransformTransformIsExecuting         = 16
	KSecTransformTransformIsNotRegistered     = 18
)
View Source
const (
	KSecReadPermStatus    = 2
	KSecUnlockStateStatus = 1
	KSecWritePermStatus   = 4
)
View Source
const (
	KSecHonorRoot  = 256
	KSecMatchBits  = 3
	KSecUseOnlyGID = 2
	KSecUseOnlyUID = 1
)
View Source
const (
	CallerSecuritySession = 4294967295
	NoSecuritySession     = 0
)
View Source
const (
	CSSM_ACL_KEYCHAIN_PROMPT_CURRENT_VERSION = 257
)
View Source
const (
	CSSM_ACL_PROCESS_SELECTOR_CURRENT_VERSION = 257
)
View Source
const (
	CSSM_APPLEDL_OPEN_PARAMETERS_VERSION = 1
)
View Source
const (
	CSSM_ATTACH_READ_ONLY = 1
)
View Source
const (
	CSSM_ATTRIBUTE_VENDOR_DEFINED = 8388608
)
View Source
const (
	CSSM_DB_ACCESS_RESET = 65536
)
View Source
const (
	CSSM_DB_DATASTORES_UNKNOWN = 4294967295
)
View Source
const (
	CSSM_ESTIMATED_TIME_UNKNOWN = -1
)
View Source
const (
	CSSM_FIELDVALUE_COMPLEX_DATA_TYPE = 4294967295
)
View Source
const (
	CSSM_INVALID_HANDLE = 0
)
View Source
const (
	CSSM_KEYBLOB_RAW_FORMAT_VENDOR_DEFINED = 2147483648
)
View Source
const (
	CSSM_KEYHEADER_VERSION = 2
)
View Source
const (
	CSSM_MODULE_STRING_SIZE = 64
)
View Source
const (
	CSSM_OK = 0
)
View Source
const (
	CSSM_PADDING_APPLE_SSLv2 = 2147483648
)
View Source
const (
	CSSM_PKCS5_PBKDF2_PRF_HMAC_SHA1 = 0
)
View Source
const (
	CSSM_QUERY_RETURN_DATA = 1
)
View Source
const (
	CSSM_QUERY_SIZELIMIT_NONE = 0
)
View Source
const (
	CSSM_QUERY_TIMELIMIT_NONE = 0
)
View Source
const (
	CSSM_TP_ACTION_DEFAULT = 0
)
View Source
const (
	CSSM_VALUE_NOT_AVAILABLE = -1
)
View Source
const (
	KAuthorizationFlagCanNotPreAuthorize = 1
)
View Source
const (
	KSecCSUseAllArchitectures = 1
)
View Source
const (
	KSecNoGuest = 0
)

Variables

This section is empty.

Functions

func AuthorizationCopyInfo

func AuthorizationCopyInfo(authorization unsafe.Pointer, tag string, info *AuthorizationItemSet) int

@function AuthorizationCopyInfo Returns sideband information (e.g. access credentials) obtained from a call to AuthorizationCreate. The format of this data depends of the tag specified. @param authorization (input) The authorization object on which this operation is performed. @param tag (input/optional) An optional string tag specifing which sideband information should be returned. When NULL is specified all available information is returned. @param info (output) A pointer to a newly allocated AuthorizationInfoSet in which the requested sideband infomation is returned (info should be deallocated by calling AuthorizationFreeItemSet() when it is no longer needed). @result errAuthorizationSuccess 0 No error. errAuthorizationInvalidRef -60002 The authorization parameter is invalid. errAuthorizationInvalidTag -60003 The tag parameter is invalid. errAuthorizationInvalidPointer -60004 The info parameter is invalid.

func AuthorizationCopyPrivilegedReference

func AuthorizationCopyPrivilegedReference(authorization unsafe.Pointer, flags AuthorizationFlags) int

@function AuthorizationCopyPrivilegedReference From within a tool launched via the AuthorizationExecuteWithPrivileges function ONLY, retrieve the AuthorizationRef originally passed to that function. While AuthorizationExecuteWithPrivileges already verified the authorization to launch your tool, the tool may want to avail itself of any additional pre-authorizations the caller may have obtained through that reference. @discussion This function has been deprecated and should no longer be used. Use a launchd-launched helper tool and/or the Service Mangement framework for this functionality.

func AuthorizationCopyRights

func AuthorizationCopyRights(authorization unsafe.Pointer, rights *AuthorizationItemSet, environment *AuthorizationItemSet, flags AuthorizationFlags, authorizedRights *AuthorizationItemSet) int

@function AuthorizationCopyRights Given a set of rights, return the subset that is currently authorized by the AuthorizationRef given. When the kAuthorizationFlagInteractionAllowed flag is set, user interaction will happen when required. Failing to set this flag will result in this call failing with a errAuthorizationInteractionNotAllowed status when interaction is required. Setting the kAuthorizationFlagExtendRights flag will extend the currently available rights. Setting the kAuthorizationFlagPartialRights flag will cause this call to succeed if only some of the requested rights are being granted by the returned AuthorizationRef. Unless this flag is set this API will fail if not all the requested rights could be obtained. Setting the kAuthorizationFlagDestroyRights flag will prevent any additional rights obtained during this call from being preserved after returning from this API. Setting the kAuthorizationFlagPreAuthorize flag will pre authorize the requested rights so that at a later time -- by calling AuthorizationMakeExternalForm() follow by AuthorizationCreateFromExternalForm() -- the obtained rights can be used in a different process. Rights that can't be preauthorized will be treated as if they were authorized for the sake of returning an error (in other words if all rights are either authorized or could not be preauthorized this call will still succeed), and they will be returned in authorizedRights with their kAuthorizationFlagCanNotPreAuthorize bit in the flags field set to 1. The rights which could not be preauthorized are not currently authorized and may fail to authorize when a later call to AuthorizationCopyRights() is made, unless the kAuthorizationFlagExtendRights and kAuthorizationFlagInteractionAllowed flags are set. Even then they might still fail if the user does not supply the correct credentials. The reason for passing in this flag is to provide correct audit trail information and to avoid unnecessary user interaction. @param authorization (input) The authorization object on which this operation is performed. @param rights (input) A rights set (see AuthorizationCreate). @param environment (input/optional) An AuthorizationItemSet containing environment state used when making the autorization decision. See the AuthorizationEnvironment type for details. @param flags (input) options specified by the AuthorizationFlags enum. set all unused bits to zero to allow for future expansion. @param authorizedRights (output/optional) A pointer to a newly allocated AuthorizationInfoSet in which the authorized subset of rights are returned (authorizedRights should be deallocated by calling AuthorizationFreeItemSet() when it is no longer needed). If NULL the only information returned is the status. Note that if the kAuthorizationFlagPreAuthorize flag was specified rights that could not be preauthorized are returned in authorizedRights, but their flags contains the kAuthorizationFlagCanNotPreAuthorize bit. @result errAuthorizationSuccess 0 No error. errAuthorizationInvalidRef -60002 The authorization parameter is invalid. errAuthorizationInvalidSet -60001 The rights parameter is invalid. errAuthorizationInvalidPointer -60004 The authorizedRights parameter is invalid.

func AuthorizationCopyRightsAsync

func AuthorizationCopyRightsAsync(authorization unsafe.Pointer, rights *AuthorizationItemSet, environment *AuthorizationItemSet, flags AuthorizationFlags, callbackBlock func(int, *AuthorizationItemSet))

@function AuthorizationCopyRightsAsync An asynchronous version of AuthorizationCopyRights. @param callbackBlock (input) The callback block to be called upon completion.

func AuthorizationCreate

func AuthorizationCreate(rights *AuthorizationItemSet, environment *AuthorizationItemSet, flags AuthorizationFlags, authorization unsafe.Pointer) int

@function AuthorizationCreate Create a new autorization object which can be used in other authorization calls. When the authorization is no longer needed AuthorizationFree should be called. When the kAuthorizationFlagInteractionAllowed flag is set, user interaction will happen when required. Failing to set this flag will result in this call failing with a errAuthorizationInteractionNotAllowed status when interaction is required. Setting the kAuthorizationFlagExtendRights flag will extend the currently available rights. If this flag is set the returned AuthorizationRef will grant all the rights requested when errAuthorizationSuccess is returned. If this flag is not set the operation will almost certainly succeed, but no attempt will be made to make the requested rights availible. Call AuthorizationCopyRights to figure out which of the requested rights are granted by the returned AuthorizationRef. Setting the kAuthorizationFlagPartialRights flag will cause this call to succeed if only some of the requested rights are being granted by the returned AuthorizationRef. Unless this flag is set this API will fail if not all the requested rights could be obtained. Setting the kAuthorizationFlagDestroyRights flag will prevent any rights obtained during this call from being preserved after returning from this API (This is most useful when the authorization parameter is NULL and the caller doesn't want to affect the session state in any way). Setting the kAuthorizationFlagPreAuthorize flag will pre authorize the requested rights so that at a later time -- by calling AuthorizationMakeExternalForm() follow by AuthorizationCreateFromExternalForm() -- the obtained rights can be used in a different process. Rights that can't be preauthorized will be treated as if they were authorized for the sake of returning an error (in other words if all rights are either authorized or could not be preauthorized this call will still succeed). The rights which could not be preauthorized are not currently authorized and may fail to authorize when a later call to AuthorizationCopyRights() is made, unless the kAuthorizationFlagExtendRights and kAuthorizationFlagInteractionAllowed flags are set. Even then they might still fail if the user does not supply the correct credentials. The reason for passing in this flag is to provide correct audit trail information and to avoid unnecessary user interaction. @param rights (input/optional) An AuthorizationItemSet containing rights for which authorization is being requested. If none are specified the resulting AuthorizationRef will authorize nothing at all. @param environment (input/optional) An AuthorizationItemSet containing environment state used when making the autorization decision. See the AuthorizationEnvironment type for details. @param flags (input) options specified by the AuthorizationFlags enum. set all unused bits to zero to allow for future expansion. @param authorization (output optional) A pointer to an AuthorizationRef to be returned. When the returned AuthorizationRef is no longer needed AuthorizationFree should be called to prevent anyone from using the acquired rights. If NULL is specified no new rights are returned, but the system will attempt to authorize all the requested rights and return the appropriate status. @result errAuthorizationSuccess 0 authorization or all requested rights succeeded. errAuthorizationDenied -60005 The authorization for one or more of the requested rights was denied. errAuthorizationCanceled -60006 The authorization was canceled by the user. errAuthorizationInteractionNotAllowed -60007 The authorization was denied since no interaction with the user was allowed.

func AuthorizationCreateFromExternalForm

func AuthorizationCreateFromExternalForm(extForm *AuthorizationExternalForm, authorization unsafe.Pointer) int

@function AuthorizationCreateFromExternalForm Internalize the external "byte blob" form of an authorization reference. @param extForm Pointer to an AuthorizationExternalForm value. @param authorization Will be filled with a valid AuthorizationRef on success. @result errAuthorizationInternalizeNotAllowed -60010 Internalizing this authorization is not allowed.

func AuthorizationExecuteWithPrivileges

func AuthorizationExecuteWithPrivileges(authorization unsafe.Pointer, pathToTool string, options AuthorizationFlags, arguments string, communicationsPipe unsafe.Pointer) int

@function AuthorizationExecuteWithPrivileges Run an executable tool with enhanced privileges after passing suitable authorization procedures. @param authorization An authorization reference that is used to authorize access to the enhanced privileges. It is also passed to the tool for further access control. @param pathToTool Full pathname to the tool that should be executed with enhanced privileges. @param options Option bits (reserved). Must be zero. @param arguments An argv-style vector of strings to be passed to the tool. @param communicationsPipe Assigned a UNIX stdio FILE pointer for a bidirectional pipe to communicate with the tool. The tool will have this pipe as its standard I/O channels (stdin/stdout). If NULL, do not establish a communications pipe. @discussion This function has been deprecated and should no longer be used. Use a launchd-launched helper tool and/or the Service Mangement framework for this functionality.

func AuthorizationFree

func AuthorizationFree(authorization unsafe.Pointer, flags AuthorizationFlags) int

@function AuthorizationFree Destroy an AutorizationRef object. If the kAuthorizationFlagDestroyRights flag is passed, any rights associated with the authorization are lost. Otherwise, only local resources are released, and the rights may still be available to other clients. Setting the kAuthorizationFlagDestroyRights flag will prevent any rights that were obtained by the specified authorization object to be preserved after returning from this API. This effectivaly locks down all potentially shared authorizations. @param authorization (input) The authorization object on which this operation is performed. @param flags (input) Bit mask of option flags to this call. @result errAuthorizationSuccess 0 No error. errAuthorizationInvalidRef -60002 The authorization parameter is invalid.

func AuthorizationFreeItemSet

func AuthorizationFreeItemSet(set *AuthorizationItemSet) int

@function AuthorizationFreeItemSet Release the memory allocated for an AuthorizationItemSet that was allocated by an API call. @param set The AuthorizationItemSet to deallocate. @result errAuthorizationSuccess 0 No error. errAuthorizationInvalidSet -60001 The set parameter is invalid.

func AuthorizationMakeExternalForm

func AuthorizationMakeExternalForm(authorization unsafe.Pointer, extForm *AuthorizationExternalForm) int

@function AuthorizationMakeExternalForm Turn an Authorization into an external "byte blob" form so it can be transmitted to another process. Note that *storing* the external form somewhere will probably not do what you want, since authorizations are bounded by sessions, processes, and possibly time limits. This is for online transmission of authorizations. @param authorization The (valid) authorization reference to externalize @param extForm Pointer to an AuthorizationExternalForm variable to fill. @result errAuthorizationSuccess 0 No error. errAuthorizationExternalizeNotAllowed -60009 Externalizing this authorization is not allowed. errAuthorizationInvalidRef -60002 The authorization parameter is invalid.

func AuthorizationRightGet

func AuthorizationRightGet(rightName string, rightDefinition unsafe.Pointer) int

@function AuthorizationRightGet Retrieves a right definition as a dictionary. There are no restrictions to keep anyone from retrieving these definitions. @param rightName (input) the rightname (ASCII). Wildcard rightname definitions are okay. @param rightDefinition (output/optional) the dictionary with all keys defining the right. See documented keys. Passing in NULL will just check if there is a definition. The caller is responsible for releasing the returned dictionary. @result errAuthorizationSuccess 0 No error. errAuthorizationDenied -60005 No definition found.

func AuthorizationRightRemove

func AuthorizationRightRemove(authRef unsafe.Pointer, rightName string) int

@function AuthorizationRightRemove Request to remove a right from the policy database. @param authRef (input) authRef, to be used to authorize this action. @param rightName (input) the rightname (ASCII). Wildcard rightnames are not okay.

func AuthorizationRightSet

func AuthorizationRightSet(authRef unsafe.Pointer, rightName string, rightDefinition unsafe.Pointer, descriptionKey unsafe.Pointer, bundle unsafe.Pointer, localeTableName unsafe.Pointer) int

@function AuthorizationRightSet Create or update a right entry. Only normal rights can be registered (wildcard rights are denied); wildcard rights are considered to be put in by an administrator putting together a site configuration. @param authRef (input) authRef to authorize modifications. @param rightName (input) the rightname (ASCII). Wildcard rightnames are not okay. @param rightDefinition (input) a CFString of the name of a rule to use (delegate) or CFDictionary containing keys defining one. @param descriptionKey (input/optional) a CFString to use as a key for looking up localized descriptions. If no localization is found this will be the description itself. @param bundle (input/optional) a bundle to get localizations from if not the main bundle. @param localeTableName (input/optional) stringtable name to get localizations from. @result errAuthorizationSuccess 0 added right definition successfully. errAuthorizationDenied -60005 Unable to create or update right definition. errAuthorizationCanceled -60006 Authorization was canceled by user. errAuthorizationInteractionNotAllowed -60007 Interaction was required but not possible.

func CMSDecoderCopyAllCerts

func CMSDecoderCopyAllCerts(cmsDecoder unsafe.Pointer, certsOut unsafe.Pointer) int

func CMSDecoderCopyContent

func CMSDecoderCopyContent(cmsDecoder unsafe.Pointer, contentOut unsafe.Pointer) int

func CMSDecoderCopyDetachedContent

func CMSDecoderCopyDetachedContent(cmsDecoder unsafe.Pointer, detachedContentOut unsafe.Pointer) int

func CMSDecoderCopyEncapsulatedContentType

func CMSDecoderCopyEncapsulatedContentType(cmsDecoder unsafe.Pointer, eContentTypeOut unsafe.Pointer) int

func CMSDecoderCopySignerCert

func CMSDecoderCopySignerCert(cmsDecoder unsafe.Pointer, signerIndex uint, signerCertOut unsafe.Pointer) int

func CMSDecoderCopySignerEmailAddress

func CMSDecoderCopySignerEmailAddress(cmsDecoder unsafe.Pointer, signerIndex uint, signerEmailAddressOut unsafe.Pointer) int

func CMSDecoderCopySignerSigningTime

func CMSDecoderCopySignerSigningTime(cmsDecoder unsafe.Pointer, signerIndex uint, signingTime *float64) int

func CMSDecoderCopySignerStatus

func CMSDecoderCopySignerStatus(cmsDecoder unsafe.Pointer, signerIndex uint, policyOrArray unsafe.Pointer, evaluateSecTrust uint8, signerStatusOut *CMSSignerStatus, secTrustOut unsafe.Pointer, certVerifyResultCodeOut *int) int

func CMSDecoderCopySignerTimestamp

func CMSDecoderCopySignerTimestamp(cmsDecoder unsafe.Pointer, signerIndex uint, timestamp *float64) int

func CMSDecoderCopySignerTimestampCertificates

func CMSDecoderCopySignerTimestampCertificates(cmsDecoder unsafe.Pointer, signerIndex uint, certificateRefs unsafe.Pointer) int

func CMSDecoderCopySignerTimestampWithPolicy

func CMSDecoderCopySignerTimestampWithPolicy(cmsDecoder unsafe.Pointer, timeStampPolicy unsafe.Pointer, signerIndex uint, timestamp *float64) int

func CMSDecoderCreate

func CMSDecoderCreate(cmsDecoderOut unsafe.Pointer) int

func CMSDecoderFinalizeMessage

func CMSDecoderFinalizeMessage(cmsDecoder unsafe.Pointer) int

func CMSDecoderGetNumSigners

func CMSDecoderGetNumSigners(cmsDecoder unsafe.Pointer, numSignersOut *uint) int

func CMSDecoderGetTypeID

func CMSDecoderGetTypeID() uint

func CMSDecoderIsContentEncrypted

func CMSDecoderIsContentEncrypted(cmsDecoder unsafe.Pointer, isEncryptedOut *uint8) int

func CMSDecoderSetDetachedContent

func CMSDecoderSetDetachedContent(cmsDecoder unsafe.Pointer, detachedContent unsafe.Pointer) int

func CMSDecoderSetSearchKeychain deprecated

func CMSDecoderSetSearchKeychain(cmsDecoder unsafe.Pointer, keychainOrArray unsafe.Pointer) int

Deprecated: since macOS 10.13.

func CMSDecoderUpdateMessage

func CMSDecoderUpdateMessage(cmsDecoder unsafe.Pointer, msgBytes unsafe.Pointer, msgBytesLen uint) int

func CMSEncode deprecated

func CMSEncode(signers unsafe.Pointer, recipients unsafe.Pointer, eContentType *CssmData, detachedContent uint8, signedAttributes CMSSignedAttributes, content unsafe.Pointer, contentLen uint, encodedContentOut unsafe.Pointer) int

Deprecated: since macOS 10.7.

func CMSEncodeContent

func CMSEncodeContent(signers unsafe.Pointer, recipients unsafe.Pointer, eContentTypeOID unsafe.Pointer, detachedContent uint8, signedAttributes CMSSignedAttributes, content unsafe.Pointer, contentLen uint, encodedContentOut unsafe.Pointer) int

func CMSEncoderAddRecipients

func CMSEncoderAddRecipients(cmsEncoder unsafe.Pointer, recipientOrArray unsafe.Pointer) int

func CMSEncoderAddSignedAttributes

func CMSEncoderAddSignedAttributes(cmsEncoder unsafe.Pointer, signedAttributes CMSSignedAttributes) int

func CMSEncoderAddSigners

func CMSEncoderAddSigners(cmsEncoder unsafe.Pointer, signerOrArray unsafe.Pointer) int

func CMSEncoderAddSupportingCerts

func CMSEncoderAddSupportingCerts(cmsEncoder unsafe.Pointer, certOrArray unsafe.Pointer) int

func CMSEncoderCopyEncapsulatedContentType

func CMSEncoderCopyEncapsulatedContentType(cmsEncoder unsafe.Pointer, eContentTypeOut unsafe.Pointer) int

func CMSEncoderCopyEncodedContent

func CMSEncoderCopyEncodedContent(cmsEncoder unsafe.Pointer, encodedContentOut unsafe.Pointer) int

func CMSEncoderCopyRecipients

func CMSEncoderCopyRecipients(cmsEncoder unsafe.Pointer, recipientsOut unsafe.Pointer) int

func CMSEncoderCopySignerTimestamp

func CMSEncoderCopySignerTimestamp(cmsEncoder unsafe.Pointer, signerIndex uint, timestamp *float64) int

func CMSEncoderCopySignerTimestampWithPolicy

func CMSEncoderCopySignerTimestampWithPolicy(cmsEncoder unsafe.Pointer, timeStampPolicy unsafe.Pointer, signerIndex uint, timestamp *float64) int

func CMSEncoderCopySigners

func CMSEncoderCopySigners(cmsEncoder unsafe.Pointer, signersOut unsafe.Pointer) int

func CMSEncoderCopySupportingCerts

func CMSEncoderCopySupportingCerts(cmsEncoder unsafe.Pointer, certsOut unsafe.Pointer) int

func CMSEncoderCreate

func CMSEncoderCreate(cmsEncoderOut unsafe.Pointer) int

func CMSEncoderGetCertificateChainMode

func CMSEncoderGetCertificateChainMode(cmsEncoder unsafe.Pointer, chainModeOut *CMSCertificateChainMode) int

func CMSEncoderGetHasDetachedContent

func CMSEncoderGetHasDetachedContent(cmsEncoder unsafe.Pointer, detachedContentOut *uint8) int

func CMSEncoderGetTypeID

func CMSEncoderGetTypeID() uint

func CMSEncoderSetCertificateChainMode

func CMSEncoderSetCertificateChainMode(cmsEncoder unsafe.Pointer, chainMode CMSCertificateChainMode) int

func CMSEncoderSetEncapsulatedContentType deprecated

func CMSEncoderSetEncapsulatedContentType(cmsEncoder unsafe.Pointer, eContentType *CssmData) int

Deprecated: since macOS 10.7.

func CMSEncoderSetEncapsulatedContentTypeOID

func CMSEncoderSetEncapsulatedContentTypeOID(cmsEncoder unsafe.Pointer, eContentTypeOID unsafe.Pointer) int

func CMSEncoderSetHasDetachedContent

func CMSEncoderSetHasDetachedContent(cmsEncoder unsafe.Pointer, detachedContent uint8) int

func CMSEncoderSetSignerAlgorithm

func CMSEncoderSetSignerAlgorithm(cmsEncoder unsafe.Pointer, digestAlgorithm unsafe.Pointer) int

func CMSEncoderUpdateContent

func CMSEncoderUpdateContent(cmsEncoder unsafe.Pointer, content unsafe.Pointer, contentLen uint) int

func CSSM_AC_AuthCompute

func CSSM_AC_AuthCompute(aCHandle int, baseAuthorizations *CssmTuplegroup, credentials *CssmTuplegroup, numberOfRequestors uint32, requestors *CssmList, requestedAuthorizationPeriod *CssmList, requestedAuthorization *CssmList, authorizationResult *CssmTuplegroup) int32

func CSSM_AC_PassThrough

func CSSM_AC_PassThrough(aCHandle int, tPHandle int, cLHandle int, cCHandle uint64, dBList *CssmDlDbList, passThroughId uint32, inputParams unsafe.Pointer, outputParams unsafe.Pointer) int32

func CSSM_CL_CertAbortCache

func CSSM_CL_CertAbortCache(cLHandle int, certHandle int) int32

func CSSM_CL_CertAbortQuery

func CSSM_CL_CertAbortQuery(cLHandle int, resultsHandle int) int32

func CSSM_CL_CertCache

func CSSM_CL_CertCache(cLHandle int, cert *CssmData, certHandle *int) int32

func CSSM_CL_CertCreateTemplate

func CSSM_CL_CertCreateTemplate(cLHandle int, numberOfFields uint32, certFields *CssmField, certTemplate *CssmData) int32

func CSSM_CL_CertDescribeFormat

func CSSM_CL_CertDescribeFormat(cLHandle int, numberOfFields *uint32, oidList **CssmData) int32

func CSSM_CL_CertGetAllFields

func CSSM_CL_CertGetAllFields(cLHandle int, cert *CssmData, numberOfFields *uint32, certFields **CssmField) int32

func CSSM_CL_CertGetAllTemplateFields

func CSSM_CL_CertGetAllTemplateFields(cLHandle int, certTemplate *CssmData, numberOfFields *uint32, certFields **CssmField) int32

func CSSM_CL_CertGetFirstCachedFieldValue

func CSSM_CL_CertGetFirstCachedFieldValue(cLHandle int, certHandle int, certField *CssmData, resultsHandle *int, numberOfMatchedFields *uint32, value **CssmData) int32

func CSSM_CL_CertGetFirstFieldValue

func CSSM_CL_CertGetFirstFieldValue(cLHandle int, cert *CssmData, certField *CssmData, resultsHandle *int, numberOfMatchedFields *uint32, value **CssmData) int32

func CSSM_CL_CertGetKeyInfo

func CSSM_CL_CertGetKeyInfo(cLHandle int, cert *CssmData, key **CssmKey) int32

func CSSM_CL_CertGetNextCachedFieldValue

func CSSM_CL_CertGetNextCachedFieldValue(cLHandle int, resultsHandle int, value **CssmData) int32

func CSSM_CL_CertGetNextFieldValue

func CSSM_CL_CertGetNextFieldValue(cLHandle int, resultsHandle int, value **CssmData) int32

func CSSM_CL_CertGroupFromVerifiedBundle

func CSSM_CL_CertGroupFromVerifiedBundle(cLHandle int, cCHandle uint64, certBundle *CssmCertBundle, signerCert *CssmData, certGroup **CssmCertgroup) int32

func CSSM_CL_CertGroupToSignedBundle

func CSSM_CL_CertGroupToSignedBundle(cLHandle int, cCHandle uint64, certGroupToBundle *CssmCertgroup, bundleInfo *CssmCertBundleHeader, signedBundle *CssmData) int32

func CSSM_CL_CertSign

func CSSM_CL_CertSign(cLHandle int, cCHandle uint64, certTemplate *CssmData, signScope *CssmField, scopeSize uint32, signedCert *CssmData) int32

func CSSM_CL_CertVerify

func CSSM_CL_CertVerify(cLHandle int, cCHandle uint64, certToBeVerified *CssmData, signerCert *CssmData, verifyScope *CssmField, scopeSize uint32) int32

func CSSM_CL_CertVerifyWithKey

func CSSM_CL_CertVerifyWithKey(cLHandle int, cCHandle uint64, certToBeVerified *CssmData) int32

func CSSM_CL_CrlAbortCache

func CSSM_CL_CrlAbortCache(cLHandle int, crlHandle int) int32

func CSSM_CL_CrlAbortQuery

func CSSM_CL_CrlAbortQuery(cLHandle int, resultsHandle int) int32

func CSSM_CL_CrlAddCert

func CSSM_CL_CrlAddCert(cLHandle int, cCHandle uint64, cert *CssmData, numberOfFields uint32, crlEntryFields *CssmField, oldCrl *CssmData, newCrl *CssmData) int32

func CSSM_CL_CrlCache

func CSSM_CL_CrlCache(cLHandle int, crl *CssmData, crlHandle *int) int32

func CSSM_CL_CrlCreateTemplate

func CSSM_CL_CrlCreateTemplate(cLHandle int, numberOfFields uint32, crlTemplate *CssmField, newCrl *CssmData) int32

func CSSM_CL_CrlDescribeFormat

func CSSM_CL_CrlDescribeFormat(cLHandle int, numberOfFields *uint32, oidList **CssmData) int32

func CSSM_CL_CrlGetAllCachedRecordFields

func CSSM_CL_CrlGetAllCachedRecordFields(cLHandle int, crlHandle int, crlRecordIndex *CssmData, numberOfFields *uint32, crlFields **CssmField) int32

func CSSM_CL_CrlGetAllFields

func CSSM_CL_CrlGetAllFields(cLHandle int, crl *CssmData, numberOfCrlFields *uint32, crlFields **CssmField) int32

func CSSM_CL_CrlGetFirstCachedFieldValue

func CSSM_CL_CrlGetFirstCachedFieldValue(cLHandle int, crlHandle int, crlRecordIndex *CssmData, crlField *CssmData, resultsHandle *int, numberOfMatchedFields *uint32, value **CssmData) int32

func CSSM_CL_CrlGetFirstFieldValue

func CSSM_CL_CrlGetFirstFieldValue(cLHandle int, crl *CssmData, crlField *CssmData, resultsHandle *int, numberOfMatchedFields *uint32, value **CssmData) int32

func CSSM_CL_CrlGetNextCachedFieldValue

func CSSM_CL_CrlGetNextCachedFieldValue(cLHandle int, resultsHandle int, value **CssmData) int32

func CSSM_CL_CrlGetNextFieldValue

func CSSM_CL_CrlGetNextFieldValue(cLHandle int, resultsHandle int, value **CssmData) int32

func CSSM_CL_CrlRemoveCert

func CSSM_CL_CrlRemoveCert(cLHandle int, cert *CssmData, oldCrl *CssmData, newCrl *CssmData) int32

func CSSM_CL_CrlSetFields

func CSSM_CL_CrlSetFields(cLHandle int, numberOfFields uint32, crlTemplate *CssmField, oldCrl *CssmData, modifiedCrl *CssmData) int32

func CSSM_CL_CrlSign

func CSSM_CL_CrlSign(cLHandle int, cCHandle uint64, unsignedCrl *CssmData, signScope *CssmField, scopeSize uint32, signedCrl *CssmData) int32

func CSSM_CL_CrlVerify

func CSSM_CL_CrlVerify(cLHandle int, cCHandle uint64, crlToBeVerified *CssmData, signerCert *CssmData, verifyScope *CssmField, scopeSize uint32) int32

func CSSM_CL_CrlVerifyWithKey

func CSSM_CL_CrlVerifyWithKey(cLHandle int, cCHandle uint64, crlToBeVerified *CssmData) int32

func CSSM_CL_FreeFieldValue

func CSSM_CL_FreeFieldValue(cLHandle int, certOrCrlOid *CssmData, value *CssmData) int32

func CSSM_CL_FreeFields

func CSSM_CL_FreeFields(cLHandle int, numberOfFields uint32, fields **CssmField) int32

func CSSM_CL_IsCertInCachedCrl

func CSSM_CL_IsCertInCachedCrl(cLHandle int, cert *CssmData, crlHandle int, certFound *int32, crlRecordIndex *CssmData) int32

func CSSM_CL_IsCertInCrl

func CSSM_CL_IsCertInCrl(cLHandle int, cert *CssmData, crl *CssmData, certFound *int32) int32

func CSSM_CL_PassThrough

func CSSM_CL_PassThrough(cLHandle int, cCHandle uint64, passThroughId uint32, inputParams unsafe.Pointer, outputParams unsafe.Pointer) int32

func CSSM_CSP_ChangeLoginAcl

func CSSM_CSP_ChangeLoginAcl(cSPHandle int, accessCred *CssmAccessCredentials, aclEdit *CssmAclEdit) int32

func CSSM_CSP_ChangeLoginOwner

func CSSM_CSP_ChangeLoginOwner(cSPHandle int, accessCred *CssmAccessCredentials, newOwner *CssmAclOwnerPrototype) int32

func CSSM_CSP_CreateAsymmetricContext

func CSSM_CSP_CreateAsymmetricContext(cSPHandle int, algorithmID uint32, accessCred *CssmAccessCredentials, key *CssmKey, padding uint32, newContextHandle *uint64) int32

func CSSM_CSP_CreateDeriveKeyContext

func CSSM_CSP_CreateDeriveKeyContext(cSPHandle int, algorithmID uint32, deriveKeyType uint32, deriveKeyLengthInBits uint32, accessCred *CssmAccessCredentials, baseKey *CssmKey, iterationCount uint32, salt *CssmData, seed *CssmCryptoData, newContextHandle *uint64) int32

func CSSM_CSP_CreateDigestContext

func CSSM_CSP_CreateDigestContext(cSPHandle int, algorithmID uint32, newContextHandle *uint64) int32

func CSSM_CSP_CreateKeyGenContext

func CSSM_CSP_CreateKeyGenContext(cSPHandle int, algorithmID uint32, keySizeInBits uint32, seed *CssmCryptoData, salt *CssmData, startDate *CssmDate, endDate *CssmDate, params *CssmData, newContextHandle *uint64) int32

func CSSM_CSP_CreateMacContext

func CSSM_CSP_CreateMacContext(cSPHandle int, algorithmID uint32, key *CssmKey, newContextHandle *uint64) int32

func CSSM_CSP_CreatePassThroughContext

func CSSM_CSP_CreatePassThroughContext(cSPHandle int, key *CssmKey, newContextHandle *uint64) int32

func CSSM_CSP_CreateRandomGenContext

func CSSM_CSP_CreateRandomGenContext(cSPHandle int, algorithmID uint32, seed *CssmCryptoData, length uint, newContextHandle *uint64) int32

func CSSM_CSP_CreateSignatureContext

func CSSM_CSP_CreateSignatureContext(cSPHandle int, algorithmID uint32, accessCred *CssmAccessCredentials, key *CssmKey, newContextHandle *uint64) int32

func CSSM_CSP_CreateSymmetricContext

func CSSM_CSP_CreateSymmetricContext(cSPHandle int, algorithmID uint32, mode uint32, accessCred *CssmAccessCredentials, key *CssmKey, initVector *CssmData, padding uint32, reserved unsafe.Pointer, newContextHandle *uint64) int32

func CSSM_CSP_GetLoginAcl

func CSSM_CSP_GetLoginAcl(cSPHandle int, selectionTag *[68]int8, numberOfAclInfos *uint32, aclInfos **CssmAclEntryInfo) int32

func CSSM_CSP_GetLoginOwner

func CSSM_CSP_GetLoginOwner(cSPHandle int, owner *CssmAclOwnerPrototype) int32

func CSSM_CSP_GetOperationalStatistics

func CSSM_CSP_GetOperationalStatistics(cSPHandle int, statistics *CssmCspOperationalStatistics) int32

func CSSM_CSP_Login

func CSSM_CSP_Login(cSPHandle int, accessCred *CssmAccessCredentials, loginName *CssmData, reserved unsafe.Pointer) int32

func CSSM_CSP_Logout

func CSSM_CSP_Logout(cSPHandle int) int32

func CSSM_CSP_ObtainPrivateKeyFromPublicKey

func CSSM_CSP_ObtainPrivateKeyFromPublicKey(cSPHandle int, publicKey *CssmKey, privateKey *CssmKey) int32

func CSSM_CSP_PassThrough

func CSSM_CSP_PassThrough(cCHandle uint64, passThroughId uint32, inData unsafe.Pointer, outData unsafe.Pointer) int32

func CSSM_ChangeKeyAcl

func CSSM_ChangeKeyAcl(cSPHandle int, accessCred *CssmAccessCredentials, aclEdit *CssmAclEdit, key *CssmKey) int32

func CSSM_ChangeKeyOwner

func CSSM_ChangeKeyOwner(cSPHandle int, accessCred *CssmAccessCredentials, key *CssmKey, newOwner *CssmAclOwnerPrototype) int32

func CSSM_DL_Authenticate

func CSSM_DL_Authenticate(dLDBHandle CssmDlDbHandle, accessRequest uint32, accessCred *CssmAccessCredentials) int32

func CSSM_DL_ChangeDbAcl

func CSSM_DL_ChangeDbAcl(dLDBHandle CssmDlDbHandle, accessCred *CssmAccessCredentials, aclEdit *CssmAclEdit) int32

func CSSM_DL_ChangeDbOwner

func CSSM_DL_ChangeDbOwner(dLDBHandle CssmDlDbHandle, accessCred *CssmAccessCredentials, newOwner *CssmAclOwnerPrototype) int32

func CSSM_DL_CreateRelation

func CSSM_DL_CreateRelation(dLDBHandle CssmDlDbHandle, relationID uint32, relationName string, numberOfAttributes uint32, pAttributeInfo *CssmDbSchemaAttributeInfo, numberOfIndexes uint32, pIndexInfo *CssmDbSchemaIndexInfo) int32

func CSSM_DL_DataAbortQuery

func CSSM_DL_DataAbortQuery(dLDBHandle CssmDlDbHandle, resultsHandle int) int32

func CSSM_DL_DataDelete

func CSSM_DL_DataDelete(dLDBHandle CssmDlDbHandle, uniqueRecordIdentifier *CssmDbUniqueRecord) int32

func CSSM_DL_DataGetFirst

func CSSM_DL_DataGetFirst(dLDBHandle CssmDlDbHandle, query *CssmQuery, resultsHandle *int, attributes *CssmDbRecordAttributeData, data *CssmData, uniqueId **CssmDbUniqueRecord) int32

func CSSM_DL_DataGetFromUniqueRecordId

func CSSM_DL_DataGetFromUniqueRecordId(dLDBHandle CssmDlDbHandle, uniqueRecord *CssmDbUniqueRecord, attributes *CssmDbRecordAttributeData, data *CssmData) int32

func CSSM_DL_DataGetNext

func CSSM_DL_DataGetNext(dLDBHandle CssmDlDbHandle, resultsHandle int, attributes *CssmDbRecordAttributeData, data *CssmData, uniqueId **CssmDbUniqueRecord) int32

func CSSM_DL_DataInsert

func CSSM_DL_DataInsert(dLDBHandle CssmDlDbHandle, recordType uint32, attributes *CssmDbRecordAttributeData, data *CssmData, uniqueId **CssmDbUniqueRecord) int32

func CSSM_DL_DataModify

func CSSM_DL_DataModify(dLDBHandle CssmDlDbHandle, recordType uint32, uniqueRecordIdentifier *CssmDbUniqueRecord, attributesToBeModified *CssmDbRecordAttributeData, dataToBeModified *CssmData, modifyMode uint32) int32

func CSSM_DL_DbClose

func CSSM_DL_DbClose(dLDBHandle CssmDlDbHandle) int32

func CSSM_DL_DbCreate

func CSSM_DL_DbCreate(dLHandle int, dbName string, dbLocation *CssmNetAddress, dBInfo *CssmDbinfo, accessRequest uint32, credAndAclEntry *CssmResourceControlContext, openParameters unsafe.Pointer, dbHandle *int) int32

func CSSM_DL_DbDelete

func CSSM_DL_DbDelete(dLHandle int, dbName string, dbLocation *CssmNetAddress, accessCred *CssmAccessCredentials) int32

func CSSM_DL_DbOpen

func CSSM_DL_DbOpen(dLHandle int, dbName string, dbLocation *CssmNetAddress, accessRequest uint32, accessCred *CssmAccessCredentials, openParameters unsafe.Pointer, dbHandle *int) int32

func CSSM_DL_DestroyRelation

func CSSM_DL_DestroyRelation(dLDBHandle CssmDlDbHandle, relationID uint32) int32

func CSSM_DL_FreeNameList

func CSSM_DL_FreeNameList(dLHandle int, nameList *CssmNameList) int32

func CSSM_DL_FreeUniqueRecord

func CSSM_DL_FreeUniqueRecord(dLDBHandle CssmDlDbHandle, uniqueRecord *CssmDbUniqueRecord) int32

func CSSM_DL_GetDbAcl

func CSSM_DL_GetDbAcl(dLDBHandle CssmDlDbHandle, selectionTag *[68]int8, numberOfAclInfos *uint32, aclInfos **CssmAclEntryInfo) int32

func CSSM_DL_GetDbNameFromHandle

func CSSM_DL_GetDbNameFromHandle(dLDBHandle CssmDlDbHandle, dbName string) int32

func CSSM_DL_GetDbNames

func CSSM_DL_GetDbNames(dLHandle int, nameList **CssmNameList) int32

func CSSM_DL_GetDbOwner

func CSSM_DL_GetDbOwner(dLDBHandle CssmDlDbHandle, owner *CssmAclOwnerPrototype) int32

func CSSM_DL_PassThrough

func CSSM_DL_PassThrough(dLDBHandle CssmDlDbHandle, passThroughId uint32, inputParams unsafe.Pointer, outputParams unsafe.Pointer) int32

func CSSM_DecryptData

func CSSM_DecryptData(cCHandle uint64, cipherBufs *CssmData, cipherBufCount uint32, clearBufs *CssmData, clearBufCount uint32, bytesDecrypted *uint, remData *CssmData) int32

func CSSM_DecryptDataFinal

func CSSM_DecryptDataFinal(cCHandle uint64, remData *CssmData) int32

func CSSM_DecryptDataInit

func CSSM_DecryptDataInit(cCHandle uint64) int32

func CSSM_DecryptDataInitP

func CSSM_DecryptDataInitP(cCHandle uint64, privilege uint64) int32

func CSSM_DecryptDataP

func CSSM_DecryptDataP(cCHandle uint64, cipherBufs *CssmData, cipherBufCount uint32, clearBufs *CssmData, clearBufCount uint32, bytesDecrypted *uint, remData *CssmData, privilege uint64) int32

func CSSM_DecryptDataUpdate

func CSSM_DecryptDataUpdate(cCHandle uint64, cipherBufs *CssmData, cipherBufCount uint32, clearBufs *CssmData, clearBufCount uint32, bytesDecrypted *uint) int32

func CSSM_DeleteContext

func CSSM_DeleteContext(cCHandle uint64) int32

func CSSM_DeleteContextAttributes

func CSSM_DeleteContextAttributes(cCHandle uint64, numberOfAttributes uint32, contextAttributes *CssmContextAttribute) int32

func CSSM_DeriveKey

func CSSM_DeriveKey(cCHandle uint64, param *CssmData, keyUsage uint32, keyAttr uint32, keyLabel *CssmData, credAndAclEntry *CssmResourceControlContext, derivedKey *CssmKey) int32

func CSSM_DigestData

func CSSM_DigestData(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32, digest *CssmData) int32

func CSSM_DigestDataClone

func CSSM_DigestDataClone(cCHandle uint64, clonednewCCHandle *uint64) int32

func CSSM_DigestDataFinal

func CSSM_DigestDataFinal(cCHandle uint64, digest *CssmData) int32

func CSSM_DigestDataInit

func CSSM_DigestDataInit(cCHandle uint64) int32

func CSSM_DigestDataUpdate

func CSSM_DigestDataUpdate(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32) int32

func CSSM_EncryptData

func CSSM_EncryptData(cCHandle uint64, clearBufs *CssmData, clearBufCount uint32, cipherBufs *CssmData, cipherBufCount uint32, bytesEncrypted *uint, remData *CssmData) int32

func CSSM_EncryptDataFinal

func CSSM_EncryptDataFinal(cCHandle uint64, remData *CssmData) int32

func CSSM_EncryptDataInit

func CSSM_EncryptDataInit(cCHandle uint64) int32

func CSSM_EncryptDataInitP

func CSSM_EncryptDataInitP(cCHandle uint64, privilege uint64) int32

func CSSM_EncryptDataP

func CSSM_EncryptDataP(cCHandle uint64, clearBufs *CssmData, clearBufCount uint32, cipherBufs *CssmData, cipherBufCount uint32, bytesEncrypted *uint, remData *CssmData, privilege uint64) int32

func CSSM_EncryptDataUpdate

func CSSM_EncryptDataUpdate(cCHandle uint64, clearBufs *CssmData, clearBufCount uint32, cipherBufs *CssmData, cipherBufCount uint32, bytesEncrypted *uint) int32

func CSSM_FreeContext

func CSSM_FreeContext(context_ *CssmContext) int32

func CSSM_FreeKey

func CSSM_FreeKey(cSPHandle int, accessCred *CssmAccessCredentials, keyPtr *CssmKey, delete_ int32) int32

func CSSM_GenerateAlgorithmParams

func CSSM_GenerateAlgorithmParams(cCHandle uint64, paramBits uint32, param *CssmData) int32

func CSSM_GenerateKey

func CSSM_GenerateKey(cCHandle uint64, keyUsage uint32, keyAttr uint32, keyLabel *CssmData, credAndAclEntry *CssmResourceControlContext, key *CssmKey) int32

func CSSM_GenerateKeyP

func CSSM_GenerateKeyP(cCHandle uint64, keyUsage uint32, keyAttr uint32, keyLabel *CssmData, credAndAclEntry *CssmResourceControlContext, key *CssmKey, privilege uint64) int32

func CSSM_GenerateKeyPair

func CSSM_GenerateKeyPair(cCHandle uint64, publicKeyUsage uint32, publicKeyAttr uint32, publicKeyLabel *CssmData, publicKey *CssmKey, privateKeyUsage uint32, privateKeyAttr uint32, privateKeyLabel *CssmData, credAndAclEntry *CssmResourceControlContext, privateKey *CssmKey) int32

func CSSM_GenerateKeyPairP

func CSSM_GenerateKeyPairP(cCHandle uint64, publicKeyUsage uint32, publicKeyAttr uint32, publicKeyLabel *CssmData, publicKey *CssmKey, privateKeyUsage uint32, privateKeyAttr uint32, privateKeyLabel *CssmData, credAndAclEntry *CssmResourceControlContext, privateKey *CssmKey, privilege uint64) int32

func CSSM_GenerateMac

func CSSM_GenerateMac(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32, mac *CssmData) int32

func CSSM_GenerateMacFinal

func CSSM_GenerateMacFinal(cCHandle uint64, mac *CssmData) int32

func CSSM_GenerateMacInit

func CSSM_GenerateMacInit(cCHandle uint64) int32

func CSSM_GenerateMacUpdate

func CSSM_GenerateMacUpdate(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32) int32

func CSSM_GenerateRandom

func CSSM_GenerateRandom(cCHandle uint64, randomNumber *CssmData) int32

func CSSM_GetAPIMemoryFunctions

func CSSM_GetAPIMemoryFunctions(addInHandle int, appMemoryFuncs *CssmMemoryFuncs) int32

func CSSM_GetContext

func CSSM_GetContext(cCHandle uint64, context_ **CssmContext) int32

func CSSM_GetContextAttribute

func CSSM_GetContextAttribute(context_ *CssmContext, attributeType uint32, contextAttribute **CssmContextAttribute) int32

func CSSM_GetKeyAcl

func CSSM_GetKeyAcl(cSPHandle int, key *CssmKey, selectionTag *[68]int8, numberOfAclInfos *uint32, aclInfos **CssmAclEntryInfo) int32

func CSSM_GetKeyOwner

func CSSM_GetKeyOwner(cSPHandle int, key *CssmKey, owner *CssmAclOwnerPrototype) int32

func CSSM_GetModuleGUIDFromHandle

func CSSM_GetModuleGUIDFromHandle(moduleHandle int, moduleGUID *CssmGuid) int32

func CSSM_GetPrivilege

func CSSM_GetPrivilege(privilege *uint64) int32

func CSSM_GetSubserviceUIDFromHandle

func CSSM_GetSubserviceUIDFromHandle(moduleHandle int, subserviceUID *CssmSubserviceUid) int32

func CSSM_GetTimeValue

func CSSM_GetTimeValue(cSPHandle int, timeAlgorithm uint32, timeData *CssmData) int32

func CSSM_Init

func CSSM_Init(version *CssmVersion, scope uint32, callerGuid *CssmGuid, keyHierarchy uint32, pvcPolicy *uint32, reserved unsafe.Pointer) int32

func CSSM_Introduce

func CSSM_Introduce(moduleID *CssmGuid, keyHierarchy uint32) int32

func CSSM_ListAttachedModuleManagers

func CSSM_ListAttachedModuleManagers(numberOfModuleManagers *uint32, moduleManagerGuids *CssmGuid) int32

func CSSM_ModuleAttach

func CSSM_ModuleAttach(moduleGuid *CssmGuid, version *CssmVersion, memoryFuncs *CssmMemoryFuncs, subserviceID uint32, subServiceType uint32, attachFlags uint32, keyHierarchy uint32, functionTable *CssmFuncNameAddr, numFunctionTable uint32, reserved unsafe.Pointer, newModuleHandle *int) int32

func CSSM_ModuleDetach

func CSSM_ModuleDetach(moduleHandle int) int32

func CSSM_ModuleLoad

func CSSM_ModuleLoad(moduleGuid *CssmGuid, keyHierarchy uint32, appNotifyCallback unsafe.Pointer, appNotifyCallbackCtx unsafe.Pointer) int32

func CSSM_ModuleUnload

func CSSM_ModuleUnload(moduleGuid *CssmGuid, appNotifyCallback unsafe.Pointer, appNotifyCallbackCtx unsafe.Pointer) int32

func CSSM_QueryKeySizeInBits

func CSSM_QueryKeySizeInBits(cSPHandle int, cCHandle uint64, key *CssmKey, keySize *CssmKeySize) int32

func CSSM_QuerySize

func CSSM_QuerySize(cCHandle uint64, encrypt int32, querySizeCount uint32, dataBlockSizes *CssmQuerySizeData) int32

func CSSM_RetrieveCounter

func CSSM_RetrieveCounter(cSPHandle int, counter *CssmData) int32

func CSSM_RetrieveUniqueId

func CSSM_RetrieveUniqueId(cSPHandle int, uniqueID *CssmData) int32

func CSSM_SetContext

func CSSM_SetContext(cCHandle uint64, context_ *CssmContext) int32

func CSSM_SetPrivilege

func CSSM_SetPrivilege(privilege uint64) int32

func CSSM_SignData

func CSSM_SignData(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32, digestAlgorithm uint32, signature *CssmData) int32

func CSSM_SignDataFinal

func CSSM_SignDataFinal(cCHandle uint64, signature *CssmData) int32

func CSSM_SignDataInit

func CSSM_SignDataInit(cCHandle uint64) int32

func CSSM_SignDataUpdate

func CSSM_SignDataUpdate(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32) int32

func CSSM_TP_ApplyCrlToDb

func CSSM_TP_ApplyCrlToDb(tPHandle int, cLHandle int, cSPHandle int, crlToBeApplied *CssmEncodedCrl, signerCertGroup *CssmCertgroup, applyCrlVerifyContext *CssmTpVerifyContext, applyCrlVerifyResult *CssmTpVerifyContextResult) int32

func CSSM_TP_CertCreateTemplate

func CSSM_TP_CertCreateTemplate(tPHandle int, cLHandle int, numberOfFields uint32, certFields *CssmField, certTemplate *CssmData) int32

func CSSM_TP_CertGetAllTemplateFields

func CSSM_TP_CertGetAllTemplateFields(tPHandle int, cLHandle int, certTemplate *CssmData, numberOfFields *uint32, certFields **CssmField) int32

func CSSM_TP_CertGroupConstruct

func CSSM_TP_CertGroupConstruct(tPHandle int, cLHandle int, cSPHandle int, dBList *CssmDlDbList, constructParams unsafe.Pointer, certGroupFrag *CssmCertgroup, certGroup **CssmCertgroup) int32

func CSSM_TP_CertGroupPrune

func CSSM_TP_CertGroupPrune(tPHandle int, cLHandle int, dBList *CssmDlDbList, orderedCertGroup *CssmCertgroup, prunedCertGroup **CssmCertgroup) int32

func CSSM_TP_CertGroupToTupleGroup

func CSSM_TP_CertGroupToTupleGroup(tPHandle int, cLHandle int, certGroup *CssmCertgroup, tupleGroup **CssmTuplegroup) int32

func CSSM_TP_CertGroupVerify

func CSSM_TP_CertGroupVerify(tPHandle int, cLHandle int, cSPHandle int, certGroupToBeVerified *CssmCertgroup, verifyContext *CssmTpVerifyContext, verifyContextResult *CssmTpVerifyContextResult) int32

func CSSM_TP_CertReclaimAbort

func CSSM_TP_CertReclaimAbort(tPHandle int, keyCacheHandle uint64) int32

func CSSM_TP_CertReclaimKey

func CSSM_TP_CertReclaimKey(tPHandle int, certGroup *CssmCertgroup, certIndex uint32, keyCacheHandle uint64, cSPHandle int, credAndAclEntry *CssmResourceControlContext) int32

func CSSM_TP_CertRemoveFromCrlTemplate

func CSSM_TP_CertRemoveFromCrlTemplate(tPHandle int, cLHandle int, cSPHandle int, oldCrlTemplate *CssmData, certGroupToBeRemoved *CssmCertgroup, revokerCertGroup *CssmCertgroup, revokerVerifyContext *CssmTpVerifyContext, revokerVerifyResult *CssmTpVerifyContextResult, newCrlTemplate *CssmData) int32

func CSSM_TP_CertRevoke

func CSSM_TP_CertRevoke(tPHandle int, cLHandle int, cSPHandle int, oldCrlTemplate *CssmData, certGroupToBeRevoked *CssmCertgroup, revokerCertGroup *CssmCertgroup, revokerVerifyContext *CssmTpVerifyContext, revokerVerifyResult *CssmTpVerifyContextResult, reason uint32, newCrlTemplate *CssmData) int32

func CSSM_TP_CertSign

func CSSM_TP_CertSign(tPHandle int, cLHandle int, cCHandle uint64, certTemplateToBeSigned *CssmData, signerCertGroup *CssmCertgroup, signerVerifyContext *CssmTpVerifyContext, signerVerifyResult *CssmTpVerifyContextResult, signedCert *CssmData) int32

func CSSM_TP_ConfirmCredResult

func CSSM_TP_ConfirmCredResult(tPHandle int, referenceIdentifier *CssmData, callerAuthCredentials *CssmTpCallerauthContext, responses *CssmTpConfirmResponse, preferredAuthority *CssmTpAuthorityId) int32

func CSSM_TP_CrlCreateTemplate

func CSSM_TP_CrlCreateTemplate(tPHandle int, cLHandle int, numberOfFields uint32, crlFields *CssmField, newCrlTemplate *CssmData) int32

func CSSM_TP_CrlSign

func CSSM_TP_CrlSign(tPHandle int, cLHandle int, cCHandle uint64, crlToBeSigned *CssmEncodedCrl, signerCertGroup *CssmCertgroup, signerVerifyContext *CssmTpVerifyContext, signerVerifyResult *CssmTpVerifyContextResult, signedCrl *CssmData) int32

func CSSM_TP_CrlVerify

func CSSM_TP_CrlVerify(tPHandle int, cLHandle int, cSPHandle int, crlToBeVerified *CssmEncodedCrl, signerCertGroup *CssmCertgroup, verifyContext *CssmTpVerifyContext, revokerVerifyResult *CssmTpVerifyContextResult) int32

func CSSM_TP_FormRequest

func CSSM_TP_FormRequest(tPHandle int, preferredAuthority *CssmTpAuthorityId, formType uint32, blankForm *CssmData) int32

func CSSM_TP_FormSubmit

func CSSM_TP_FormSubmit(tPHandle int, formType uint32, form *CssmData, clearanceAuthority *CssmTpAuthorityId, representedAuthority *CssmTpAuthorityId, credentials *CssmAccessCredentials) int32

func CSSM_TP_PassThrough

func CSSM_TP_PassThrough(tPHandle int, cLHandle int, cCHandle uint64, dBList *CssmDlDbList, passThroughId uint32, inputParams unsafe.Pointer, outputParams unsafe.Pointer) int32

func CSSM_TP_ReceiveConfirmation

func CSSM_TP_ReceiveConfirmation(tPHandle int, referenceIdentifier *CssmData, responses **CssmTpConfirmResponse, elapsedTime *int32) int32

func CSSM_TP_RetrieveCredResult

func CSSM_TP_RetrieveCredResult(tPHandle int, referenceIdentifier *CssmData, callerAuthCredentials *CssmTpCallerauthContext, estimatedTime *int32, confirmationRequired *int32, retrieveOutput **CssmTpResultSet) int32

func CSSM_TP_SubmitCredRequest

func CSSM_TP_SubmitCredRequest(tPHandle int, preferredAuthority *CssmTpAuthorityId, requestType uint32, requestInput *CssmTpRequestSet, callerAuthContext *CssmTpCallerauthContext, estimatedTime *int32, referenceIdentifier *CssmData) int32

func CSSM_TP_TupleGroupToCertGroup

func CSSM_TP_TupleGroupToCertGroup(tPHandle int, cLHandle int, tupleGroup *CssmTuplegroup, certTemplates **CssmCertgroup) int32

func CSSM_Terminate

func CSSM_Terminate() int32

func CSSM_Unintroduce

func CSSM_Unintroduce(moduleID *CssmGuid) int32

func CSSM_UnwrapKey

func CSSM_UnwrapKey(cCHandle uint64, publicKey *CssmKey, wrappedKey *CssmKey, keyUsage uint32, keyAttr uint32, keyLabel *CssmData, credAndAclEntry *CssmResourceControlContext, unwrappedKey *CssmKey, descriptiveData *CssmData) int32

func CSSM_UnwrapKeyP

func CSSM_UnwrapKeyP(cCHandle uint64, publicKey *CssmKey, wrappedKey *CssmKey, keyUsage uint32, keyAttr uint32, keyLabel *CssmData, credAndAclEntry *CssmResourceControlContext, unwrappedKey *CssmKey, descriptiveData *CssmData, privilege uint64) int32

func CSSM_UpdateContextAttributes

func CSSM_UpdateContextAttributes(cCHandle uint64, numberOfAttributes uint32, contextAttributes *CssmContextAttribute) int32

func CSSM_VerifyData

func CSSM_VerifyData(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32, digestAlgorithm uint32, signature *CssmData) int32

func CSSM_VerifyDataFinal

func CSSM_VerifyDataFinal(cCHandle uint64, signature *CssmData) int32

func CSSM_VerifyDataInit

func CSSM_VerifyDataInit(cCHandle uint64) int32

func CSSM_VerifyDataUpdate

func CSSM_VerifyDataUpdate(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32) int32

func CSSM_VerifyDevice

func CSSM_VerifyDevice(cSPHandle int, deviceCert *CssmData) int32

func CSSM_VerifyMac

func CSSM_VerifyMac(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32, mac *CssmData) int32

func CSSM_VerifyMacFinal

func CSSM_VerifyMacFinal(cCHandle uint64, mac *CssmData) int32

func CSSM_VerifyMacInit

func CSSM_VerifyMacInit(cCHandle uint64) int32

func CSSM_VerifyMacUpdate

func CSSM_VerifyMacUpdate(cCHandle uint64, dataBufs *CssmData, dataBufCount uint32) int32

func CSSM_WrapKey

func CSSM_WrapKey(cCHandle uint64, accessCred *CssmAccessCredentials, key *CssmKey, descriptiveData *CssmData, wrappedKey *CssmKey) int32

func CSSM_WrapKeyP

func CSSM_WrapKeyP(cCHandle uint64, accessCred *CssmAccessCredentials, key *CssmKey, descriptiveData *CssmData, wrappedKey *CssmKey, privilege uint64) int32

func CssmOidToAlg

func CssmOidToAlg(oid *CssmData, alg *uint32) bool

C function: cssmOidToAlg

func CssmPerror

func CssmPerror(how string, error_ int32)

C function: cssmPerror

func KCMSEncoderDigestAlgorithmSHA1

func KCMSEncoderDigestAlgorithmSHA1() uintptr

func KCMSEncoderDigestAlgorithmSHA256

func KCMSEncoderDigestAlgorithmSHA256() uintptr

func KSSLSessionConfig_3DES_fallback deprecated

func KSSLSessionConfig_3DES_fallback() uintptr

Deprecated: since macOS 10.13.

func KSSLSessionConfig_ATSv1 deprecated

func KSSLSessionConfig_ATSv1() uintptr

Deprecated: since macOS 10.15.

func KSSLSessionConfig_ATSv1_noPFS deprecated

func KSSLSessionConfig_ATSv1_noPFS() uintptr

Deprecated: since macOS 10.15.

func KSSLSessionConfig_RC4_fallback deprecated

func KSSLSessionConfig_RC4_fallback() uintptr

Deprecated: since macOS 10.13.

func KSSLSessionConfig_TLSv1_3DES_fallback deprecated

func KSSLSessionConfig_TLSv1_3DES_fallback() uintptr

Deprecated: since macOS 10.13.

func KSSLSessionConfig_TLSv1_RC4_fallback deprecated

func KSSLSessionConfig_TLSv1_RC4_fallback() uintptr

Deprecated: since macOS 10.13.

func KSSLSessionConfig_TLSv1_fallback deprecated

func KSSLSessionConfig_TLSv1_fallback() uintptr

Deprecated: since macOS 10.15.

func KSSLSessionConfig_anonymous deprecated

func KSSLSessionConfig_anonymous() uintptr

Deprecated: since macOS 10.15.

func KSSLSessionConfig_default deprecated

func KSSLSessionConfig_default() uintptr

Deprecated: since macOS 10.13.

func KSSLSessionConfig_legacy deprecated

func KSSLSessionConfig_legacy() uintptr

Deprecated: since macOS 10.15.

func KSSLSessionConfig_legacy_DHE deprecated

func KSSLSessionConfig_legacy_DHE() uintptr

Deprecated: since macOS 10.15.

func KSSLSessionConfig_standard deprecated

func KSSLSessionConfig_standard() uintptr

Deprecated: since macOS 10.15.

func KSecACLAuthorizationAny

func KSecACLAuthorizationAny() uintptr

func KSecACLAuthorizationChangeACL

func KSecACLAuthorizationChangeACL() uintptr

func KSecACLAuthorizationChangeOwner

func KSecACLAuthorizationChangeOwner() uintptr

func KSecACLAuthorizationDecrypt

func KSecACLAuthorizationDecrypt() uintptr

func KSecACLAuthorizationDelete

func KSecACLAuthorizationDelete() uintptr

func KSecACLAuthorizationDerive

func KSecACLAuthorizationDerive() uintptr

func KSecACLAuthorizationEncrypt

func KSecACLAuthorizationEncrypt() uintptr

func KSecACLAuthorizationExportClear

func KSecACLAuthorizationExportClear() uintptr

func KSecACLAuthorizationExportWrapped

func KSecACLAuthorizationExportWrapped() uintptr

func KSecACLAuthorizationGenKey

func KSecACLAuthorizationGenKey() uintptr

func KSecACLAuthorizationImportClear

func KSecACLAuthorizationImportClear() uintptr

func KSecACLAuthorizationImportWrapped

func KSecACLAuthorizationImportWrapped() uintptr

func KSecACLAuthorizationIntegrity

func KSecACLAuthorizationIntegrity() uintptr

func KSecACLAuthorizationKeychainCreate

func KSecACLAuthorizationKeychainCreate() uintptr

func KSecACLAuthorizationKeychainDelete

func KSecACLAuthorizationKeychainDelete() uintptr

func KSecACLAuthorizationKeychainItemDelete

func KSecACLAuthorizationKeychainItemDelete() uintptr

func KSecACLAuthorizationKeychainItemInsert

func KSecACLAuthorizationKeychainItemInsert() uintptr

func KSecACLAuthorizationKeychainItemModify

func KSecACLAuthorizationKeychainItemModify() uintptr

func KSecACLAuthorizationKeychainItemRead

func KSecACLAuthorizationKeychainItemRead() uintptr

func KSecACLAuthorizationLogin

func KSecACLAuthorizationLogin() uintptr

func KSecACLAuthorizationMAC

func KSecACLAuthorizationMAC() uintptr

func KSecACLAuthorizationPartitionID

func KSecACLAuthorizationPartitionID() uintptr

func KSecACLAuthorizationSign

func KSecACLAuthorizationSign() uintptr

func KSecAttrAccess

func KSecAttrAccess() uintptr

func KSecAttrAccessControl

func KSecAttrAccessControl() uintptr

func KSecAttrAccessGroup

func KSecAttrAccessGroup() uintptr

func KSecAttrAccessGroupToken

func KSecAttrAccessGroupToken() uintptr

@enum kSecAttrAccessGroup Value Constants @constant kSecAttrAccessGroupToken Represents well-known access group which contains items provided by external token (typically smart card). This may be used as a value for kSecAttrAccessGroup attribute. Every application has access to this access group so it is not needed to explicitly list it in keychain-access-groups entitlement, but application must explicitly state this access group in keychain queries in order to be able to access items from external tokens.

func KSecAttrAccessible

func KSecAttrAccessible() uintptr

@enum Attribute Key Constants @discussion Predefined item attribute keys used to get or set values in a dictionary. Not all attributes apply to each item class. The table below lists the currently defined attributes for each item class: kSecClassGenericPassword item attributes: kSecAttrAccess (macOS only) kSecAttrAccessControl kSecAttrAccessGroup (iOS; also macOS if kSecAttrSynchronizable and/or kSecUseDataProtectionKeychain set) kSecAttrAccessible (iOS; also macOS if kSecAttrSynchronizable and/or kSecUseDataProtectionKeychain set) kSecAttrCreationDate kSecAttrModificationDate kSecAttrDescription kSecAttrComment kSecAttrCreator kSecAttrType kSecAttrLabel kSecAttrIsInvisible kSecAttrIsNegative kSecAttrAccount kSecAttrService kSecAttrGeneric kSecAttrSynchronizable kSecClassInternetPassword item attributes: kSecAttrAccess (macOS only) kSecAttrAccessControl kSecAttrAccessGroup (iOS; also macOS if kSecAttrSynchronizable and/or kSecUseDataProtectionKeychain set) kSecAttrAccessible (iOS; also macOS if kSecAttrSynchronizable and/or kSecUseDataProtectionKeychain set) kSecAttrCreationDate kSecAttrModificationDate kSecAttrDescription kSecAttrComment kSecAttrCreator kSecAttrType kSecAttrLabel kSecAttrIsInvisible kSecAttrIsNegative kSecAttrAccount kSecAttrSecurityDomain kSecAttrServer kSecAttrProtocol kSecAttrAuthenticationType kSecAttrPort kSecAttrPath kSecAttrSynchronizable kSecClassCertificate item attributes: kSecAttrAccessible (iOS only) kSecAttrAccessControl (iOS only) kSecAttrAccessGroup (iOS only) kSecAttrCertificateType kSecAttrCertificateEncoding kSecAttrLabel kSecAttrSubject kSecAttrIssuer kSecAttrSerialNumber kSecAttrSubjectKeyID kSecAttrPublicKeyHash kSecAttrSynchronizable kSecClassKey item attributes: kSecAttrAccess (macOS only) kSecAttrAccessControl kSecAttrAccessGroup (iOS; also macOS if kSecAttrSynchronizable and/or kSecUseDataProtectionKeychain set) kSecAttrAccessible (iOS; also macOS if kSecAttrSynchronizable and/or kSecUseDataProtectionKeychain set) kSecAttrKeyClass kSecAttrLabel kSecAttrApplicationLabel kSecAttrIsPermanent kSecAttrApplicationTag kSecAttrKeyType kSecAttrPRF (macOS only) kSecAttrSalt (macOS only) kSecAttrRounds (macOS only) kSecAttrKeySizeInBits kSecAttrEffectiveKeySize kSecAttrCanEncrypt kSecAttrCanDecrypt kSecAttrCanDerive kSecAttrCanSign kSecAttrCanVerify kSecAttrCanWrap kSecAttrCanUnwrap kSecAttrSynchronizable Note that the attributes kSecAttrCan* describe attributes of the key itself at relatively high level. Some of these attributes are mathematical -- for example, a DSA key cannot encrypt. Others are key-level policy issues -- for example, it is good cryptographic hygiene to use an RSA key either for encryption or signing but not both. Compare these to the certificate-level policy values in SecPolicy.h. kSecClassIdentity item attributes: Since an identity is the combination of a private key and a certificate, this class shares attributes of both kSecClassKey and kSecClassCertificate. @constant kSecAttrAccessible Specifies a dictionary key whose value indicates when your application needs access to an item's data. You should choose the most restrictive option that meets your application's needs to allow the system to protect that item in the best way possible. See the "kSecAttrAccessible Value Constants" section for a list of values which can be specified. IMPORTANT: This attribute is currently not supported for macOS keychain items, unless the kSecAttrSynchronizable attribute is also present. If both attributes are specified on either macOS or iOS, the value for the kSecAttrAccessible key may only be one whose name does not end with "ThisDeviceOnly", as those cannot sync to another device. @constant kSecAttrAccessControl Specifies a dictionary key whose value is SecAccessControl instance which contains access control conditions for item. IMPORTANT: This attribute is mutually exclusive with kSecAttrAccess attribute. @constant kSecAttrAccess Specifies a dictionary key whose value is a SecAccessRef describing the access control settings for this item. This key is available on macOS only. @constant kSecAttrAccessGroup Specifies a dictionary key whose value is a CFStringRef indicating which access group a item is in. The access groups that a particular application has membership in are determined by two entitlements for that application. The application-identifier entitlement contains the application's single access group, unless there is a keychain-access-groups entitlement present. The latter has as its value a list of access groups; the first item in this list is the default access group. Unless a specific access group is provided as the value of kSecAttrAccessGroup when SecItemAdd is called, new items are created in the application's default access group. Specifying this attribute in SecItemCopyMatching, SecItemUpdate, or SecItemDelete calls limits the search to the specified access group (of which the calling application must be a member to obtain matching results.) To share keychain items between multiple applications, each application must have a common group listed in its keychain-access-groups entitlement, and each must specify this shared access group name as the value for the kSecAttrAccessGroup key in the dictionary passed to SecItem functions. @constant kSecAttrSynchronizable Specifies a dictionary key whose value is a CFBooleanRef indicating whether the item in question can be synchronized. To add a new item which can be synced to other devices, or to obtain synchronizable results from a query, supply this key with a value of kCFBooleanTrue. If the key is not supplied, or has a value of kCFBooleanFalse, then no synchronizable items will be added or returned. A predefined value, kSecAttrSynchronizableAny, may be provided instead of kCFBooleanTrue if both synchronizable and non-synchronizable results are desired. IMPORTANT: Specifying the kSecAttrSynchronizable key has several caveats: - Updating or deleting items using the kSecAttrSynchronizable key will affect all copies of the item, not just the one on your local device. Be sure that it makes sense to use the same password on all devices before deciding to make a password synchronizable. - Starting in iOS 14, macOS 11, and watchOS 7, the keychain synchronizes passwords, certificates, and cryptographic keys. Earlier OS versions synchronize only passwords. - Items stored or obtained using the kSecAttrSynchronizable key cannot specify SecAccessRef-based access control with kSecAttrAccess. If a password is intended to be shared between multiple applications, the kSecAttrAccessGroup key must be specified, and each application using this password must have a 'keychain-access-groups' entitlement with the specified access group value. - Items stored or obtained using the kSecAttrSynchronizable key may not also specify a kSecAttrAccessible value which is incompatible with syncing (namely, those whose names end with "ThisDeviceOnly".) - On macOS, when kSecAttrSynchronizable is set to true, returning references is supported only for Certificate, Key or Identity items. - Persistent references to synchronizable items should be avoided; while they may work locally, they cannot be moved between devices, and may not resolve if the item is modified on some other device. - When specifying a query that uses the kSecAttrSynchronizable key, search keys are limited to the item's class and attributes. The only search constant which may be used is kSecMatchLimit; other constants using the kSecMatch prefix are not supported at this time. @constant kSecAttrSynchronizableAny Specifies that both synchronizable and non-synchronizable results should be returned from this query. This may be used as a value for the kSecAttrSynchronizable dictionary key in a call to SecItemCopyMatching, SecItemUpdate, or SecItemDelete. @constant kSecAttrCreationDate (read-only) Specifies a dictionary key whose value is the item's creation date. You use this key to get a value of type CFDateRef that represents the date the item was created. @constant kSecAttrModificationDate (read-only) Specifies a dictionary key whose value is the item's modification date. You use this key to get a value of type CFDateRef that represents the last time the item was updated. @constant kSecAttrDescription Specifies a dictionary key whose value is the item's description attribute. You use this key to set or get a value of type CFStringRef that represents a user-visible string describing this particular kind of item (e.g., "disk image password"). @constant kSecAttrComment Specifies a dictionary key whose value is the item's comment attribute. You use this key to set or get a value of type CFStringRef containing the user-editable comment for this item. @constant kSecAttrCreator Specifies a dictionary key whose value is the item's creator attribute. You use this key to set or get a value of type CFNumberRef that represents the item's creator. This number is the unsigned integer representation of a four-character code (e.g., 'aCrt'). @constant kSecAttrType Specifies a dictionary key whose value is the item's type attribute. You use this key to set or get a value of type CFNumberRef that represents the item's type. This number is the unsigned integer representation of a four-character code (e.g., 'aTyp'). @constant kSecAttrLabel Specifies a dictionary key whose value is the item's label attribute. You use this key to set or get a value of type CFStringRef containing the user-visible label for this item. @constant kSecAttrIsInvisible Specifies a dictionary key whose value is the item's invisible attribute. You use this key to set or get a value of type CFBooleanRef that indicates whether the item is invisible (i.e., should not be displayed.) @constant kSecAttrIsNegative Specifies a dictionary key whose value is the item's negative attribute. You use this key to set or get a value of type CFBooleanRef that indicates whether there is a valid password associated with this keychain item. This is useful if your application doesn't want a password for some particular service to be stored in the keychain, but prefers that it always be entered by the user. @constant kSecAttrAccount Specifies a dictionary key whose value is the item's account attribute. You use this key to set or get a CFStringRef that contains an account name. (Items of class kSecClassGenericPassword, kSecClassInternetPassword have this attribute.) @constant kSecAttrService Specifies a dictionary key whose value is the item's service attribute. You use this key to set or get a CFStringRef that represents the service associated with this item. (Items of class kSecClassGenericPassword have this attribute.) @constant kSecAttrGeneric Specifies a dictionary key whose value is the item's generic attribute. You use this key to set or get a value of CFDataRef that contains a user-defined attribute. (Items of class kSecClassGenericPassword have this attribute.) @constant kSecAttrSecurityDomain Specifies a dictionary key whose value is the item's security domain attribute. You use this key to set or get a CFStringRef value that represents the Internet security domain. (Items of class kSecClassInternetPassword have this attribute.) @constant kSecAttrServer Specifies a dictionary key whose value is the item's server attribute. You use this key to set or get a value of type CFStringRef that contains the server's domain name or IP address. (Items of class kSecClassInternetPassword have this attribute.) @constant kSecAttrProtocol Specifies a dictionary key whose value is the item's protocol attribute. You use this key to set or get a value of type CFNumberRef that denotes the protocol for this item (see the SecProtocolType enum in SecKeychainItem.h). (Items of class kSecClassInternetPassword have this attribute.) @constant kSecAttrAuthenticationType Specifies a dictionary key whose value is the item's authentication type attribute. You use this key to set or get a value of type CFNumberRef that denotes the authentication scheme for this item (see the kSecAttrAuthenticationType value constants below). @constant kSecAttrPort Specifies a dictionary key whose value is the item's port attribute. You use this key to set or get a CFNumberRef value that represents an Internet port number. (Items of class kSecClassInternetPassword have this attribute.) @constant kSecAttrPath Specifies a dictionary key whose value is the item's path attribute, typically this is the path component of the URL. You use this key to set or get a CFStringRef value that represents a path. (Items of class kSecClassInternetPassword have this attribute.) @constant kSecAttrSubject (read-only) Specifies a dictionary key whose value is the item's subject. You use this key to get a value of type CFDataRef that contains the X.500 subject name of a certificate. (Items of class kSecClassCertificate have this attribute.) @constant kSecAttrIssuer (read-only) Specifies a dictionary key whose value is the item's issuer. You use this key to get a value of type CFDataRef that contains the X.500 issuer name of a certificate. (Items of class kSecClassCertificate have this attribute.) @constant kSecAttrSerialNumber (read-only) Specifies a dictionary key whose value is the item's serial number. You use this key to get a value of type CFDataRef that contains the serial number data of a certificate. (Items of class kSecClassCertificate have this attribute.) @constant kSecAttrSubjectKeyID (read-only) Specifies a dictionary key whose value is the item's subject key ID. You use this key to get a value of type CFDataRef that contains the subject key ID of a certificate. (Items of class kSecClassCertificate have this attribute.) @constant kSecAttrPublicKeyHash (read-only) Specifies a dictionary key whose value is the item's public key hash. You use this key to get a value of type CFDataRef that contains the hash of a certificate's public key. (Items of class kSecClassCertificate have this attribute.) @constant kSecAttrCertificateType (read-only) Specifies a dictionary key whose value is the item's certificate type. You use this key to get a value of type CFNumberRef that denotes the certificate type (On iOS, currently the value of this attribute must be equal to the version of the X509 certificate. So, 1 for v1, 2 for v2, and 3 for v3 certificates). (On macOS, see the CSSM_CERT_TYPE enum in cssmtype.h). Only items of class kSecClassCertificate have this attribute. @constant kSecAttrCertificateEncoding (read-only) Specifies a dictionary key whose value is the item's certificate encoding. You use this key to get a value of type CFNumberRef that denotes the certificate encoding (On iOS, currently only the value 3 meaning kSecAttrCertificateEncodingDER is supported). On macOS, see the CSSM_CERT_ENCODING enum in cssmtype.h. Only items of class kSecClassCertificate have this attribute. @constant kSecAttrKeyClass (read only) Specifies a dictionary key whose value is one of kSecAttrKeyClassPublic, kSecAttrKeyClassPrivate or kSecAttrKeyClassSymmetric. @constant kSecAttrApplicationLabel Specifies a dictionary key whose value is the key's application label attribute. This is different from the kSecAttrLabel (which is intended to be human-readable). This attribute is used to look up a key programmatically; in particular, for keys of class kSecAttrKeyClassPublic and kSecAttrKeyClassPrivate, the value of this attribute is the hash of the public key. This item is a type of CFDataRef. Legacy keys may contain a UUID in this field as a CFStringRef. @constant kSecAttrIsPermanent Specifies a dictionary key whose value is a CFBooleanRef indicating whether the key in question will be stored permanently. @constant kSecAttrIsSensitive Specifies a dictionary key whose value is a CFBooleanRef indicating that the key in question can only be exported in a wrapped (encrypted) format. macOS only. @constant kSecAttrIsExtractable Specifies a dictionary key whose value is a CFBooleanRef indicating whether the key in question can be exported from its keychain container. macOS only. @constant kSecAttrApplicationTag Specifies a dictionary key whose value is a CFDataRef containing private tag data. @constant kSecAttrKeyType Specifies a dictionary key whose value is a CFNumberRef indicating the algorithm associated with this key (On iOS, currently only the value 42 is supported, alternatively you can use kSecAttrKeyTypeRSA). (On macOS, see the CSSM_ALGORITHMS enum in cssmtype.h). @constant kSecAttrPRF Specifies a dictionary key whose value is the PRF (pseudo-random function) for this key (see "kSecAttrPRF Value Constants".) macOS only. @constant kSecAttrSalt Specifies a dictionary key whose value is a CFData containing the salt to use for this key. macOS only. @constant kSecAttrRounds Specifies a dictionary key whose value is the number of rounds for the pseudo-random function specified by kSecAttrPRF. macOS only. @constant kSecAttrKeySizeInBits Specifies a dictionary key whose value is a CFNumberRef indicating the number of bits in this key. @constant kSecAttrEffectiveKeySize Specifies a dictionary key whose value is a CFNumberRef indicating the effective number of bits in this key. For example, a DES key has a kSecAttrKeySizeInBits of 64, but a kSecAttrEffectiveKeySize of 56 bits. @constant kSecAttrCanEncrypt Specifies a dictionary key whole value is a CFBooleanRef indicating whether the key in question can be used to encrypt data. @constant kSecAttrCanDecrypt Specifies a dictionary key whose value is a CFBooleanRef indicating whether the key in question can be used to decrypt data. @constant kSecAttrCanDerive Specifies a dictionary key whole value is a CFBooleanRef indicating whether the key in question can be used to derive another key. @constant kSecAttrCanSign Specifies a dictionary key whole value is a CFBooleanRef indicating whether the key in question can be used to create a digital signature. @constant kSecAttrCanVerify Specifies a dictionary key whole value is a CFBooleanRef indicating whether the key in question can be used to verify a digital signature. @constant kSecAttrCanWrap Specifies a dictionary key whole value is a CFBooleanRef indicating whether the key in question can be used to wrap another key. @constant kSecAttrCanUnwrap Specifies a dictionary key whole value is a CFBooleanRef indicating whether the key in question can be used to unwrap another key. @constant kSecAttrSyncViewHint Specifies a dictionary key whose value is a CFStringRef. This value is part of the primary key of each item, and can be used to help distiguish Sync Views when defining their queries. iOS and sychronizable items only. @constant kSecAttrTokenID Specifies a dictionary key whose presence indicates that item is backed by external token. Value of this attribute is CFStringRef uniquely identifying containing token. When this attribute is not present, item is stored in internal keychain database. Note that once item is created, this attribute cannot be changed - in other words it is not possible to migrate existing items to, from or between tokens. Currently the only available value for this attribute is kSecAttrTokenIDSecureEnclave, which indicates that item (private key) is backed by device's Secure Enclave.

func KSecAttrAccessibleAfterFirstUnlock

func KSecAttrAccessibleAfterFirstUnlock() uintptr

func KSecAttrAccessibleAfterFirstUnlockThisDeviceOnly

func KSecAttrAccessibleAfterFirstUnlockThisDeviceOnly() uintptr

func KSecAttrAccessibleAlways deprecated

func KSecAttrAccessibleAlways() uintptr

Deprecated: Use an accessibility level that provides some user protection, such as kSecAttrAccessibleAfterFirstUnlock

func KSecAttrAccessibleAlwaysThisDeviceOnly deprecated

func KSecAttrAccessibleAlwaysThisDeviceOnly() uintptr

Deprecated: Use an accessibility level that provides some user protection, such as kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly

func KSecAttrAccessibleWhenPasscodeSetThisDeviceOnly

func KSecAttrAccessibleWhenPasscodeSetThisDeviceOnly() uintptr

func KSecAttrAccessibleWhenUnlocked

func KSecAttrAccessibleWhenUnlocked() uintptr

@enum kSecAttrAccessible Value Constants @discussion Predefined item attribute constants used to get or set values in a dictionary. The kSecAttrAccessible constant is the key and its value is one of the constants defined here. When asking SecItemCopyMatching to return the item's data, the error errSecInteractionNotAllowed will be returned if the item's data is not available until a device unlock occurs. @constant kSecAttrAccessibleWhenUnlocked Item data can only be accessed while the device is unlocked. This is recommended for items that only need be accesible while the application is in the foreground. Items with this attribute will migrate to a new device when using encrypted backups. @constant kSecAttrAccessibleAfterFirstUnlock Item data can only be accessed once the device has been unlocked after a restart. This is recommended for items that need to be accesible by background applications. Items with this attribute will migrate to a new device when using encrypted backups. @constant kSecAttrAccessibleAlways Item data can always be accessed regardless of the lock state of the device. This is not recommended for anything except system use. Items with this attribute will migrate to a new device when using encrypted backups. @constant kSecAttrAccessibleWhenPasscodeSetThisDeviceOnly Item data can only be accessed while the device is unlocked. This is recommended for items that only need to be accessible while the application is in the foreground and requires a passcode to be set on the device. Items with this attribute will never migrate to a new device, so after a backup is restored to a new device, these items will be missing. This attribute will not be available on devices without a passcode. Disabling the device passcode will cause all previously protected items to be deleted. @constant kSecAttrAccessibleWhenUnlockedThisDeviceOnly Item data can only be accessed while the device is unlocked. This is recommended for items that only need be accesible while the application is in the foreground. Items with this attribute will never migrate to a new device, so after a backup is restored to a new device, these items will be missing. @constant kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly Item data can only be accessed once the device has been unlocked after a restart. This is recommended for items that need to be accessible by background applications. Items with this attribute will never migrate to a new device, so after a backup is restored to a new device these items will be missing. @constant kSecAttrAccessibleAlwaysThisDeviceOnly Item data can always be accessed regardless of the lock state of the device. This option is not recommended for anything except system use. Items with this attribute will never migrate to a new device, so after a backup is restored to a new device, these items will be missing.

func KSecAttrAccessibleWhenUnlockedThisDeviceOnly

func KSecAttrAccessibleWhenUnlockedThisDeviceOnly() uintptr

func KSecAttrAccount

func KSecAttrAccount() uintptr

func KSecAttrApplicationLabel

func KSecAttrApplicationLabel() uintptr

func KSecAttrApplicationTag

func KSecAttrApplicationTag() uintptr

func KSecAttrAuthenticationType

func KSecAttrAuthenticationType() uintptr

func KSecAttrAuthenticationTypeDPA

func KSecAttrAuthenticationTypeDPA() uintptr

func KSecAttrAuthenticationTypeDefault

func KSecAttrAuthenticationTypeDefault() uintptr

func KSecAttrAuthenticationTypeHTMLForm

func KSecAttrAuthenticationTypeHTMLForm() uintptr

func KSecAttrAuthenticationTypeHTTPBasic

func KSecAttrAuthenticationTypeHTTPBasic() uintptr

func KSecAttrAuthenticationTypeHTTPDigest

func KSecAttrAuthenticationTypeHTTPDigest() uintptr

func KSecAttrAuthenticationTypeMSN

func KSecAttrAuthenticationTypeMSN() uintptr

func KSecAttrAuthenticationTypeNTLM

func KSecAttrAuthenticationTypeNTLM() uintptr

@enum kSecAttrAuthenticationType Value Constants @discussion Predefined item attribute constants used to get or set values in a dictionary. The kSecAttrAuthenticationType constant is the key and its value is one of the constants defined here. @constant kSecAttrAuthenticationTypeNTLM. @constant kSecAttrAuthenticationTypeMSN. @constant kSecAttrAuthenticationTypeDPA. @constant kSecAttrAuthenticationTypeRPA. @constant kSecAttrAuthenticationTypeHTTPBasic. @constant kSecAttrAuthenticationTypeHTTPDigest. @constant kSecAttrAuthenticationTypeHTMLForm. @constant kSecAttrAuthenticationTypeDefault.

func KSecAttrAuthenticationTypeRPA

func KSecAttrAuthenticationTypeRPA() uintptr

func KSecAttrCanDecrypt

func KSecAttrCanDecrypt() uintptr

func KSecAttrCanDerive

func KSecAttrCanDerive() uintptr

func KSecAttrCanEncrypt

func KSecAttrCanEncrypt() uintptr

func KSecAttrCanSign

func KSecAttrCanSign() uintptr

func KSecAttrCanUnwrap

func KSecAttrCanUnwrap() uintptr

func KSecAttrCanVerify

func KSecAttrCanVerify() uintptr

func KSecAttrCanWrap

func KSecAttrCanWrap() uintptr

func KSecAttrCertificateEncoding

func KSecAttrCertificateEncoding() uintptr

func KSecAttrCertificateType

func KSecAttrCertificateType() uintptr

func KSecAttrComment

func KSecAttrComment() uintptr

func KSecAttrCreationDate

func KSecAttrCreationDate() uintptr

func KSecAttrCreator

func KSecAttrCreator() uintptr

func KSecAttrDescription

func KSecAttrDescription() uintptr

func KSecAttrEffectiveKeySize

func KSecAttrEffectiveKeySize() uintptr

func KSecAttrGeneric

func KSecAttrGeneric() uintptr

func KSecAttrIsExtractable

func KSecAttrIsExtractable() uintptr

func KSecAttrIsInvisible

func KSecAttrIsInvisible() uintptr

func KSecAttrIsNegative

func KSecAttrIsNegative() uintptr

func KSecAttrIsPermanent

func KSecAttrIsPermanent() uintptr

func KSecAttrIsSensitive

func KSecAttrIsSensitive() uintptr

func KSecAttrIssuer

func KSecAttrIssuer() uintptr

func KSecAttrKeyClass

func KSecAttrKeyClass() uintptr

func KSecAttrKeyClassPrivate

func KSecAttrKeyClassPrivate() uintptr

func KSecAttrKeyClassPublic

func KSecAttrKeyClassPublic() uintptr

@enum kSecAttrKeyClass Value Constants @discussion Predefined item attribute constants used to get or set values in a dictionary. The kSecAttrKeyClass constant is the key and its value is one of the constants defined here. @constant kSecAttrKeyClassPublic. @constant kSecAttrKeyClassPrivate. @constant kSecAttrKeyClassSymmetric.

func KSecAttrKeyClassSymmetric

func KSecAttrKeyClassSymmetric() uintptr

func KSecAttrKeySizeInBits

func KSecAttrKeySizeInBits() uintptr

func KSecAttrKeyType

func KSecAttrKeyType() uintptr

func KSecAttrKeyType3DES

func KSecAttrKeyType3DES() uintptr

func KSecAttrKeyTypeAES

func KSecAttrKeyTypeAES() uintptr

func KSecAttrKeyTypeCAST

func KSecAttrKeyTypeCAST() uintptr

func KSecAttrKeyTypeDES

func KSecAttrKeyTypeDES() uintptr

func KSecAttrKeyTypeDSA

func KSecAttrKeyTypeDSA() uintptr

func KSecAttrKeyTypeEC

func KSecAttrKeyTypeEC() uintptr

func KSecAttrKeyTypeECDSA

func KSecAttrKeyTypeECDSA() uintptr

func KSecAttrKeyTypeECSECPrimeRandom

func KSecAttrKeyTypeECSECPrimeRandom() uintptr

func KSecAttrKeyTypeRC2

func KSecAttrKeyTypeRC2() uintptr

func KSecAttrKeyTypeRC4

func KSecAttrKeyTypeRC4() uintptr

func KSecAttrKeyTypeRSA

func KSecAttrKeyTypeRSA() uintptr

@enum kSecAttrKeyType Value Constants @discussion Predefined item attribute constants used to get or set values in a dictionary. The kSecAttrKeyType constant is the key and its value is one of the constants defined here. @constant kSecAttrKeyTypeECSECPrimeRandom. The used curve is P-192, P-256, P-384 or P-521. The size is specified by kSecAttrKeySizeInBits attribute. Curves are defined in FIPS PUB 186-4 standard. @constant kSecAttrKeyTypeEC This is the legacy name for kSecAttrKeyTypeECSECPrimeRandom, new applications should not use it. @constant kSecAttrKeyTypeDSA (macOS only) @constant kSecAttrKeyTypeAES (macOS only) @constant kSecAttrKeyType3DES (macOS only) @constant kSecAttrKeyTypeRC4 (macOS only) @constant kSecAttrKeyTypeRC2 (macOS only) @constant kSecAttrKeyTypeCAST (macOS only) @constant kSecAttrKeyTypeECDSA (deprecated; use kSecAttrKeyTypeECSECPrimeRandom instead.) (macOS only)

func KSecAttrLabel

func KSecAttrLabel() uintptr

func KSecAttrModificationDate

func KSecAttrModificationDate() uintptr

func KSecAttrPRF

func KSecAttrPRF() uintptr

func KSecAttrPRFHmacAlgSHA1

func KSecAttrPRFHmacAlgSHA1() uintptr

func KSecAttrPRFHmacAlgSHA224

func KSecAttrPRFHmacAlgSHA224() uintptr

func KSecAttrPRFHmacAlgSHA256

func KSecAttrPRFHmacAlgSHA256() uintptr

func KSecAttrPRFHmacAlgSHA384

func KSecAttrPRFHmacAlgSHA384() uintptr

func KSecAttrPRFHmacAlgSHA512

func KSecAttrPRFHmacAlgSHA512() uintptr

func KSecAttrPath

func KSecAttrPath() uintptr

func KSecAttrPersistantReference

func KSecAttrPersistantReference() uintptr

func KSecAttrPersistentReference

func KSecAttrPersistentReference() uintptr

func KSecAttrPort

func KSecAttrPort() uintptr

func KSecAttrProtocol

func KSecAttrProtocol() uintptr

func KSecAttrProtocolAFP

func KSecAttrProtocolAFP() uintptr

func KSecAttrProtocolAppleTalk

func KSecAttrProtocolAppleTalk() uintptr

func KSecAttrProtocolDAAP

func KSecAttrProtocolDAAP() uintptr

func KSecAttrProtocolEPPC

func KSecAttrProtocolEPPC() uintptr

func KSecAttrProtocolFTP

func KSecAttrProtocolFTP() uintptr

@enum kSecAttrProtocol Value Constants @discussion Predefined item attribute constants used to get or set values in a dictionary. The kSecAttrProtocol constant is the key and its value is one of the constants defined here. @constant kSecAttrProtocolFTP. @constant kSecAttrProtocolFTPAccount. @constant kSecAttrProtocolHTTP. @constant kSecAttrProtocolIRC. @constant kSecAttrProtocolNNTP. @constant kSecAttrProtocolPOP3. @constant kSecAttrProtocolSMTP. @constant kSecAttrProtocolSOCKS. @constant kSecAttrProtocolIMAP. @constant kSecAttrProtocolLDAP. @constant kSecAttrProtocolAppleTalk. @constant kSecAttrProtocolAFP. @constant kSecAttrProtocolTelnet. @constant kSecAttrProtocolSSH. @constant kSecAttrProtocolFTPS. @constant kSecAttrProtocolHTTPS. @constant kSecAttrProtocolHTTPProxy. @constant kSecAttrProtocolHTTPSProxy. @constant kSecAttrProtocolFTPProxy. @constant kSecAttrProtocolSMB. @constant kSecAttrProtocolRTSP. @constant kSecAttrProtocolRTSPProxy. @constant kSecAttrProtocolDAAP. @constant kSecAttrProtocolEPPC. @constant kSecAttrProtocolIPP. @constant kSecAttrProtocolNNTPS. @constant kSecAttrProtocolLDAPS. @constant kSecAttrProtocolTelnetS. @constant kSecAttrProtocolIMAPS. @constant kSecAttrProtocolIRCS. @constant kSecAttrProtocolPOP3S.

func KSecAttrProtocolFTPAccount

func KSecAttrProtocolFTPAccount() uintptr

func KSecAttrProtocolFTPProxy

func KSecAttrProtocolFTPProxy() uintptr

func KSecAttrProtocolFTPS

func KSecAttrProtocolFTPS() uintptr

func KSecAttrProtocolHTTP

func KSecAttrProtocolHTTP() uintptr

func KSecAttrProtocolHTTPProxy

func KSecAttrProtocolHTTPProxy() uintptr

func KSecAttrProtocolHTTPS

func KSecAttrProtocolHTTPS() uintptr

func KSecAttrProtocolHTTPSProxy

func KSecAttrProtocolHTTPSProxy() uintptr

func KSecAttrProtocolIMAP

func KSecAttrProtocolIMAP() uintptr

func KSecAttrProtocolIMAPS

func KSecAttrProtocolIMAPS() uintptr

func KSecAttrProtocolIPP

func KSecAttrProtocolIPP() uintptr

func KSecAttrProtocolIRC

func KSecAttrProtocolIRC() uintptr

func KSecAttrProtocolIRCS

func KSecAttrProtocolIRCS() uintptr

func KSecAttrProtocolLDAP

func KSecAttrProtocolLDAP() uintptr

func KSecAttrProtocolLDAPS

func KSecAttrProtocolLDAPS() uintptr

func KSecAttrProtocolNNTP

func KSecAttrProtocolNNTP() uintptr

func KSecAttrProtocolNNTPS

func KSecAttrProtocolNNTPS() uintptr

func KSecAttrProtocolPOP3

func KSecAttrProtocolPOP3() uintptr

func KSecAttrProtocolPOP3S

func KSecAttrProtocolPOP3S() uintptr

func KSecAttrProtocolRTSP

func KSecAttrProtocolRTSP() uintptr

func KSecAttrProtocolRTSPProxy

func KSecAttrProtocolRTSPProxy() uintptr

func KSecAttrProtocolSMB

func KSecAttrProtocolSMB() uintptr

func KSecAttrProtocolSMTP

func KSecAttrProtocolSMTP() uintptr

func KSecAttrProtocolSOCKS

func KSecAttrProtocolSOCKS() uintptr

func KSecAttrProtocolSSH

func KSecAttrProtocolSSH() uintptr

func KSecAttrProtocolTelnet

func KSecAttrProtocolTelnet() uintptr

func KSecAttrProtocolTelnetS

func KSecAttrProtocolTelnetS() uintptr

func KSecAttrPublicKeyHash

func KSecAttrPublicKeyHash() uintptr

func KSecAttrRounds

func KSecAttrRounds() uintptr

func KSecAttrSalt

func KSecAttrSalt() uintptr

func KSecAttrSecurityDomain

func KSecAttrSecurityDomain() uintptr

func KSecAttrSerialNumber

func KSecAttrSerialNumber() uintptr

func KSecAttrServer

func KSecAttrServer() uintptr

func KSecAttrService

func KSecAttrService() uintptr

func KSecAttrSubject

func KSecAttrSubject() uintptr

func KSecAttrSubjectKeyID

func KSecAttrSubjectKeyID() uintptr

func KSecAttrSyncViewHint

func KSecAttrSyncViewHint() uintptr

func KSecAttrSynchronizable

func KSecAttrSynchronizable() uintptr

func KSecAttrSynchronizableAny

func KSecAttrSynchronizableAny() uintptr

func KSecAttrTokenID

func KSecAttrTokenID() uintptr

func KSecAttrTokenIDSecureEnclave

func KSecAttrTokenIDSecureEnclave() uintptr

@enum kSecAttrTokenID Value Constants @discussion Predefined item attribute constant used to get or set values in a dictionary. The kSecAttrTokenID constant is the key and its value can be kSecAttrTokenIDSecureEnclave. @constant kSecAttrTokenIDSecureEnclave Specifies well-known identifier of the token implemented using device's Secure Enclave. The only keychain items supported by the Secure Enclave token are 256-bit elliptic curve keys (kSecAttrKeyTypeECSecPrimeRandom). Keys must be generated on the secure enclave using SecKeyGenerateKeyPair call with kSecAttrTokenID set to kSecAttrTokenIDSecureEnclave in the parameters dictionary, it is not possible to import pregenerated keys to kSecAttrTokenIDSecureEnclave token.

func KSecAttrType

func KSecAttrType() uintptr

func KSecBase32Encoding

func KSecBase32Encoding() uintptr

@abstract Specifies a base 32 encoding Deprecated: SecTransform is no longer supported

func KSecBase64Encoding

func KSecBase64Encoding() uintptr

@abstract Specifies a base 64 encoding Deprecated: SecTransform is no longer supported

func KSecCFErrorArchitecture

func KSecCFErrorArchitecture() uintptr

func KSecCFErrorGuestAttributes

func KSecCFErrorGuestAttributes() uintptr

func KSecCFErrorInfoPlist

func KSecCFErrorInfoPlist() uintptr

func KSecCFErrorPath

func KSecCFErrorPath() uintptr

func KSecCFErrorPattern

func KSecCFErrorPattern() uintptr

func KSecCFErrorRequirementSyntax

func KSecCFErrorRequirementSyntax() uintptr

func KSecCFErrorResourceAdded

func KSecCFErrorResourceAdded() uintptr

func KSecCFErrorResourceAltered

func KSecCFErrorResourceAltered() uintptr

func KSecCFErrorResourceMissing

func KSecCFErrorResourceMissing() uintptr

func KSecCFErrorResourceRecursive

func KSecCFErrorResourceRecursive() uintptr

func KSecCFErrorResourceSeal

func KSecCFErrorResourceSeal() uintptr

func KSecCFErrorResourceSideband

func KSecCFErrorResourceSideband() uintptr

func KSecClass

func KSecClass() uintptr

@enum Class Key Constant @discussion Predefined key constant used to get or set item class values in a dictionary. Its value is one of the constants defined in the Value Constants for kSecClass. @constant kSecClass Specifies a dictionary key whose value is the item's class code. You use this key to get or set a value of type CFTypeRef that contains the item class code.

func KSecClassCertificate

func KSecClassCertificate() uintptr

func KSecClassGenericPassword

func KSecClassGenericPassword() uintptr

func KSecClassIdentity

func KSecClassIdentity() uintptr

func KSecClassInternetPassword

func KSecClassInternetPassword() uintptr

@enum Class Value Constants @discussion Predefined item class constants used to get or set values in a dictionary. The kSecClass constant is the key and its value is one of the constants defined here. Note: on Mac OS X 10.6, only items of class kSecClassInternetPassword are supported. @constant kSecClassInternetPassword Specifies Internet password items. @constant kSecClassGenericPassword Specifies generic password items. @constant kSecClassCertificate Specifies certificate items. @constant kSecClassKey Specifies key items. @constant kSecClassIdentity Specifies identity items.

func KSecClassKey

func KSecClassKey() uintptr

func KSecCodeAttributeArchitecture

func KSecCodeAttributeArchitecture() uintptr

func KSecCodeAttributeBundleVersion

func KSecCodeAttributeBundleVersion() uintptr

func KSecCodeAttributeSubarchitecture

func KSecCodeAttributeSubarchitecture() uintptr

func KSecCodeAttributeUniversalFileOffset

func KSecCodeAttributeUniversalFileOffset() uintptr

func KSecCodeInfoCMS

func KSecCodeInfoCMS() uintptr

func KSecCodeInfoCdHashes

func KSecCodeInfoCdHashes() uintptr

func KSecCodeInfoCertificates

func KSecCodeInfoCertificates() uintptr

func KSecCodeInfoChangedFiles

func KSecCodeInfoChangedFiles() uintptr

func KSecCodeInfoDefaultDesignatedLightweightCodeRequirement

func KSecCodeInfoDefaultDesignatedLightweightCodeRequirement() uintptr

func KSecCodeInfoDesignatedRequirement

func KSecCodeInfoDesignatedRequirement() uintptr

func KSecCodeInfoDigestAlgorithm

func KSecCodeInfoDigestAlgorithm() uintptr

func KSecCodeInfoDigestAlgorithms

func KSecCodeInfoDigestAlgorithms() uintptr

func KSecCodeInfoEntitlements

func KSecCodeInfoEntitlements() uintptr

func KSecCodeInfoEntitlementsDict

func KSecCodeInfoEntitlementsDict() uintptr

func KSecCodeInfoFlags

func KSecCodeInfoFlags() uintptr

func KSecCodeInfoFormat

func KSecCodeInfoFormat() uintptr

func KSecCodeInfoIdentifier

func KSecCodeInfoIdentifier() uintptr

func KSecCodeInfoImplicitDesignatedRequirement

func KSecCodeInfoImplicitDesignatedRequirement() uintptr

func KSecCodeInfoMainExecutable

func KSecCodeInfoMainExecutable() uintptr

func KSecCodeInfoPList

func KSecCodeInfoPList() uintptr

func KSecCodeInfoPlatformIdentifier

func KSecCodeInfoPlatformIdentifier() uintptr

func KSecCodeInfoRequirementData

func KSecCodeInfoRequirementData() uintptr

func KSecCodeInfoRequirements

func KSecCodeInfoRequirements() uintptr

func KSecCodeInfoRuntimeVersion

func KSecCodeInfoRuntimeVersion() uintptr

func KSecCodeInfoSource

func KSecCodeInfoSource() uintptr

func KSecCodeInfoStapledNotarizationTicket

func KSecCodeInfoStapledNotarizationTicket() uintptr

func KSecCodeInfoStatus

func KSecCodeInfoStatus() uintptr

func KSecCodeInfoTeamIdentifier

func KSecCodeInfoTeamIdentifier() uintptr

func KSecCodeInfoTime

func KSecCodeInfoTime() uintptr

func KSecCodeInfoTimestamp

func KSecCodeInfoTimestamp() uintptr

func KSecCodeInfoTrust

func KSecCodeInfoTrust() uintptr

func KSecCodeInfoUnique

func KSecCodeInfoUnique() uintptr

func KSecCompressionRatio deprecated

func KSecCompressionRatio() uintptr

Deprecated: SecTransform is no longer supported

func KSecDecodeTypeAttribute

func KSecDecodeTypeAttribute() uintptr

func KSecDigestHMACKeyAttribute

func KSecDigestHMACKeyAttribute() uintptr

@constant kSecDigestHMACKeyAttribute When set and used with one of the HMAC digest types, sets the key for the HMAC operation. The data type for this attribute must be a CFDataRef. If this value is not set, the transform will assume a zero length key. Deprecated: SecTransform is no longer supported

func KSecDigestHMACMD5

func KSecDigestHMACMD5() uintptr

@abstract Specifies an HMAC using the MD5 digest algorithm. Deprecated: SecTransform is no longer supported

func KSecDigestHMACSHA1

func KSecDigestHMACSHA1() uintptr

@abstract Specifies an HMAC using the SHA1 digest algorithm. Deprecated: SecTransform is no longer supported

func KSecDigestHMACSHA2

func KSecDigestHMACSHA2() uintptr

@abstract Specifies an HMAC using one of the SHA2 digest algorithms. Deprecated: SecTransform is no longer supported

func KSecDigestLengthAttribute

func KSecDigestLengthAttribute() uintptr

@constant kSecDigestLengthAttribute Used with SecTransformGetAttribute to query the length attribute. Returns a CFNumberRef that contains the length in bytes. Deprecated: SecTransform is no longer supported

func KSecDigestMD2

func KSecDigestMD2() uintptr

@abstract Specifies an MD2 digest Deprecated: SecTransform is no longer supported

func KSecDigestMD4

func KSecDigestMD4() uintptr

@abstract Specifies an MD4 digest Deprecated: SecTransform is no longer supported

func KSecDigestMD5

func KSecDigestMD5() uintptr

@abstract Specifies an MD5 digest Deprecated: SecTransform is no longer supported

func KSecDigestSHA1

func KSecDigestSHA1() uintptr

@abstract Specifies a SHA1 digest Deprecated: SecTransform is no longer supported

func KSecDigestSHA2

func KSecDigestSHA2() uintptr

@abstract Specifies a SHA2 digest. Deprecated: SecTransform is no longer supported

func KSecDigestTypeAttribute

func KSecDigestTypeAttribute() uintptr

@constant kSecDigestTypeAttribute Used with SecTransformGetAttribute to query the attribute type. Returns one of the strings defined in the previous section. Deprecated: SecTransform is no longer supported

func KSecEncodeLineLengthAttribute

func KSecEncodeLineLengthAttribute() uintptr

@constant kSecEncodeLineLengthAttribute Used with SecTransformSetAttribute to set the length of encoded Base32 or Base64 lines. Some systems will not decode or otherwise deal with excessively long lines, or may be defined to limit lines to specific lengths (for example RFC1421 - 64, and RFC2045 - 76). The LineLengthAttribute may be set to any positive value (via a CFNumberRef) to limit to a specific length (values smaller then X for Base32 or Y for Base64 are assume to be X or Y), or to zero for no specific limit. Either of the string constants kSecLineLength64 (RFC1421), or kSecLineLength76 (RFC2045) may be used to set line lengths of 64 or 76 bytes. Deprecated: SecTransform is no longer supported

func KSecEncodeTypeAttribute deprecated

func KSecEncodeTypeAttribute() uintptr

Deprecated: SecTransform is no longer supported

func KSecEncryptKey

func KSecEncryptKey() uintptr

@abstract This attribute holds the encryption key for the transform. (ReadOnly) Deprecated: SecTransform is no longer supported

func KSecEncryptionMode

func KSecEncryptionMode() uintptr

@abstract Specifies the encryption mode. @discussion This key is optional. If you do not supply this key, an appropriate value will be supplied for you. Deprecated: SecTransform is no longer supported

func KSecGuestAttributeArchitecture

func KSecGuestAttributeArchitecture() uintptr

func KSecGuestAttributeAudit

func KSecGuestAttributeAudit() uintptr

func KSecGuestAttributeCanonical

func KSecGuestAttributeCanonical() uintptr

func KSecGuestAttributeDynamicCode

func KSecGuestAttributeDynamicCode() uintptr

func KSecGuestAttributeDynamicCodeInfoPlist

func KSecGuestAttributeDynamicCodeInfoPlist() uintptr

func KSecGuestAttributeHash

func KSecGuestAttributeHash() uintptr

func KSecGuestAttributeMachPort

func KSecGuestAttributeMachPort() uintptr

func KSecGuestAttributePid

func KSecGuestAttributePid() uintptr

func KSecGuestAttributeSubarchitecture

func KSecGuestAttributeSubarchitecture() uintptr

func KSecIVKey

func KSecIVKey() uintptr

@abstract Key for setting an initialization vector. @discussion This key is optional. If you do not supply a value for this key, an appropriate value will be supplied for you. Deprecated: SecTransform is no longer supported

func KSecIdentityDomainDefault

func KSecIdentityDomainDefault() uintptr

@const kSecIdentityDomainDefault The system-wide default identity.

func KSecIdentityDomainKerberosKDC

func KSecIdentityDomainKerberosKDC() uintptr

@const kSecIdentityDomainKerberosKDC Kerberos KDC identity.

func KSecImportExportAccess

func KSecImportExportAccess() uintptr

func KSecImportExportKeychain

func KSecImportExportKeychain() uintptr

func KSecImportExportPassphrase

func KSecImportExportPassphrase() uintptr

@enum Import/Export options @discussion Predefined key constants used when passing dictionary-based arguments to import/export functions. @constant kSecImportExportPassphrase Specifies a passphrase represented by a CFStringRef to be used when exporting to (or importing from) PKCS#12 format. @constant kSecImportExportKeychain On macOS, specifies a keychain represented by a SecKeychainRef to be used as the target when importing from PKCS#12 format. @constant kSecImportExportAccess On macOS, specifies an access represented by a SecAccessRef for the initial access (ACL) of a key imported from PKCS#12 format. @constant kSecImportToMemoryOnly Specifies (with a value of kCFBooleanTrue) that items imported from PKCS#12 format should be kept in process memory only and not permanently stored in the keychain. This can be specified on either macOS or iOS, though it is already default behavior on iOS. If this key is provided, keychain-related import options are ignored since the keychain will not be used.

func KSecImportItemCertChain

func KSecImportItemCertChain() uintptr

func KSecImportItemIdentity

func KSecImportItemIdentity() uintptr

func KSecImportItemKeyID

func KSecImportItemKeyID() uintptr

func KSecImportItemLabel

func KSecImportItemLabel() uintptr

@enum Import/Export item description @discussion Predefined key constants used to pass back a CFArray with a CFDictionary per item. @constant kSecImportItemLabel a CFStringRef representing the item label. This implementation specific identifier cannot be expected to have any format. @constant kSecImportItemKeyID a CFDataRef representing the key id. Often the SHA-1 digest of the public key. @constant kSecImportItemIdentity a SecIdentityRef representing the identity. @constant kSecImportItemTrust a SecTrustRef set up with all relevant certificates. Not guaranteed to successfully evaluate. @constant kSecImportItemCertChain a CFArrayRef holding all relevant certificates for this item's identity

func KSecImportItemTrust

func KSecImportItemTrust() uintptr

func KSecImportToMemoryOnly

func KSecImportToMemoryOnly() uintptr

func KSecInputIsAttributeName deprecated

func KSecInputIsAttributeName() uintptr

Deprecated: SecTransform is no longer supported

func KSecInputIsDigest

func KSecInputIsDigest() uintptr

func KSecInputIsPlainText deprecated

func KSecInputIsPlainText() uintptr

Deprecated: SecTransform is no longer supported

func KSecInputIsRaw deprecated

func KSecInputIsRaw() uintptr

Deprecated: SecTransform is no longer supported

func KSecKeyAlgorithmECDHKeyExchangeCofactor

func KSecKeyAlgorithmECDHKeyExchangeCofactor() uintptr

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA1

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA1() uintptr

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA224

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA224() uintptr

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA256

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA256() uintptr

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA384

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA384() uintptr

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA512

func KSecKeyAlgorithmECDHKeyExchangeCofactorX963SHA512() uintptr

func KSecKeyAlgorithmECDHKeyExchangeStandard

func KSecKeyAlgorithmECDHKeyExchangeStandard() uintptr

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA1

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA1() uintptr

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA224

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA224() uintptr

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA256

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA256() uintptr

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA384

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA384() uintptr

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA512

func KSecKeyAlgorithmECDHKeyExchangeStandardX963SHA512() uintptr

func KSecKeyAlgorithmECDSASignatureDigestRFC4754

func KSecKeyAlgorithmECDSASignatureDigestRFC4754() uintptr

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA1

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA1() uintptr

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA224

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA224() uintptr

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA256

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA256() uintptr

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA384

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA384() uintptr

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA512

func KSecKeyAlgorithmECDSASignatureDigestRFC4754SHA512() uintptr

func KSecKeyAlgorithmECDSASignatureDigestX962

func KSecKeyAlgorithmECDSASignatureDigestX962() uintptr

func KSecKeyAlgorithmECDSASignatureDigestX962SHA1

func KSecKeyAlgorithmECDSASignatureDigestX962SHA1() uintptr

func KSecKeyAlgorithmECDSASignatureDigestX962SHA224

func KSecKeyAlgorithmECDSASignatureDigestX962SHA224() uintptr

func KSecKeyAlgorithmECDSASignatureDigestX962SHA256

func KSecKeyAlgorithmECDSASignatureDigestX962SHA256() uintptr

func KSecKeyAlgorithmECDSASignatureDigestX962SHA384

func KSecKeyAlgorithmECDSASignatureDigestX962SHA384() uintptr

func KSecKeyAlgorithmECDSASignatureDigestX962SHA512

func KSecKeyAlgorithmECDSASignatureDigestX962SHA512() uintptr

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA1

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA1() uintptr

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA224

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA224() uintptr

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA256

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA256() uintptr

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA384

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA384() uintptr

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA512

func KSecKeyAlgorithmECDSASignatureMessageRFC4754SHA512() uintptr

func KSecKeyAlgorithmECDSASignatureMessageX962SHA1

func KSecKeyAlgorithmECDSASignatureMessageX962SHA1() uintptr

func KSecKeyAlgorithmECDSASignatureMessageX962SHA224

func KSecKeyAlgorithmECDSASignatureMessageX962SHA224() uintptr

func KSecKeyAlgorithmECDSASignatureMessageX962SHA256

func KSecKeyAlgorithmECDSASignatureMessageX962SHA256() uintptr

func KSecKeyAlgorithmECDSASignatureMessageX962SHA384

func KSecKeyAlgorithmECDSASignatureMessageX962SHA384() uintptr

func KSecKeyAlgorithmECDSASignatureMessageX962SHA512

func KSecKeyAlgorithmECDSASignatureMessageX962SHA512() uintptr

func KSecKeyAlgorithmECDSASignatureRFC4754 deprecated

func KSecKeyAlgorithmECDSASignatureRFC4754() uintptr

Deprecated: since macOS 14.0.

func KSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA224AESGCM

func KSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA224AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA256AESGCM

func KSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA256AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA384AESGCM

func KSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA384AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA512AESGCM

func KSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA512AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA1AESGCM

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA1AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA224AESGCM

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA224AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA256AESGCM

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA256AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA384AESGCM

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA384AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA512AESGCM

func KSecKeyAlgorithmECIESEncryptionCofactorX963SHA512AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA224AESGCM

func KSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA224AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA256AESGCM

func KSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA256AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA384AESGCM

func KSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA384AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA512AESGCM

func KSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA512AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA1AESGCM

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA1AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA224AESGCM

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA224AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA256AESGCM

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA256AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA384AESGCM

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA384AESGCM() uintptr

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA512AESGCM

func KSecKeyAlgorithmECIESEncryptionStandardX963SHA512AESGCM() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA1

func KSecKeyAlgorithmRSAEncryptionOAEPSHA1() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA1AESGCM

func KSecKeyAlgorithmRSAEncryptionOAEPSHA1AESGCM() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA224

func KSecKeyAlgorithmRSAEncryptionOAEPSHA224() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA224AESGCM

func KSecKeyAlgorithmRSAEncryptionOAEPSHA224AESGCM() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA256

func KSecKeyAlgorithmRSAEncryptionOAEPSHA256() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA256AESGCM

func KSecKeyAlgorithmRSAEncryptionOAEPSHA256AESGCM() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA384

func KSecKeyAlgorithmRSAEncryptionOAEPSHA384() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA384AESGCM

func KSecKeyAlgorithmRSAEncryptionOAEPSHA384AESGCM() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA512

func KSecKeyAlgorithmRSAEncryptionOAEPSHA512() uintptr

func KSecKeyAlgorithmRSAEncryptionOAEPSHA512AESGCM

func KSecKeyAlgorithmRSAEncryptionOAEPSHA512AESGCM() uintptr

func KSecKeyAlgorithmRSAEncryptionPKCS1

func KSecKeyAlgorithmRSAEncryptionPKCS1() uintptr

func KSecKeyAlgorithmRSAEncryptionRaw

func KSecKeyAlgorithmRSAEncryptionRaw() uintptr

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw() uintptr

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1() uintptr

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224() uintptr

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256() uintptr

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384() uintptr

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512

func KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512() uintptr

func KSecKeyAlgorithmRSASignatureDigestPSSSHA1

func KSecKeyAlgorithmRSASignatureDigestPSSSHA1() uintptr

func KSecKeyAlgorithmRSASignatureDigestPSSSHA224

func KSecKeyAlgorithmRSASignatureDigestPSSSHA224() uintptr

func KSecKeyAlgorithmRSASignatureDigestPSSSHA256

func KSecKeyAlgorithmRSASignatureDigestPSSSHA256() uintptr

func KSecKeyAlgorithmRSASignatureDigestPSSSHA384

func KSecKeyAlgorithmRSASignatureDigestPSSSHA384() uintptr

func KSecKeyAlgorithmRSASignatureDigestPSSSHA512

func KSecKeyAlgorithmRSASignatureDigestPSSSHA512() uintptr

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA1

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA1() uintptr

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA224

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA224() uintptr

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA256

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA256() uintptr

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA384

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA384() uintptr

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA512

func KSecKeyAlgorithmRSASignatureMessagePKCS1v15SHA512() uintptr

func KSecKeyAlgorithmRSASignatureMessagePSSSHA1

func KSecKeyAlgorithmRSASignatureMessagePSSSHA1() uintptr

func KSecKeyAlgorithmRSASignatureMessagePSSSHA224

func KSecKeyAlgorithmRSASignatureMessagePSSSHA224() uintptr

func KSecKeyAlgorithmRSASignatureMessagePSSSHA256

func KSecKeyAlgorithmRSASignatureMessagePSSSHA256() uintptr

func KSecKeyAlgorithmRSASignatureMessagePSSSHA384

func KSecKeyAlgorithmRSASignatureMessagePSSSHA384() uintptr

func KSecKeyAlgorithmRSASignatureMessagePSSSHA512

func KSecKeyAlgorithmRSASignatureMessagePSSSHA512() uintptr

func KSecKeyAlgorithmRSASignatureRaw

func KSecKeyAlgorithmRSASignatureRaw() uintptr

func KSecKeyAttributeName deprecated

func KSecKeyAttributeName() uintptr

Deprecated: SecTransform is no longer supported

func KSecKeyKeyExchangeParameterRequestedSize

func KSecKeyKeyExchangeParameterRequestedSize() uintptr

func KSecKeyKeyExchangeParameterSharedInfo

func KSecKeyKeyExchangeParameterSharedInfo() uintptr

func KSecLineLength64 deprecated

func KSecLineLength64() uintptr

Deprecated: SecTransform is no longer supported

func KSecLineLength76 deprecated

func KSecLineLength76() uintptr

Deprecated: SecTransform is no longer supported

func KSecMatchCaseInsensitive

func KSecMatchCaseInsensitive() uintptr

func KSecMatchDiacriticInsensitive

func KSecMatchDiacriticInsensitive() uintptr

func KSecMatchEmailAddressIfPresent

func KSecMatchEmailAddressIfPresent() uintptr

func KSecMatchHostOrSubdomainOfHost

func KSecMatchHostOrSubdomainOfHost() uintptr

func KSecMatchIssuers

func KSecMatchIssuers() uintptr

func KSecMatchItemList

func KSecMatchItemList() uintptr

func KSecMatchLimit

func KSecMatchLimit() uintptr

func KSecMatchLimitAll

func KSecMatchLimitAll() uintptr

func KSecMatchLimitOne

func KSecMatchLimitOne() uintptr

func KSecMatchPolicy

func KSecMatchPolicy() uintptr

@enum Search Constants @discussion Predefined search constants used to set values in a query dictionary. You can specify a combination of search attributes and item attributes when looking for matching items with the SecItemCopyMatching function. @constant kSecMatchPolicy Specifies a dictionary key whose value is a SecPolicyRef. If provided, returned certificates or identities must verify with this policy. @constant kSecMatchItemList macOS only. Specifies a dictionary key whose value is a CFArray of SecKeychainItemRef items. If provided, returned items will be limited to the subset which are contained in this list. @constant kSecMatchSearchList Specifies a dictionary key whose value is a CFArray of SecKeychainRef items. If provided, the search will be limited to the keychains contained in this list. @constant kSecMatchIssuers Specifies a dictionary key whose value is a CFArray of X.500 names (of type CFDataRef). If provided, returned certificates or identities will be limited to those whose certificate chain contains one of the issuers provided in this list. @constant kSecMatchEmailAddressIfPresent Specifies a dictionary key whose value is a CFStringRef containing an RFC822 email address. If provided, returned certificates or identities will be limited to those that contain the address in their subject or subject alternative name. @constant kSecMatchSubjectContains Specifies a dictionary key whose value is a CFStringRef. If provided, returned certificates or identities will be limited to those containing this string in the subject. @constant kSecMatchHostOrSubdomainOfHost Specifies a dictionary key whose value is a CFStringRef. If provided, returned internet passwords will be limited to those which have a server host that is equal to or a subdomain of this string. This filter only works on the Data Protection Keychain on macOS. @constant kSecMatchSubjectStartsWith macOS only. Specifies a dictionary key whose value is a CFStringRef. If provided, returned certificates or identities will be limited to those with subject names that start with this string. @constant kSecMatchSubjectEndsWith macOS only. Specifies a dictionary key whose value is a CFStringRef. If provided, returned certificates or identities will be limited to those with subject names that end with this string. @constant kSecMatchSubjectWholeString macOS only. Specifies a dictionary key whose value is a CFStringRef. If provided, returned certificates or identities will be limited to those matching this string exactly in the subject. @constant kSecMatchCaseInsensitive Specifies a dictionary key whose value is a CFBooleanRef. If this value is kCFBooleanFalse, or is not provided, then case-sensitive string matching is performed. @constant kSecMatchDiacriticInsensitive macOS only. Specifies a dictionary key whose value is a CFBooleanRef. If this value is kCFBooleanFalse, or is not provided, then diacritic-sensitive string matching is performed. @constant kSecMatchWidthInsensitive macOS only. Specifies a dictionary key whose value is a CFBooleanRef. If this value is kCFBooleanFalse, or is not provided, then string matching is width-sensitive (e.g. 'a' != 0xFF41). @constant kSecMatchTrustedOnly Specifies a dictionary key whose value is a CFBooleanRef. If provided with a value of kCFBooleanTrue, only certificates which can be verified back to a trusted anchor will be returned. If this value is kCFBooleanFalse, or is not provided, then both trusted and untrusted certificates may be returned. @constant kSecMatchValidOnDate Specifies a dictionary key whose value is of type CFDateRef. If provided, returned keys, certificates or identities will be limited to those which are valid for the given date. Pass a value of kCFNull to indicate the current date. @constant kSecMatchLimit Specifies a dictionary key whose value is a CFNumberRef. If provided, this value specifies the maximum number of results to return. If not provided, results are limited to the first item found. Predefined values are provided for a single item (kSecMatchLimitOne) and all matching items (kSecMatchLimitAll). @constant kSecMatchLimitOne Specifies that results are limited to the first item found; used as a value for the kSecMatchLimit dictionary key. @constant kSecMatchLimitAll Specifies that an unlimited number of results may be returned; used as a value for the kSecMatchLimit dictionary key.

func KSecMatchSearchList

func KSecMatchSearchList() uintptr

func KSecMatchSubjectContains

func KSecMatchSubjectContains() uintptr

func KSecMatchSubjectEndsWith

func KSecMatchSubjectEndsWith() uintptr

func KSecMatchSubjectStartsWith

func KSecMatchSubjectStartsWith() uintptr

func KSecMatchSubjectWholeString

func KSecMatchSubjectWholeString() uintptr

func KSecMatchTrustedOnly

func KSecMatchTrustedOnly() uintptr

func KSecMatchValidOnDate

func KSecMatchValidOnDate() uintptr

func KSecMatchWidthInsensitive

func KSecMatchWidthInsensitive() uintptr

func KSecModeCBCKey

func KSecModeCBCKey() uintptr

Indicates that CBC mode will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecModeCFBKey

func KSecModeCFBKey() uintptr

Indicates that CFB mode will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecModeECBKey

func KSecModeECBKey() uintptr

Indicates that ECB mode will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecModeNoneKey

func KSecModeNoneKey() uintptr

Indicates that no mode will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecModeOFBKey

func KSecModeOFBKey() uintptr

Indicates that OFB mode will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecOAEPEncodingParametersAttributeName

func KSecOAEPEncodingParametersAttributeName() uintptr

@abstract Specifies the OAEP encoding paramaters @discussion This should be set to a CFDataRef when the padding is set to OAEP. If unset a zero length CFDataRef is used. It is ignored by non OAEP padding modes. Deprecated: SecTransform is no longer supported

func KSecOAEPMGF1DigestAlgorithmAttributeName

func KSecOAEPMGF1DigestAlgorithmAttributeName() uintptr

@abstract Specifies the OAEP MGF1 digest algorithm. @discussion This should be set to a digest algorithm when the padding is set to OAEP. If unset SHA1 is used. It is ifnored by non OAEP padding modes. Deprecated: SecTransform is no longer supported

func KSecOAEPMessageLengthAttributeName

func KSecOAEPMessageLengthAttributeName() uintptr

@abstract Specifies the OAEP message length. @discussion This should be set to a CFNumberRef when the padding is set to OAEP, and a specific messages size is desired. If unset the minimum padding will be added. It is ignored when the padding mode is not OAEP. Deprecated: SecTransform is no longer supported

func KSecOIDADC_CERT_POLICY

func KSecOIDADC_CERT_POLICY() uintptr

func KSecOIDAPPLE_CERT_POLICY

func KSecOIDAPPLE_CERT_POLICY() uintptr

func KSecOIDAPPLE_EKU_CODE_SIGNING

func KSecOIDAPPLE_EKU_CODE_SIGNING() uintptr

func KSecOIDAPPLE_EKU_CODE_SIGNING_DEV

func KSecOIDAPPLE_EKU_CODE_SIGNING_DEV() uintptr

func KSecOIDAPPLE_EKU_ICHAT_ENCRYPTION

func KSecOIDAPPLE_EKU_ICHAT_ENCRYPTION() uintptr

func KSecOIDAPPLE_EKU_ICHAT_SIGNING

func KSecOIDAPPLE_EKU_ICHAT_SIGNING() uintptr

func KSecOIDAPPLE_EKU_RESOURCE_SIGNING

func KSecOIDAPPLE_EKU_RESOURCE_SIGNING() uintptr

func KSecOIDAPPLE_EKU_SYSTEM_IDENTITY

func KSecOIDAPPLE_EKU_SYSTEM_IDENTITY() uintptr

func KSecOIDAPPLE_EXTENSION

func KSecOIDAPPLE_EXTENSION() uintptr

func KSecOIDAPPLE_EXTENSION_AAI_INTERMEDIATE

func KSecOIDAPPLE_EXTENSION_AAI_INTERMEDIATE() uintptr

func KSecOIDAPPLE_EXTENSION_ADC_APPLE_SIGNING

func KSecOIDAPPLE_EXTENSION_ADC_APPLE_SIGNING() uintptr

func KSecOIDAPPLE_EXTENSION_ADC_DEV_SIGNING

func KSecOIDAPPLE_EXTENSION_ADC_DEV_SIGNING() uintptr

func KSecOIDAPPLE_EXTENSION_APPLEID_INTERMEDIATE

func KSecOIDAPPLE_EXTENSION_APPLEID_INTERMEDIATE() uintptr

func KSecOIDAPPLE_EXTENSION_APPLE_SIGNING

func KSecOIDAPPLE_EXTENSION_APPLE_SIGNING() uintptr

func KSecOIDAPPLE_EXTENSION_CODE_SIGNING

func KSecOIDAPPLE_EXTENSION_CODE_SIGNING() uintptr

func KSecOIDAPPLE_EXTENSION_INTERMEDIATE_MARKER

func KSecOIDAPPLE_EXTENSION_INTERMEDIATE_MARKER() uintptr

func KSecOIDAPPLE_EXTENSION_ITMS_INTERMEDIATE

func KSecOIDAPPLE_EXTENSION_ITMS_INTERMEDIATE() uintptr

func KSecOIDAPPLE_EXTENSION_WWDR_INTERMEDIATE

func KSecOIDAPPLE_EXTENSION_WWDR_INTERMEDIATE() uintptr

func KSecOIDAuthorityInfoAccess

func KSecOIDAuthorityInfoAccess() uintptr

func KSecOIDAuthorityKeyIdentifier

func KSecOIDAuthorityKeyIdentifier() uintptr

func KSecOIDBasicConstraints

func KSecOIDBasicConstraints() uintptr

func KSecOIDBiometricInfo

func KSecOIDBiometricInfo() uintptr

func KSecOIDCSSMKeyStruct

func KSecOIDCSSMKeyStruct() uintptr

func KSecOIDCertIssuer

func KSecOIDCertIssuer() uintptr

func KSecOIDCertificatePolicies

func KSecOIDCertificatePolicies() uintptr

func KSecOIDClientAuth

func KSecOIDClientAuth() uintptr

func KSecOIDCollectiveStateProvinceName

func KSecOIDCollectiveStateProvinceName() uintptr

func KSecOIDCollectiveStreetAddress

func KSecOIDCollectiveStreetAddress() uintptr

func KSecOIDCommonName

func KSecOIDCommonName() uintptr

func KSecOIDCountryName

func KSecOIDCountryName() uintptr

func KSecOIDCrlDistributionPoints

func KSecOIDCrlDistributionPoints() uintptr

func KSecOIDCrlNumber

func KSecOIDCrlNumber() uintptr

func KSecOIDCrlReason

func KSecOIDCrlReason() uintptr

func KSecOIDDOTMAC_CERT_EMAIL_ENCRYPT

func KSecOIDDOTMAC_CERT_EMAIL_ENCRYPT() uintptr

func KSecOIDDOTMAC_CERT_EMAIL_SIGN

func KSecOIDDOTMAC_CERT_EMAIL_SIGN() uintptr

func KSecOIDDOTMAC_CERT_EXTENSION

func KSecOIDDOTMAC_CERT_EXTENSION() uintptr

func KSecOIDDOTMAC_CERT_IDENTITY

func KSecOIDDOTMAC_CERT_IDENTITY() uintptr

func KSecOIDDOTMAC_CERT_POLICY

func KSecOIDDOTMAC_CERT_POLICY() uintptr

func KSecOIDDeltaCrlIndicator

func KSecOIDDeltaCrlIndicator() uintptr

func KSecOIDDescription

func KSecOIDDescription() uintptr

func KSecOIDEKU_IPSec

func KSecOIDEKU_IPSec() uintptr

func KSecOIDEmailAddress

func KSecOIDEmailAddress() uintptr

func KSecOIDEmailProtection

func KSecOIDEmailProtection() uintptr

func KSecOIDExtendedKeyUsage

func KSecOIDExtendedKeyUsage() uintptr

func KSecOIDExtendedKeyUsageAny

func KSecOIDExtendedKeyUsageAny() uintptr

func KSecOIDExtendedUseCodeSigning

func KSecOIDExtendedUseCodeSigning() uintptr

func KSecOIDGivenName

func KSecOIDGivenName() uintptr

func KSecOIDHoldInstructionCode

func KSecOIDHoldInstructionCode() uintptr

func KSecOIDInvalidityDate

func KSecOIDInvalidityDate() uintptr

func KSecOIDIssuerAltName

func KSecOIDIssuerAltName() uintptr

func KSecOIDIssuingDistributionPoint

func KSecOIDIssuingDistributionPoint() uintptr

func KSecOIDIssuingDistributionPoints

func KSecOIDIssuingDistributionPoints() uintptr

func KSecOIDKERBv5_PKINIT_KP_CLIENT_AUTH

func KSecOIDKERBv5_PKINIT_KP_CLIENT_AUTH() uintptr

func KSecOIDKERBv5_PKINIT_KP_KDC

func KSecOIDKERBv5_PKINIT_KP_KDC() uintptr

func KSecOIDKeyUsage

func KSecOIDKeyUsage() uintptr

func KSecOIDLocalityName

func KSecOIDLocalityName() uintptr

func KSecOIDMS_NTPrincipalName

func KSecOIDMS_NTPrincipalName() uintptr

func KSecOIDMicrosoftSGC

func KSecOIDMicrosoftSGC() uintptr

func KSecOIDNameConstraints

func KSecOIDNameConstraints() uintptr

func KSecOIDNetscapeCertSequence

func KSecOIDNetscapeCertSequence() uintptr

func KSecOIDNetscapeCertType

func KSecOIDNetscapeCertType() uintptr

func KSecOIDNetscapeSGC

func KSecOIDNetscapeSGC() uintptr

func KSecOIDOCSPSigning

func KSecOIDOCSPSigning() uintptr

func KSecOIDOrganizationName

func KSecOIDOrganizationName() uintptr

func KSecOIDOrganizationalUnitName

func KSecOIDOrganizationalUnitName() uintptr

func KSecOIDPolicyConstraints

func KSecOIDPolicyConstraints() uintptr

func KSecOIDPolicyMappings

func KSecOIDPolicyMappings() uintptr

func KSecOIDPrivateKeyUsagePeriod

func KSecOIDPrivateKeyUsagePeriod() uintptr

func KSecOIDQC_Statements

func KSecOIDQC_Statements() uintptr

func KSecOIDSRVName

func KSecOIDSRVName() uintptr

func KSecOIDSerialNumber

func KSecOIDSerialNumber() uintptr

func KSecOIDServerAuth

func KSecOIDServerAuth() uintptr

func KSecOIDStateProvinceName

func KSecOIDStateProvinceName() uintptr

func KSecOIDStreetAddress

func KSecOIDStreetAddress() uintptr

func KSecOIDSubjectAltName

func KSecOIDSubjectAltName() uintptr

func KSecOIDSubjectDirectoryAttributes

func KSecOIDSubjectDirectoryAttributes() uintptr

func KSecOIDSubjectEmailAddress

func KSecOIDSubjectEmailAddress() uintptr

func KSecOIDSubjectInfoAccess

func KSecOIDSubjectInfoAccess() uintptr

func KSecOIDSubjectKeyIdentifier

func KSecOIDSubjectKeyIdentifier() uintptr

func KSecOIDSubjectPicture

func KSecOIDSubjectPicture() uintptr

func KSecOIDSubjectSignatureBitmap

func KSecOIDSubjectSignatureBitmap() uintptr

func KSecOIDSurname

func KSecOIDSurname() uintptr

func KSecOIDTimeStamping

func KSecOIDTimeStamping() uintptr

func KSecOIDTitle

func KSecOIDTitle() uintptr

func KSecOIDUseExemptions

func KSecOIDUseExemptions() uintptr

func KSecOIDX509V1CertificateIssuerUniqueId

func KSecOIDX509V1CertificateIssuerUniqueId() uintptr

func KSecOIDX509V1CertificateSubjectUniqueId

func KSecOIDX509V1CertificateSubjectUniqueId() uintptr

func KSecOIDX509V1IssuerName

func KSecOIDX509V1IssuerName() uintptr

func KSecOIDX509V1IssuerNameCStruct

func KSecOIDX509V1IssuerNameCStruct() uintptr

func KSecOIDX509V1IssuerNameLDAP

func KSecOIDX509V1IssuerNameLDAP() uintptr

func KSecOIDX509V1IssuerNameStd

func KSecOIDX509V1IssuerNameStd() uintptr

func KSecOIDX509V1SerialNumber

func KSecOIDX509V1SerialNumber() uintptr

func KSecOIDX509V1Signature

func KSecOIDX509V1Signature() uintptr

func KSecOIDX509V1SignatureAlgorithm

func KSecOIDX509V1SignatureAlgorithm() uintptr

func KSecOIDX509V1SignatureAlgorithmParameters

func KSecOIDX509V1SignatureAlgorithmParameters() uintptr

func KSecOIDX509V1SignatureAlgorithmTBS

func KSecOIDX509V1SignatureAlgorithmTBS() uintptr

func KSecOIDX509V1SignatureCStruct

func KSecOIDX509V1SignatureCStruct() uintptr

func KSecOIDX509V1SignatureStruct

func KSecOIDX509V1SignatureStruct() uintptr

func KSecOIDX509V1SubjectName

func KSecOIDX509V1SubjectName() uintptr

func KSecOIDX509V1SubjectNameCStruct

func KSecOIDX509V1SubjectNameCStruct() uintptr

func KSecOIDX509V1SubjectNameLDAP

func KSecOIDX509V1SubjectNameLDAP() uintptr

func KSecOIDX509V1SubjectNameStd

func KSecOIDX509V1SubjectNameStd() uintptr

func KSecOIDX509V1SubjectPublicKey

func KSecOIDX509V1SubjectPublicKey() uintptr

func KSecOIDX509V1SubjectPublicKeyAlgorithm

func KSecOIDX509V1SubjectPublicKeyAlgorithm() uintptr

func KSecOIDX509V1SubjectPublicKeyAlgorithmParameters

func KSecOIDX509V1SubjectPublicKeyAlgorithmParameters() uintptr

func KSecOIDX509V1SubjectPublicKeyCStruct

func KSecOIDX509V1SubjectPublicKeyCStruct() uintptr

func KSecOIDX509V1ValidityNotAfter

func KSecOIDX509V1ValidityNotAfter() uintptr

func KSecOIDX509V1ValidityNotBefore

func KSecOIDX509V1ValidityNotBefore() uintptr

func KSecOIDX509V1Version

func KSecOIDX509V1Version() uintptr

func KSecOIDX509V3Certificate

func KSecOIDX509V3Certificate() uintptr

func KSecOIDX509V3CertificateCStruct

func KSecOIDX509V3CertificateCStruct() uintptr

func KSecOIDX509V3CertificateExtensionCStruct

func KSecOIDX509V3CertificateExtensionCStruct() uintptr

func KSecOIDX509V3CertificateExtensionCritical

func KSecOIDX509V3CertificateExtensionCritical() uintptr

func KSecOIDX509V3CertificateExtensionId

func KSecOIDX509V3CertificateExtensionId() uintptr

func KSecOIDX509V3CertificateExtensionStruct

func KSecOIDX509V3CertificateExtensionStruct() uintptr

func KSecOIDX509V3CertificateExtensionType

func KSecOIDX509V3CertificateExtensionType() uintptr

func KSecOIDX509V3CertificateExtensionValue

func KSecOIDX509V3CertificateExtensionValue() uintptr

func KSecOIDX509V3CertificateExtensionsCStruct

func KSecOIDX509V3CertificateExtensionsCStruct() uintptr

func KSecOIDX509V3CertificateExtensionsStruct

func KSecOIDX509V3CertificateExtensionsStruct() uintptr

func KSecOIDX509V3CertificateNumberOfExtensions

func KSecOIDX509V3CertificateNumberOfExtensions() uintptr

func KSecOIDX509V3SignedCertificate

func KSecOIDX509V3SignedCertificate() uintptr

func KSecOIDX509V3SignedCertificateCStruct

func KSecOIDX509V3SignedCertificateCStruct() uintptr

func KSecPaddingKey

func KSecPaddingKey() uintptr

@abstract Key for setting padding. @discussion This key is optional. If you do not supply a value for this key, an appropriate value will be supplied for you. Deprecated: SecTransform is no longer supported

func KSecPaddingNoneKey

func KSecPaddingNoneKey() uintptr

@abstract Indicates that no padding will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecPaddingOAEPKey

func KSecPaddingOAEPKey() uintptr

Indicates that PKCS7 padding will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecPaddingPKCS1Key

func KSecPaddingPKCS1Key() uintptr

Indicates that PKCS1 padding will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecPaddingPKCS5Key

func KSecPaddingPKCS5Key() uintptr

Indicates that PKCS5 padding will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecPaddingPKCS7Key

func KSecPaddingPKCS7Key() uintptr

Indicates that PKCS7 padding will be used when encrypting or decrypting. Deprecated: SecTransform is no longer supported

func KSecPolicyAppleCodeSigning

func KSecPolicyAppleCodeSigning() uintptr

func KSecPolicyAppleEAP

func KSecPolicyAppleEAP() uintptr

func KSecPolicyAppleEAPClient

func KSecPolicyAppleEAPClient() uintptr

func KSecPolicyAppleEAPServer

func KSecPolicyAppleEAPServer() uintptr

func KSecPolicyAppleIDValidation

func KSecPolicyAppleIDValidation() uintptr

func KSecPolicyAppleIPSecClient

func KSecPolicyAppleIPSecClient() uintptr

func KSecPolicyAppleIPSecServer

func KSecPolicyAppleIPSecServer() uintptr

func KSecPolicyAppleIPsec

func KSecPolicyAppleIPsec() uintptr

func KSecPolicyApplePKINITClient

func KSecPolicyApplePKINITClient() uintptr

func KSecPolicyApplePKINITServer

func KSecPolicyApplePKINITServer() uintptr

func KSecPolicyApplePassbookSigning

func KSecPolicyApplePassbookSigning() uintptr

func KSecPolicyApplePayIssuerEncryption

func KSecPolicyApplePayIssuerEncryption() uintptr

func KSecPolicyAppleRevocation

func KSecPolicyAppleRevocation() uintptr

func KSecPolicyAppleSMIME

func KSecPolicyAppleSMIME() uintptr

func KSecPolicyAppleSSL

func KSecPolicyAppleSSL() uintptr

func KSecPolicyAppleSSLClient

func KSecPolicyAppleSSLClient() uintptr

func KSecPolicyAppleSSLServer

func KSecPolicyAppleSSLServer() uintptr

func KSecPolicyAppleTimeStamping

func KSecPolicyAppleTimeStamping() uintptr

func KSecPolicyAppleX509Basic

func KSecPolicyAppleX509Basic() uintptr

@enum Policy Constants @discussion Predefined constants used to specify a policy. @constant kSecPolicyAppleX509Basic @constant kSecPolicyAppleSSL @constant kSecPolicyAppleSMIME @constant kSecPolicyAppleEAP @constant kSecPolicyAppleiChat @constant kSecPolicyAppleIPsec @constant kSecPolicyApplePKINITClient @constant kSecPolicyApplePKINITServer @constant kSecPolicyAppleCodeSigning @constant kSecPolicyMacAppStoreReceipt @constant kSecPolicyAppleIDValidation @constant kSecPolicyAppleTimeStamping @constant kSecPolicyAppleRevocation @constant kSecPolicyApplePassbookSigning @constant kSecPolicyApplePayIssuerEncryption

func KSecPolicyAppleiChat

func KSecPolicyAppleiChat() uintptr

func KSecPolicyClient

func KSecPolicyClient() uintptr

func KSecPolicyKU_CRLSign

func KSecPolicyKU_CRLSign() uintptr

func KSecPolicyKU_DataEncipherment

func KSecPolicyKU_DataEncipherment() uintptr

func KSecPolicyKU_DecipherOnly

func KSecPolicyKU_DecipherOnly() uintptr

func KSecPolicyKU_DigitalSignature

func KSecPolicyKU_DigitalSignature() uintptr

@enum Policy Value Constants (macOS) @discussion Predefined property key constants used to get or set values in a dictionary for a policy instance. Some policy values may specify CFBooleanRef key usage constraints: kSecPolicyKU_DigitalSignature kSecPolicyKU_NonRepudiation kSecPolicyKU_KeyEncipherment kSecPolicyKU_DataEncipherment kSecPolicyKU_KeyAgreement kSecPolicyKU_KeyCertSign kSecPolicyKU_CRLSign kSecPolicyKU_EncipherOnly kSecPolicyKU_DecipherOnly kSecPolicyKU policy values define certificate-level key purposes, in contrast to the key-level definitions in SecItem.h For example, a key in a certificate might be acceptable to use for signing a CRL, but not for signing another certificate. In either case, this key would have the ability to sign (i.e. kSecAttrCanSign is true), but may only sign for specific purposes allowed by these policy constants. Similarly, a public key might have the capability to perform encryption or decryption, but the certificate in which it resides might have a decipher-only certificate policy. These constants correspond to values defined in RFC 5280, section 4.2.1.3 (Key Usage) which define the purpose of a key contained in a certificate, in contrast to section 4.1.2.7 which define the uses that a key is capable of. Note: these constants are not available on iOS. Your code should avoid direct reliance on these values for making policy decisions and use higher level policies where possible. @constant kSecPolicyKU_DigitalSignature Specifies that the certificate must have a key usage that allows it to be used for signing. @constant kSecPolicyKU_NonRepudiation Specifies that the certificate must have a key usage that allows it to be used for non-repudiation. @constant kSecPolicyKU_KeyEncipherment Specifies that the certificate must have a key usage that allows it to be used for key encipherment. @constant kSecPolicyKU_DataEncipherment Specifies that the certificate must have a key usage that allows it to be used for data encipherment. @constant kSecPolicyKU_KeyAgreement Specifies that the certificate must have a key usage that allows it to be used for key agreement. @constant kSecPolicyKU_KeyCertSign Specifies that the certificate must have a key usage that allows it to be used for signing certificates. @constant kSecPolicyKU_CRLSign Specifies that the certificate must have a key usage that allows it to be used for signing CRLs. @constant kSecPolicyKU_EncipherOnly Specifies that the certificate must have a key usage that permits it to be used for encryption only. @constant kSecPolicyKU_DecipherOnly Specifies that the certificate must have a key usage that permits it to be used for decryption only.

func KSecPolicyKU_EncipherOnly

func KSecPolicyKU_EncipherOnly() uintptr

func KSecPolicyKU_KeyAgreement

func KSecPolicyKU_KeyAgreement() uintptr

func KSecPolicyKU_KeyCertSign

func KSecPolicyKU_KeyCertSign() uintptr

func KSecPolicyKU_KeyEncipherment

func KSecPolicyKU_KeyEncipherment() uintptr

func KSecPolicyKU_NonRepudiation

func KSecPolicyKU_NonRepudiation() uintptr

func KSecPolicyMacAppStoreReceipt

func KSecPolicyMacAppStoreReceipt() uintptr

func KSecPolicyName

func KSecPolicyName() uintptr

func KSecPolicyOid

func KSecPolicyOid() uintptr

@enum Policy Value Constants @abstract Predefined property key constants used to get or set values in a dictionary for a policy instance. @discussion All policies will have the following read-only value: kSecPolicyOid (the policy object identifier) Additional policy values which your code can optionally set: kSecPolicyName (name which must be matched) kSecPolicyClient (evaluate for client, rather than server) kSecPolicyRevocationFlags (only valid for a revocation policy) kSecPolicyTeamIdentifier (only valid for a Passbook signing policy) @constant kSecPolicyOid Specifies the policy OID (value is a CFStringRef) @constant kSecPolicyName Specifies a CFStringRef (or CFArrayRef of same) containing a name which must be matched in the certificate to satisfy this policy. For SSL/TLS, EAP, and IPSec policies, this specifies the server name which must match the common name of the certificate. For S/MIME, this specifies the RFC822 email address. For Passbook signing, this specifies the pass signer. @constant kSecPolicyClient Specifies a CFBooleanRef value that indicates this evaluation should be for a client certificate. If not set (or false), the policy evaluates the certificate as a server certificate. @constant kSecPolicyRevocationFlags Specifies a CFNumberRef that holds a kCFNumberCFIndexType bitmask value. See "Revocation Policy Constants" for a description of individual bits in this value. @constant kSecPolicyTeamIdentifier Specifies a CFStringRef containing a team identifier which must be matched in the certificate to satisfy this policy. For the Passbook signing policy, this string must match the Organizational Unit field of the certificate subject.

func KSecPolicyRevocationFlags

func KSecPolicyRevocationFlags() uintptr

func KSecPolicyTeamIdentifier

func KSecPolicyTeamIdentifier() uintptr

func KSecPrivateKeyAttrs

func KSecPrivateKeyAttrs() uintptr

@enum Key Parameter Constants @discussion Predefined key constants used to get or set values in a dictionary. These are used to provide explicit parameters to key generation functions when non-default values are desired. See the description of the SecKeyGeneratePair API for usage information. @constant kSecPrivateKeyAttrs The value for this key is a CFDictionaryRef containing attributes specific for the private key to be generated. @constant kSecPublicKeyAttrs The value for this key is a CFDictionaryRef containing attributes specific for the public key to be generated.

func KSecPropertyKeyLabel

func KSecPropertyKeyLabel() uintptr

func KSecPropertyKeyLocalizedLabel

func KSecPropertyKeyLocalizedLabel() uintptr

func KSecPropertyKeyType

func KSecPropertyKeyType() uintptr

func KSecPropertyKeyValue

func KSecPropertyKeyValue() uintptr

func KSecPropertyTypeArray

func KSecPropertyTypeArray() uintptr

func KSecPropertyTypeData

func KSecPropertyTypeData() uintptr

func KSecPropertyTypeDate

func KSecPropertyTypeDate() uintptr

func KSecPropertyTypeError

func KSecPropertyTypeError() uintptr

func KSecPropertyTypeNumber

func KSecPropertyTypeNumber() uintptr

func KSecPropertyTypeSection

func KSecPropertyTypeSection() uintptr

func KSecPropertyTypeString

func KSecPropertyTypeString() uintptr

func KSecPropertyTypeSuccess

func KSecPropertyTypeSuccess() uintptr

func KSecPropertyTypeTitle

func KSecPropertyTypeTitle() uintptr

@enum Trust Property Constants @discussion Predefined key constants used to obtain values in a per-certificate dictionary of trust evaluation results, as retrieved from a call to SecTrustCopyProperties. @constant kSecPropertyTypeTitle Specifies a key whose value is a CFStringRef containing the title (display name) of this certificate. @constant kSecPropertyTypeError Specifies a key whose value is a CFStringRef containing the reason for a trust evaluation failure.

func KSecPropertyTypeURL

func KSecPropertyTypeURL() uintptr

func KSecPropertyTypeWarning

func KSecPropertyTypeWarning() uintptr

@enum kSecPropertyType @abstract Public Constants for property list values returned by SecCertificateCopyValues @discussion Note that kSecPropertyTypeTitle and kSecPropertyTypeError are defined in SecTrust.h

func KSecPublicKeyAttrs

func KSecPublicKeyAttrs() uintptr

func KSecRandomDefault

func KSecRandomDefault() uintptr

func KSecReturnAttributes

func KSecReturnAttributes() uintptr

func KSecReturnData

func KSecReturnData() uintptr

@enum Return Type Key Constants @discussion Predefined return type keys used to set values in a dictionary. You use these keys to specify the type of results which should be returned by the SecItemCopyMatching or SecItemAdd function. You can specify zero or more of these return types. If more than one of these result types is specified, the result is returned as a CFDictionaryRef whose keys are the result types and values are the requested data. @constant kSecReturnData Specifies a dictionary key whose value is of type CFBooleanRef. A value of kCFBooleanTrue indicates that the data of an item (CFDataRef) should be returned. For keys and password items, data is secret (encrypted) and may require the user to enter a password for access. @constant kSecReturnAttributes Specifies a dictionary key whose value is of type CFBooleanRef. A value of kCFBooleanTrue indicates that the (non-encrypted) attributes of an item (CFDictionaryRef) should be returned. @constant kSecReturnRef Specifies a dictionary key whose value is a CFBooleanRef. A value of kCFBooleanTrue indicates that a reference should be returned. Depending on the item class requested, the returned reference(s) may be of type SecKeychainItemRef, SecKeyRef, SecCertificateRef, or SecIdentityRef. Note that returning references is supported only for Certificate, Key or Identity items on iOS, watchOS and tvOS. Similarly, returning references is supported only for Certificate, Key or Identity items on macOS when either kSecUseDataProtectionKeychain is set to true or kSecAttrSynchronizable is set to true. @constant kSecReturnPersistentRef Specifies a dictionary key whose value is of type CFBooleanRef. A value of kCFBooleanTrue indicates that a persistent reference to an item (CFDataRef) should be returned.

func KSecReturnPersistentRef

func KSecReturnPersistentRef() uintptr

func KSecReturnRef

func KSecReturnRef() uintptr

func KSecSharedPassword

func KSecSharedPassword() uintptr

@enum Credential Key Constants @discussion Predefined key constants used to get values in a dictionary of credentials returned by SecRequestWebCredential. @constant kSecSharedPassword Specifies a dictionary key whose value is a shared password. You use this key to get a value of type CFStringRef that contains a password.

func KSecSignatureAttributeName

func KSecSignatureAttributeName() uintptr

func KSecTransformAbortAttributeName

func KSecTransformAbortAttributeName() uintptr

@constant kSecTransformAbortAttributeName The name of the abort attribute. Deprecated: SecTransform is no longer supported

func KSecTransformAbortOriginatorKey

func KSecTransformAbortOriginatorKey() uintptr

@constant kSecTransformAbortOriginatorKey The value of this key will be the transform that caused the transform chain to abort.

func KSecTransformActionAttributeNotification

func KSecTransformActionAttributeNotification() uintptr

@constant SecTransformActionAttributeNotification Allows a block to be called when an attribute is set. This allows for caching the value as a block variable in the instance block or transmogrifying the data to be set. This action is where a custom transform would be able to do processing outside of processing input to output as process data does. One the data has been processed the action block can call SecTransformCustomSetAttribute to update and other attribute. Deprecated: SecTransform is no longer supported

func KSecTransformActionAttributeValidation

func KSecTransformActionAttributeValidation() uintptr

@constant kSecTransformActionAttributeValidation Allows a block to be called to validate the new value for an attribute. The default is no validation and any CFTypeRef can be used as the new value. The block should return NULL if the value is ok to set on the attribute or a CFErrorRef otherwise. Deprecated: SecTransform is no longer supported

func KSecTransformActionCanExecute

func KSecTransformActionCanExecute() uintptr

@constant kSecTransformActionCanExecute Overrides the standard behavior that checks to see if all of the required attributes either have been set or are connected to another transform. When overriding the default behavior the developer can decided what the necessary data is to have for a transform to be considered 'ready to run'. Returning NULL means that the transform is ready to be run. If the transform is NOT ready to run then the override should return a CFErrorRef stipulating the error. Deprecated: SecTransform is no longer supported

func KSecTransformActionExternalizeExtraData

func KSecTransformActionExternalizeExtraData() uintptr

@constant kSecTransformActionExternalizeExtraData Allows for adding to the data that is stored using an override to the kSecTransformActionExternalizeExtraData block. The output of this override is a dictionary that contains the custom externalized data. A common use of this override is to write out a version number of a custom transform. Deprecated: SecTransform is no longer supported

func KSecTransformActionFinalize

func KSecTransformActionFinalize() uintptr

@constant kSecTransformActionFinalize Overrides the standard behavior that occurs just before deleting a custom transform. This is typically overridden to allow for memory clean up of a custom transform. This is used with the SecTransformOverrideTransformAction block. Deprecated: SecTransform is no longer supported

func KSecTransformActionInternalizeExtraData

func KSecTransformActionInternalizeExtraData() uintptr

@constant kSecTransformActionInternalizeExtraData Overrides the standard processing that occurs when externalized data is used to create a transform. This is closely tied to the kSecTransformActionExternalizeExtraData override. The 'normal' attributes are read into the new transform and then this is called to read in the items that were written out using kSecTransformActionExternalizeExtraData override. A common use of this override would be to read in the version number of the externalized custom transform. Deprecated: SecTransform is no longer supported

func KSecTransformActionProcessData

func KSecTransformActionProcessData() uintptr

@constant kSecTransformActionProcessData Overrides the standard data processing for an attribute. This is almost exclusively used for processing the input attribute as the return value of their block sets the output attribute. This is used with the SecTransformOverrideAttributeAction block. Deprecated: SecTransform is no longer supported

func KSecTransformActionStartingExecution

func KSecTransformActionStartingExecution() uintptr

@constant kSecTransformActionStartingExecution Overrides the standard behavior that occurs just before starting execution of a custom transform. This is typically overridden to allow for initialization. This is used with the SecTransformOverrideTransformAction block. Deprecated: SecTransform is no longer supported

func KSecTransformDebugAttributeName

func KSecTransformDebugAttributeName() uintptr

@constant kSecTransformDebugAttributeName Set this attribute to a CFWriteStream. This will signal the transform to write debugging information to the stream. If this attribute is set to kCFBooleanTrue then the debugging data will be written out to stderr. Deprecated: SecTransform is no longer supported

func KSecTransformErrorDomain

func KSecTransformErrorDomain() uintptr

@constant kSecTransformErrorDomain The domain for CFErrorRefs created by Transforms

func KSecTransformInputAttributeName

func KSecTransformInputAttributeName() uintptr

************** Transform Attribute Names *************** @constant kSecTransformInputAttributeName The name of the input attribute. Deprecated: SecTransform is no longer supported

func KSecTransformOutputAttributeName

func KSecTransformOutputAttributeName() uintptr

@constant kSecTransformOutputAttributeName The name of the output attribute. Deprecated: SecTransform is no longer supported

func KSecTransformPreviousErrorKey

func KSecTransformPreviousErrorKey() uintptr

@constant kSecTransformPreviousErrorKey If multiple errors occurred, the CFErrorRef that is returned from a Transfo]rm API will have a userInfo dictionary and that dictionary will have the previous error keyed by the kSecTransformPreviousErrorKey.

func KSecTransformTransformName

func KSecTransformTransformName() uintptr

@constant kSecTransformTransformName The name of the transform. Deprecated: SecTransform is no longer supported

func KSecTrustCertificateTransparency

func KSecTrustCertificateTransparency() uintptr

func KSecTrustCertificateTransparencyWhiteList

func KSecTrustCertificateTransparencyWhiteList() uintptr

func KSecTrustEvaluationDate

func KSecTrustEvaluationDate() uintptr

@enum Trust Result Constants @discussion Predefined key constants used to obtain values in a dictionary of trust evaluation results for a certificate chain, as retrieved from a call to SecTrustCopyResult. @constant kSecTrustEvaluationDate This key will be present if a trust evaluation has been performed and results are available. Its value is a CFDateRef representing when the evaluation for this trust object took place. @constant kSecTrustExtendedValidation This key will be present and have a value of kCFBooleanTrue if this chain was validated for EV. @constant kSecTrustOrganizationName Organization name field of subject of leaf certificate. This field is meant to be displayed to the user as the validated name of the company or entity that owns the certificate if the kSecTrustExtendedValidation key is present. @constant kSecTrustQCStatements This key will be present and have a value of CFStringRef if the leaf certificate contains qualified certificate statements. The string can be displayed to the user as a representation of a qualified certificate's purpose. @constant kSecTrustQWACValidation This key will be present and have a value of kCFBooleanTrue if this chain was successfully validated as a Qualified Website Authentication Certificate. @constant kSecTrustResultValue This key will be present if a trust evaluation has been performed. Its value is a CFNumberRef representing the SecTrustResultType result for the evaluation. @constant kSecTrustRevocationChecked This key will be present iff this chain had its revocation checked. The value will be a kCFBooleanTrue if revocation checking was successful and none of the certificates in the chain were revoked. The value will be kCFBooleanFalse if no current revocation status could be obtained for one or more certificates in the chain due to connection problems or timeouts. This is a hint to a client to retry revocation checking at a later time. @constant kSecTrustRevocationValidUntilDate This key will be present iff kSecTrustRevocationChecked has a value of kCFBooleanTrue. The value will be a CFDateRef representing the earliest date at which the revocation info for one of the certificates in this chain might change. @constant kSecTrustCertificateTransparency This key will be present and have a value of kCFBooleanTrue if this chain is CT qualified. @constant kSecTrustCertificateTransparencyWhiteList This key will be present and have a value of kCFBooleanTrue if this chain is EV, but not CT qualified, and is permitted as an exception to CT policy requirements. Note: in macOS 10.12 and iOS 10, previously-issued EV certificates were considered exempt from the CT requirement. As those certificates expired, exempting them was no longer needed. This key is deprecated in macOS 10.13 and iOS 11, and is no longer returned in the trust results dictionary as of those releases.

func KSecTrustExtendedValidation

func KSecTrustExtendedValidation() uintptr

func KSecTrustOrganizationName

func KSecTrustOrganizationName() uintptr

func KSecTrustQCStatements

func KSecTrustQCStatements() uintptr

func KSecTrustQWACValidation

func KSecTrustQWACValidation() uintptr

func KSecTrustResultValue

func KSecTrustResultValue() uintptr

func KSecTrustRevocationChecked

func KSecTrustRevocationChecked() uintptr

func KSecTrustRevocationValidUntilDate

func KSecTrustRevocationValidUntilDate() uintptr

func KSecUseAuthenticationContext

func KSecUseAuthenticationContext() uintptr

func KSecUseAuthenticationUI

func KSecUseAuthenticationUI() uintptr

func KSecUseAuthenticationUIAllow

func KSecUseAuthenticationUIAllow() uintptr

@enum kSecUseAuthenticationUI Value Constants @discussion Predefined item attribute constants used to get or set values in a dictionary. The kSecUseAuthenticationUI constant is the key and its value is one of the constants defined here. If the key kSecUseAuthenticationUI not provided then kSecUseAuthenticationUIAllow is used as default. @constant kSecUseAuthenticationUIAllow Specifies that authenticate UI can appear. @constant kSecUseAuthenticationUIFail Specifies that the error errSecInteractionNotAllowed will be returned if an item needs to authenticate with UI @constant kSecUseAuthenticationUISkip Specifies that all items which need to authenticate with UI will be silently skipped. This value can be used only with SecItemCopyMatching. Deprecated: Instead of kSecUseAuthenticationUI, use kSecUseAuthenticationContext and set LAContext.interactionNotAllowed property

func KSecUseAuthenticationUIFail deprecated

func KSecUseAuthenticationUIFail() uintptr

Deprecated: Instead of kSecUseAuthenticationUI, use kSecUseAuthenticationContext and set LAContext.interactionNotAllowed property

func KSecUseAuthenticationUISkip

func KSecUseAuthenticationUISkip() uintptr

func KSecUseDataProtectionKeychain

func KSecUseDataProtectionKeychain() uintptr

func KSecUseItemList

func KSecUseItemList() uintptr

@enum Other Constants @discussion Predefined constants used to set values in a dictionary. @constant kSecUseItemList Specifies a dictionary key whose value is a CFArray of items. If provided, this array is treated as the set of all possible items to search, or add if the API being called is SecItemAdd. The items in this array may be of type SecKeyRef, SecCertificateRef, SecIdentityRef, or CFDataRef (for a persistent item reference.) The items in the array must all be of the same type. When this attribute is provided, no keychains are searched. @constant kSecUseKeychain macOS only. Specifies a dictionary key whose value is a keychain reference. You use this key to specify a value of type SecKeychainRef to which SecItemAdd will add the provided item(s). @constant kSecUseOperationPrompt Specifies a dictionary key whose value is a CFStringRef that represents a user-visible string describing the operation for which the application is attempting to authenticate. The application is responsible for the text localization. @constant kSecUseNoAuthenticationUI Specifies a dictionary key whose value is a CFBooleanRef. If provided with a value of kCFBooleanTrue, the error errSecInteractionNotAllowed will be returned if the item is attempting to authenticate with UI. Note: on macOS, this attribute only applies to items stored in the Data Protection keychain. Legacy keychain items will still activate UI if needed. @constant kSecUseAuthenticationUI Specifies a dictionary key whose value is one of kSecUseAuthenticationUIAllow, kSecUseAuthenticationUIFail, kSecUseAuthenticationUISkip. @constant kSecUseAuthenticationContext Specifies a dictionary key whose value is LAContext to be used for keychain item authentication. If the item requires authentication and this key is omitted, a new context will be created just for the purpose of the single call. If the specified context has been previously authenticated, the operation will succeed without asking user for authentication. If the specified context has not been previously authenticated, the new authentication will be started on this context, allowing caller to eventually reuse the successfully authenticated context in subsequent keychain operations. @constant kSecUseDataProtectionKeychain Specifies a dictionary key whose value is a CFBooleanRef. Set to kCFBooleanTrue to use kSecAttrAccessGroup and/or kSecAttrAccessible on macOS without requiring the item to be marked synchronizable. Note that when kSecUseDataProtectionKeychain is set to true, returning references is supported only for Certificate, Key or Identity items. @constant kSecUseUserIndependentKeychain Specifies a dctionary key whose value is a CFBooleanRef indicating whether the item is shared with other personas on the system.

func KSecUseKeychain

func KSecUseKeychain() uintptr

func KSecUseNoAuthenticationUI deprecated

func KSecUseNoAuthenticationUI() uintptr

Deprecated: Use kSecUseAuthenticationUI instead.

func KSecUseOperationPrompt deprecated

func KSecUseOperationPrompt() uintptr

Deprecated: Use kSecUseAuthenticationContext and set LAContext.localizedReason property

func KSecValueData

func KSecValueData() uintptr

@enum Value Type Key Constants @discussion Predefined value type keys used to pass values in a dictionary. You can specify zero or more of these types depending on the function you are calling. For SecItemCopyMatching or SecItemAdd these are used as keys in the results dictionary. @constant kSecValueData Specifies a dictionary key whose value is of type CFDataRef. For keys and password items, data is secret (encrypted) and may require the user to enter a password for access. @constant kSecValueRef Specifies a dictionary key whose value, depending on the item class requested, is of type SecKeychainItemRef, SecKeyRef, SecCertificateRef, or SecIdentityRef. @constant kSecValuePersistentRef Specifies a dictionary key whose value is of type CFDataRef. The bytes in this CFDataRef can be stored by the caller and used on a subsequent invocation of the application (or even a different application) to retrieve the item referenced by it.

func KSecValuePersistentRef

func KSecValuePersistentRef() uintptr

func KSecValueRef

func KSecValueRef() uintptr

func KSecZLibEncoding

func KSecZLibEncoding() uintptr

@abstract Specifies a compressed encoding. Deprecated: SecTransform is no longer supported

func MDS_Initialize

func MDS_Initialize(pCallerGuid *CssmGuid, pMemoryFunctions *CssmMemoryFuncs, pDlFunctions *MdsFuncs, hMds *int) int32

func MDS_Install

func MDS_Install(mdsHandle int) int32

func MDS_Terminate

func MDS_Terminate(mdsHandle int) int32

func MDS_Uninstall

func MDS_Uninstall(mdsHandle int) int32

func OidAdCAIssuer

func OidAdCAIssuer() uintptr

func OidAdOCSP

func OidAdOCSP() uintptr

func OidAnsip384r1

func OidAnsip384r1() uintptr

func OidAnsip521r1

func OidAnsip521r1() uintptr

func OidAnyExtendedKeyUsage

func OidAnyExtendedKeyUsage() uintptr

func OidAnyPolicy

func OidAnyPolicy() uintptr

func OidAuthorityInfoAccess

func OidAuthorityInfoAccess() uintptr

func OidAuthorityKeyIdentifier

func OidAuthorityKeyIdentifier() uintptr

func OidBasicConstraints

func OidBasicConstraints() uintptr

func OidCertificatePolicies

func OidCertificatePolicies() uintptr

func OidCommonName

func OidCommonName() uintptr

func OidCountryName

func OidCountryName() uintptr

func OidCrlDistributionPoints

func OidCrlDistributionPoints() uintptr

func OidDescription

func OidDescription() uintptr

func OidEcPrime192v1

func OidEcPrime192v1() uintptr

func OidEcPrime256v1

func OidEcPrime256v1() uintptr

func OidEcPubKey

func OidEcPubKey() uintptr

func OidEmailAddress

func OidEmailAddress() uintptr

func OidEntrustVersInfo

func OidEntrustVersInfo() uintptr

func OidExtendedKeyUsage

func OidExtendedKeyUsage() uintptr

func OidExtendedKeyUsageClientAuth

func OidExtendedKeyUsageClientAuth() uintptr

func OidExtendedKeyUsageCodeSigning

func OidExtendedKeyUsageCodeSigning() uintptr

func OidExtendedKeyUsageEmailProtection

func OidExtendedKeyUsageEmailProtection() uintptr

func OidExtendedKeyUsageIPSec

func OidExtendedKeyUsageIPSec() uintptr

func OidExtendedKeyUsageMicrosoftSGC

func OidExtendedKeyUsageMicrosoftSGC() uintptr

func OidExtendedKeyUsageNetscapeSGC

func OidExtendedKeyUsageNetscapeSGC() uintptr

func OidExtendedKeyUsageOCSPSigning

func OidExtendedKeyUsageOCSPSigning() uintptr

func OidExtendedKeyUsageServerAuth

func OidExtendedKeyUsageServerAuth() uintptr

func OidExtendedKeyUsageTimeStamping

func OidExtendedKeyUsageTimeStamping() uintptr

func OidFee

func OidFee() uintptr

func OidFriendlyName

func OidFriendlyName() uintptr

func OidGoogleEmbeddedSignedCertificateTimestamp

func OidGoogleEmbeddedSignedCertificateTimestamp() uintptr

func OidGoogleOCSPSignedCertificateTimestamp

func OidGoogleOCSPSignedCertificateTimestamp() uintptr

func OidInhibitAnyPolicy

func OidInhibitAnyPolicy() uintptr

func OidIssuerAltName

func OidIssuerAltName() uintptr

func OidKeyUsage

func OidKeyUsage() uintptr

func OidLocalKeyId

func OidLocalKeyId() uintptr

func OidLocalityName

func OidLocalityName() uintptr

func OidMSNTPrincipalName

func OidMSNTPrincipalName() uintptr

func OidMd2

func OidMd2() uintptr

func OidMd2Rsa

func OidMd2Rsa() uintptr

func OidMd4

func OidMd4() uintptr

func OidMd4Rsa

func OidMd4Rsa() uintptr

func OidMd5

func OidMd5() uintptr

func OidMd5Fee

func OidMd5Fee() uintptr

func OidMd5Rsa

func OidMd5Rsa() uintptr

func OidNameConstraints

func OidNameConstraints() uintptr

func OidNetscapeCertType

func OidNetscapeCertType() uintptr

func OidOrganizationName

func OidOrganizationName() uintptr

func OidOrganizationalUnitName

func OidOrganizationalUnitName() uintptr

func OidPolicyConstraints

func OidPolicyConstraints() uintptr

func OidPolicyMappings

func OidPolicyMappings() uintptr

func OidPrivateKeyUsagePeriod

func OidPrivateKeyUsagePeriod() uintptr

func OidQtCps

func OidQtCps() uintptr

func OidQtUNotice

func OidQtUNotice() uintptr

func OidRsa

func OidRsa() uintptr

func OidSha1

func OidSha1() uintptr

func OidSha1Dsa

func OidSha1Dsa() uintptr

func OidSha1DsaCommonOIW

func OidSha1DsaCommonOIW() uintptr

func OidSha1DsaOIW

func OidSha1DsaOIW() uintptr

func OidSha1Ecdsa

func OidSha1Ecdsa() uintptr

func OidSha1Fee

func OidSha1Fee() uintptr

func OidSha1Rsa

func OidSha1Rsa() uintptr

func OidSha1RsaOIW

func OidSha1RsaOIW() uintptr

func OidSha224

func OidSha224() uintptr

func OidSha224Ecdsa

func OidSha224Ecdsa() uintptr

func OidSha224Rsa

func OidSha224Rsa() uintptr

func OidSha256

func OidSha256() uintptr

func OidSha256Ecdsa

func OidSha256Ecdsa() uintptr

func OidSha256Rsa

func OidSha256Rsa() uintptr

func OidSha384

func OidSha384() uintptr

func OidSha384Ecdsa

func OidSha384Ecdsa() uintptr

func OidSha384Rsa

func OidSha384Rsa() uintptr

func OidSha512

func OidSha512() uintptr

func OidSha512Ecdsa

func OidSha512Ecdsa() uintptr

func OidSha512Rsa

func OidSha512Rsa() uintptr

func OidStateOrProvinceName

func OidStateOrProvinceName() uintptr

func OidSubjectAltName

func OidSubjectAltName() uintptr

func OidSubjectInfoAccess

func OidSubjectInfoAccess() uintptr

func OidSubjectKeyIdentifier

func OidSubjectKeyIdentifier() uintptr

func SSLAddDistinguishedName deprecated

func SSLAddDistinguishedName(context_ unsafe.Pointer, derDN unsafe.Pointer, derDNLen uint) int

Deprecated: since macOS 10.15.

func SSLClose deprecated

func SSLClose(context_ unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLContextGetTypeID deprecated

func SSLContextGetTypeID() uint

Deprecated: since macOS 10.15.

func SSLCopyALPNProtocols deprecated

func SSLCopyALPNProtocols(context_ unsafe.Pointer, protocols unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLCopyCertificateAuthorities deprecated

func SSLCopyCertificateAuthorities(context_ unsafe.Pointer, certificates unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLCopyDistinguishedNames deprecated

func SSLCopyDistinguishedNames(context_ unsafe.Pointer, names unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLCopyPeerCertificates deprecated

func SSLCopyPeerCertificates(context_ unsafe.Pointer, certs unsafe.Pointer) int

Deprecated: since macOS 10.9.

func SSLCopyPeerTrust deprecated

func SSLCopyPeerTrust(context_ unsafe.Pointer, trust unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLCopyRequestedPeerName deprecated

func SSLCopyRequestedPeerName(context_ unsafe.Pointer, peerName string, peerNameLen *uint) int

Deprecated: since macOS 10.15.

func SSLCopyRequestedPeerNameLength deprecated

func SSLCopyRequestedPeerNameLength(ctx unsafe.Pointer, peerNameLen *uint) int

Deprecated: since macOS 10.15.

func SSLCopyTrustedRoots deprecated

func SSLCopyTrustedRoots(context_ unsafe.Pointer, trustedRoots unsafe.Pointer) int

Deprecated: since macOS 10.9.

func SSLCreateContext deprecated

func SSLCreateContext(alloc unsafe.Pointer, protocolSide SSLProtocolSide, connectionType SSLConnectionType) unsafe.Pointer

Deprecated: since macOS 10.15.

func SSLDisposeContext deprecated

func SSLDisposeContext(context_ unsafe.Pointer) int

Deprecated: since macOS 10.9.

func SSLGetAllowsAnyRoot deprecated

func SSLGetAllowsAnyRoot(context_ unsafe.Pointer, anyRoot *uint8) int

Deprecated: since macOS 10.9.

func SSLGetAllowsExpiredCerts deprecated

func SSLGetAllowsExpiredCerts(context_ unsafe.Pointer, allowsExpired *uint8) int

Deprecated: since macOS 10.9.

func SSLGetAllowsExpiredRoots deprecated

func SSLGetAllowsExpiredRoots(context_ unsafe.Pointer, allowsExpired *uint8) int

Deprecated: since macOS 10.9.

func SSLGetBufferedReadSize deprecated

func SSLGetBufferedReadSize(context_ unsafe.Pointer, bufferSize *uint) int

Deprecated: since macOS 10.15.

func SSLGetClientCertificateState deprecated

func SSLGetClientCertificateState(context_ unsafe.Pointer, clientState *SSLClientCertificateState) int

Deprecated: since macOS 10.15.

func SSLGetConnection deprecated

func SSLGetConnection(context_ unsafe.Pointer, connection unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLGetDatagramWriteSize deprecated

func SSLGetDatagramWriteSize(dtlsContext unsafe.Pointer, bufSize *uint) int

Deprecated: since macOS 10.15.

func SSLGetDiffieHellmanParams deprecated

func SSLGetDiffieHellmanParams(context_ unsafe.Pointer, dhParams unsafe.Pointer, dhParamsLen *uint) int

Deprecated: since macOS 10.15.

func SSLGetEnableCertVerify deprecated

func SSLGetEnableCertVerify(context_ unsafe.Pointer, enableVerify *uint8) int

Deprecated: since macOS 10.9.

func SSLGetEnabledCiphers deprecated

func SSLGetEnabledCiphers(context_ unsafe.Pointer, ciphers *uint16, numCiphers *uint) int

Deprecated: since macOS 10.15.

func SSLGetMaxDatagramRecordSize deprecated

func SSLGetMaxDatagramRecordSize(dtlsContext unsafe.Pointer, maxSize *uint) int

Deprecated: since macOS 10.15.

func SSLGetNegotiatedCipher deprecated

func SSLGetNegotiatedCipher(context_ unsafe.Pointer, cipherSuite *uint16) int

Deprecated: since macOS 10.15.

func SSLGetNegotiatedProtocolVersion deprecated

func SSLGetNegotiatedProtocolVersion(context_ unsafe.Pointer, protocol *SSLProtocol) int

Deprecated: since macOS 10.15.

func SSLGetNumberEnabledCiphers deprecated

func SSLGetNumberEnabledCiphers(context_ unsafe.Pointer, numCiphers *uint) int

Deprecated: since macOS 10.15.

func SSLGetNumberSupportedCiphers deprecated

func SSLGetNumberSupportedCiphers(context_ unsafe.Pointer, numCiphers *uint) int

Deprecated: since macOS 10.15.

func SSLGetPeerDomainName deprecated

func SSLGetPeerDomainName(context_ unsafe.Pointer, peerName string, peerNameLen *uint) int

Deprecated: since macOS 10.15.

func SSLGetPeerDomainNameLength deprecated

func SSLGetPeerDomainNameLength(context_ unsafe.Pointer, peerNameLen *uint) int

Deprecated: since macOS 10.15.

func SSLGetPeerID deprecated

func SSLGetPeerID(context_ unsafe.Pointer, peerID unsafe.Pointer, peerIDLen *uint) int

Deprecated: since macOS 10.15.

func SSLGetProtocolVersion deprecated

func SSLGetProtocolVersion(context_ unsafe.Pointer, protocol *SSLProtocol) int

Deprecated: since macOS 10.8.

func SSLGetProtocolVersionEnabled deprecated

func SSLGetProtocolVersionEnabled(context_ unsafe.Pointer, protocol SSLProtocol, enable *uint8) int

Deprecated: since macOS 10.9.

func SSLGetProtocolVersionMax deprecated

func SSLGetProtocolVersionMax(context_ unsafe.Pointer, maxVersion *SSLProtocol) int

Deprecated: since macOS 10.15.

func SSLGetProtocolVersionMin deprecated

func SSLGetProtocolVersionMin(context_ unsafe.Pointer, minVersion *SSLProtocol) int

Deprecated: since macOS 10.15.

func SSLGetRsaBlinding deprecated

func SSLGetRsaBlinding(context_ unsafe.Pointer, blinding *uint8) int

Deprecated: since macOS 10.9.

func SSLGetSessionOption deprecated

func SSLGetSessionOption(context_ unsafe.Pointer, option SSLSessionOption, value *uint8) int

Deprecated: since macOS 10.15.

func SSLGetSessionState deprecated

func SSLGetSessionState(context_ unsafe.Pointer, state *SSLSessionState) int

Deprecated: since macOS 10.15.

func SSLGetSupportedCiphers deprecated

func SSLGetSupportedCiphers(context_ unsafe.Pointer, ciphers *uint16, numCiphers *uint) int

Deprecated: since macOS 10.15.

func SSLHandshake deprecated

func SSLHandshake(context_ unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLNewContext deprecated

func SSLNewContext(isServer uint8, contextPtr unsafe.Pointer) int

Deprecated: since macOS 10.9.

func SSLReHandshake deprecated

func SSLReHandshake(context_ unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLRead deprecated

func SSLRead(context_ unsafe.Pointer, data unsafe.Pointer, dataLength uint, processed *uint) int

Deprecated: since macOS 10.15.

func SSLSetALPNProtocols deprecated

func SSLSetALPNProtocols(context_ unsafe.Pointer, protocols unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLSetAllowsAnyRoot deprecated

func SSLSetAllowsAnyRoot(context_ unsafe.Pointer, anyRoot uint8) int

Deprecated: since macOS 10.9.

func SSLSetAllowsExpiredCerts deprecated

func SSLSetAllowsExpiredCerts(context_ unsafe.Pointer, allowsExpired uint8) int

Deprecated: since macOS 10.9.

func SSLSetAllowsExpiredRoots deprecated

func SSLSetAllowsExpiredRoots(context_ unsafe.Pointer, allowsExpired uint8) int

Deprecated: since macOS 10.9.

func SSLSetCertificate deprecated

func SSLSetCertificate(context_ unsafe.Pointer, certRefs unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLSetCertificateAuthorities deprecated

func SSLSetCertificateAuthorities(context_ unsafe.Pointer, certificateOrArray unsafe.Pointer, replaceExisting uint8) int

Deprecated: since macOS 10.15.

func SSLSetClientSideAuthenticate deprecated

func SSLSetClientSideAuthenticate(context_ unsafe.Pointer, auth SSLAuthenticate) int

Deprecated: since macOS 10.15.

func SSLSetConnection deprecated

func SSLSetConnection(context_ unsafe.Pointer, connection unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLSetDatagramHelloCookie deprecated

func SSLSetDatagramHelloCookie(dtlsContext unsafe.Pointer, cookie unsafe.Pointer, cookieLen uint) int

Deprecated: since macOS 10.15.

func SSLSetDiffieHellmanParams deprecated

func SSLSetDiffieHellmanParams(context_ unsafe.Pointer, dhParams unsafe.Pointer, dhParamsLen uint) int

Deprecated: since macOS 10.15.

func SSLSetEnableCertVerify deprecated

func SSLSetEnableCertVerify(context_ unsafe.Pointer, enableVerify uint8) int

Deprecated: since macOS 10.9.

func SSLSetEnabledCiphers deprecated

func SSLSetEnabledCiphers(context_ unsafe.Pointer, ciphers *uint16, numCiphers uint) int

Deprecated: since macOS 10.15.

func SSLSetEncryptionCertificate deprecated

func SSLSetEncryptionCertificate(context_ unsafe.Pointer, certRefs unsafe.Pointer) int

Deprecated: since macOS 10.11.

func SSLSetError deprecated

func SSLSetError(context_ unsafe.Pointer, status int) int

Deprecated: since macOS 10.15.

func SSLSetIOFuncs deprecated

func SSLSetIOFuncs(context_ unsafe.Pointer, readFunc unsafe.Pointer, writeFunc unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLSetMaxDatagramRecordSize deprecated

func SSLSetMaxDatagramRecordSize(dtlsContext unsafe.Pointer, maxSize uint) int

Deprecated: since macOS 10.15.

func SSLSetOCSPResponse deprecated

func SSLSetOCSPResponse(context_ unsafe.Pointer, response unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLSetPeerDomainName deprecated

func SSLSetPeerDomainName(context_ unsafe.Pointer, peerName string, peerNameLen uint) int

Deprecated: since macOS 10.15.

func SSLSetPeerID deprecated

func SSLSetPeerID(context_ unsafe.Pointer, peerID unsafe.Pointer, peerIDLen uint) int

Deprecated: since macOS 10.15.

func SSLSetProtocolVersion deprecated

func SSLSetProtocolVersion(context_ unsafe.Pointer, version SSLProtocol) int

Deprecated: since macOS 10.8.

func SSLSetProtocolVersionEnabled deprecated

func SSLSetProtocolVersionEnabled(context_ unsafe.Pointer, protocol SSLProtocol, enable uint8) int

Deprecated: since macOS 10.9.

func SSLSetProtocolVersionMax deprecated

func SSLSetProtocolVersionMax(context_ unsafe.Pointer, maxVersion SSLProtocol) int

Deprecated: since macOS 10.15.

func SSLSetProtocolVersionMin deprecated

func SSLSetProtocolVersionMin(context_ unsafe.Pointer, minVersion SSLProtocol) int

Deprecated: since macOS 10.15.

func SSLSetRsaBlinding deprecated

func SSLSetRsaBlinding(context_ unsafe.Pointer, blinding uint8) int

Deprecated: since macOS 10.9.

func SSLSetSessionConfig deprecated

func SSLSetSessionConfig(context_ unsafe.Pointer, config unsafe.Pointer) int

Deprecated: since macOS 10.15.

func SSLSetSessionOption deprecated

func SSLSetSessionOption(context_ unsafe.Pointer, option SSLSessionOption, value uint8) int

Deprecated: since macOS 10.15.

func SSLSetSessionTicketsEnabled deprecated

func SSLSetSessionTicketsEnabled(context_ unsafe.Pointer, enabled uint8) int

Deprecated: since macOS 10.15.

func SSLSetTrustedRoots deprecated

func SSLSetTrustedRoots(context_ unsafe.Pointer, trustedRoots unsafe.Pointer, replaceExisting uint8) int

Deprecated: since macOS 10.9.

func SSLWrite deprecated

func SSLWrite(context_ unsafe.Pointer, data unsafe.Pointer, dataLength uint, processed *uint) int

Deprecated: since macOS 10.15.

func SecACLCopyAuthorizations

func SecACLCopyAuthorizations(acl unsafe.Pointer) unsafe.Pointer

@function SecACLCopyAuthorizations @abstract Retrieve the authorization tags of a given access control list entry. @param acl An access control list entry reference. @result On return, a CFArrayRef of the authorizations for this ACL. Deprecated: SecKeychain is deprecated

func SecACLCopyContents

func SecACLCopyContents(acl unsafe.Pointer, applicationList unsafe.Pointer, description unsafe.Pointer, promptSelector *SecKeychainPromptSelector) int

@function SecACLCopyContents @abstract Returns the application list, description, and prompt selector for a given access control list entry. @param acl An access control list entry reference. @param applicationList On return, An array of SecTrustedApplication instances that will be allowed access without prompting, for the given access control list entry. The caller needs to call CFRelease on this array when it's no longer needed. @param description On return, the human readable name that will be used to refer to this item when the user is prompted, for the given access control list entry. The caller needs to call CFRelease on this string when it's no longer needed. @param promptSelector A pointer to a SecKeychainPromptSelector. On return, this points to the SecKeychainPromptSelector for the given access control list entry. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecACLCopySimpleContents

func SecACLCopySimpleContents(acl unsafe.Pointer, applicationList unsafe.Pointer, description unsafe.Pointer, promptSelector *CssmAclKeychainPromptSelector) int

@function SecACLCopySimpleContents @abstract Returns the application list, description, and CSSM prompt selector for a given access control list entry. @param acl An access control list entry reference. @param applicationList On return, An array of SecTrustedApplication instances that will be allowed access without prompting, for the given access control list entry. The caller needs to call CFRelease on this array when it's no longer needed. @param description On return, the human readable name that will be used to refer to this item when the user is prompted, for the given access control list entry. The caller needs to call CFRelease on this string when it's no longer needed. @param promptSelector A pointer to a CSSM prompt selector. On return, this points to the CSSM prompt selector for the given access control list entry. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in 10.7 and later; use SecACLCopyContents instead.

func SecACLCreateFromSimpleContents

func SecACLCreateFromSimpleContents(access unsafe.Pointer, applicationList unsafe.Pointer, description unsafe.Pointer, promptSelector *CssmAclKeychainPromptSelector, newAcl unsafe.Pointer) int

@function SecACLCreateFromSimpleContents @abstract Creates a new access control list entry from the application list, description, and prompt selector provided and adds it to an item's access. @param access An access reference. @param applicationList An array of SecTrustedApplication instances that will be allowed access without prompting. @param description The human readable name that will be used to refer to this item when the user is prompted. @param promptSelector A pointer to a CSSM prompt selector. @param newAcl A pointer to an access control list entry. On return, this points to the reference of the new access control list entry. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in 10.7 and later; use SecACLCreateWithSimpleContents instead.

func SecACLCreateWithSimpleContents

func SecACLCreateWithSimpleContents(access unsafe.Pointer, applicationList unsafe.Pointer, description unsafe.Pointer, promptSelector SecKeychainPromptSelector, newAcl unsafe.Pointer) int

@function SecACLCreateWithSimpleContents @abstract Creates a new access control list entry from the application list, description, and prompt selector provided and adds it to an item's access. @param access An access reference. @param applicationList An array of SecTrustedApplication instances that will be allowed access without prompting. @param description The human readable name that will be used to refer to this item when the user is prompted. @param promptSelector A SecKeychainPromptSelector selector. @param newAcl A pointer to an access control list entry. On return, this points to the reference of the new access control list entry. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecACLGetAuthorizations

func SecACLGetAuthorizations(acl unsafe.Pointer, tags *int32, tagCount *uint32) int

@function SecACLGetAuthorizations @abstract Retrieve the CSSM authorization tags of a given access control list entry. @param acl An access control list entry reference. @param tags On return, this points to the first item in an array of CSSM authorization tags. @param tagCount On return, this points to the number of tags in the CSSM authorization tag array. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in 10.7 and later; use SecACLCopyAuthorizations instead.

func SecACLGetTypeID

func SecACLGetTypeID() uint

@function SecACLGetTypeID @abstract Returns the type identifier of SecACL instances. @result The CFTypeID of SecACL instances. Deprecated: SecKeychain is deprecated

func SecACLRemove

func SecACLRemove(aclRef unsafe.Pointer) int

@function SecACLRemove @abstract Removes the access control list entry specified. @param aclRef The reference to the access control list entry to remove. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecACLSetAuthorizations

func SecACLSetAuthorizations(acl unsafe.Pointer, tags *int32, tagCount uint32) int

@function SecACLSetAuthorizations @abstract Sets the CSSM authorization tags of a given access control list entry. @param acl An access control list entry reference. @param tags A pointer to the first item in an array of CSSM authorization tags. @param tagCount The number of tags in the CSSM authorization tag array. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in 10.7 and later; use SecACLUpdateAuthorizations instead.

func SecACLSetContents

func SecACLSetContents(acl unsafe.Pointer, applicationList unsafe.Pointer, description unsafe.Pointer, promptSelector SecKeychainPromptSelector) int

@function SecACLSetContents @abstract Sets the application list, description, and prompt selector for a given access control list entry. @param acl A reference to the access control list entry to edit. @param applicationList An application list reference. @param description The human readable name that will be used to refer to this item when the user is prompted. @param promptSelector A SecKeychainPromptSelector selector. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecACLSetSimpleContents

func SecACLSetSimpleContents(acl unsafe.Pointer, applicationList unsafe.Pointer, description unsafe.Pointer, promptSelector *CssmAclKeychainPromptSelector) int

@function SecACLSetSimpleContents @abstract Sets the application list, description, and CSSM prompt selector for a given access control list entry. @param acl A reference to the access control list entry to edit. @param applicationList An application list reference. @param description The human readable name that will be used to refer to this item when the user is prompted. @param promptSelector A pointer to a CSSM prompt selector. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in 10.7 and later; use SecACLSetContents instead.

func SecACLUpdateAuthorizations

func SecACLUpdateAuthorizations(acl unsafe.Pointer, authorizations unsafe.Pointer) int

@function SecACLUpdateAuthorizations @abstract Sets the authorization tags of a given access control list entry. @param acl An access control list entry reference. @param authorizations A pointer to an array of authorization tags. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecAccessControlCreateWithFlags

func SecAccessControlCreateWithFlags(allocator unsafe.Pointer, protection unsafe.Pointer, flags SecAccessControlCreateFlags, error_ unsafe.Pointer) unsafe.Pointer

func SecAccessControlGetTypeID

func SecAccessControlGetTypeID() uint

@function SecAccessControlGetTypeID @abstract Returns the type identifier of SecAccessControl instances. @result The CFTypeID of SecAccessControl instances.

func SecAccessCopyACLList

func SecAccessCopyACLList(accessRef unsafe.Pointer, aclList unsafe.Pointer) int

@function SecAccessCopyACLList @abstract Copies all the access control lists of a given access. @param accessRef A reference to the access from which to retrieve the information. @param aclList On return, a pointer to a new created CFArray of SecACL instances. The caller is responsible for calling CFRelease on this array. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecAccessCopyMatchingACLList deprecated

func SecAccessCopyMatchingACLList(accessRef unsafe.Pointer, authorizationTag unsafe.Pointer) unsafe.Pointer

Deprecated: SecKeychain is deprecated

func SecAccessCopyOwnerAndACL

func SecAccessCopyOwnerAndACL(accessRef unsafe.Pointer, userId *uint, groupId *uint, ownerType *uint, aclList unsafe.Pointer) int

@function SecAccessCopyOwnerAndACL @abstract Retrieves the owner and the access control list of a given access. @param accessRef A reference to the access from which to retrieve the information. @param userId On return, the user id of the owner @param groupId On return, the group id of the owner @param ownerType On return, the type of owner for this AccessRef @param aclList On return, a pointer to a new created CFArray of SecACL instances. The caller is responsible for calling CFRelease on this array. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecAccessCopySelectedACLList

func SecAccessCopySelectedACLList(accessRef unsafe.Pointer, action int32, aclList unsafe.Pointer) int

@function SecAccessCopySelectedACLList @abstract Copies selected access control lists from a given access. @param accessRef A reference to the access from which to retrieve the information. @param action An authorization tag specifying what action with which to select the action control lists. @param aclList On return, a pointer to the selected access control lists. @result A result code. See "Security Error Codes" (SecBase.h). @discussion For 10.7 and later please use the SecAccessCopyMatchingACLList API

func SecAccessCreate

func SecAccessCreate(descriptor unsafe.Pointer, trustedlist unsafe.Pointer, accessRef unsafe.Pointer) int

@function SecAccessCreate @abstract Creates a new SecAccessRef that is set to the currently designated system default configuration of a (newly created) security object. Note that the precise nature of this default may change between releases. @param descriptor The name of the item as it should appear in security dialogs @param trustedlist A CFArray of TrustedApplicationRefs, specifying which applications should be allowed to access an item without triggering confirmation dialogs. If NULL, defaults to (just) the application creating the item. To set no applications, pass a CFArray with no elements. @param accessRef On return, a pointer to the new access reference. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecAccessCreateFromOwnerAndACL

func SecAccessCreateFromOwnerAndACL(owner *CssmAclOwnerPrototype, aclCount uint32, acls *CssmAclEntryInfo, accessRef unsafe.Pointer) int

@function SecAccessCreateFromOwnerAndACL @abstract Creates a new SecAccessRef using the owner and access control list you provide. @param owner A pointer to a CSSM access control list owner. @param aclCount An unsigned 32-bit integer representing the number of items in the access control list. @param acls A pointer to the access control list. @param accessRef On return, a pointer to the new access reference. @result A result code. See "Security Error Codes" (SecBase.h). @discussion For 10.7 and later please use the SecAccessCreateWithOwnerAndACL API

func SecAccessCreateWithOwnerAndACL deprecated

func SecAccessCreateWithOwnerAndACL(userId uint, groupId uint, ownerType uint, acls unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecKeychain is deprecated

func SecAccessGetOwnerAndACL

func SecAccessGetOwnerAndACL(accessRef unsafe.Pointer, owner **CssmAclOwnerPrototype, aclCount *uint32, acls **CssmAclEntryInfo) int

@function SecAccessGetOwnerAndACL @abstract Retrieves the owner and the access control list of a given access. @param accessRef A reference to the access from which to retrieve the information. @param owner On return, a pointer to the access control list owner. @param aclCount On return, a pointer to an unsigned 32-bit integer representing the number of items in the access control list. @param acls On return, a pointer to the access control list. @result A result code. See "Security Error Codes" (SecBase.h). @discussion For 10.7 and later please use the SecAccessCopyOwnerAndACL API

func SecAccessGetTypeID

func SecAccessGetTypeID() uint

@function SecAccessGetTypeID @abstract Returns the type identifier of SecAccess instances. @result The CFTypeID of SecAccess instances. Deprecated: SecKeychain is deprecated

func SecAddSharedWebCredential

func SecAddSharedWebCredential(fqdn unsafe.Pointer, account unsafe.Pointer, password unsafe.Pointer, completionHandler func(unsafe.Pointer))

@function SecAddSharedWebCredential @abstract Asynchronously store (or update) a shared password for a website. @param fqdn The fully qualified domain name of the website requiring the password. @param account The account name associated with this password. @param password The password to be stored. Pass NULL to remove a shared password if it exists. @param completionHandler A block which will be invoked when the function has completed. If the shared password was successfully added (or removed), the CFErrorRef parameter passed to the block will be NULL. If the error parameter is non-NULL, an error occurred and the error reference will hold the result. Note: the error reference will be automatically released after this handler is called, though you may optionally retain it for as long as needed. @discussion This function adds a shared password item which will be accessible by Safari and applications that have the specified fully-qualified domain name in their 'com.apple.developer.associated-domains' entitlement. If a shared password item already exists for the specified website and account, it will be updated with the provided password. To remove a password, pass NULL for the password parameter. Note: since a request involving shared web credentials may potentially require user interaction or other verification to be approved, this function is dispatched asynchronously; your code provides a completion handler that will be called once the results (if any) are available.

func SecCertificateAddToKeychain

func SecCertificateAddToKeychain(certificate unsafe.Pointer, keychain unsafe.Pointer) int

@function SecCertificateAddToKeychain @abstract Adds a certificate to the specified keychain. @param certificate A reference to a certificate. @param keychain A reference to the keychain in which to add the certificate. Pass NULL to add the certificate to the default keychain. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is successful only if the certificate was created using the SecCertificateCreateFromData or SecCertificateCreateWithData functions, and the certificate has not yet been added to the specified keychain.

func SecCertificateCopyCommonName

func SecCertificateCopyCommonName(certificate unsafe.Pointer, commonName unsafe.Pointer) int

@function SecCertificateCopyCommonName @abstract Retrieves the common name of the subject of a given certificate. @param certificate A reference to the certificate from which to retrieve the common name. @param commonName On return, a reference to the common name. Your code must release this reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h). @discussion All the data in this string comes from the certificate itself, and thus it's in whatever language the certificate itself is in. Note that the certificate's common name field may not be present, or may be inadequate to describe the certificate; for display purposes, you should consider using SecCertificateCopySubjectSummary instead of this function.

func SecCertificateCopyData

func SecCertificateCopyData(certificate unsafe.Pointer) unsafe.Pointer

@function SecCertificateCopyData @abstract Return the DER representation of an X.509 certificate. @param certificate SecCertificate object created with SecCertificateCreateWithData(). @result DER encoded X.509 certificate.

func SecCertificateCopyEmailAddresses

func SecCertificateCopyEmailAddresses(certificate unsafe.Pointer, emailAddresses unsafe.Pointer) int

@function SecCertificateCopyEmailAddresses @abstract Returns an array of zero or more email addresses for the subject of a given certificate. @param certificate A reference to the certificate from which to retrieve the email addresses. @param emailAddresses On return, an array of zero or more CFStringRef elements corresponding to each email address found. Your code must release this array reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h).

func SecCertificateCopyKey

func SecCertificateCopyKey(certificate unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyLongDescription

func SecCertificateCopyLongDescription(alloc unsafe.Pointer, certificate unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyNormalizedIssuerContent

func SecCertificateCopyNormalizedIssuerContent(certificate unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyNormalizedIssuerSequence

func SecCertificateCopyNormalizedIssuerSequence(certificate unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyNormalizedSubjectContent

func SecCertificateCopyNormalizedSubjectContent(certificate unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyNormalizedSubjectSequence

func SecCertificateCopyNormalizedSubjectSequence(certificate unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyNotValidAfterDate

func SecCertificateCopyNotValidAfterDate(certificate unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyNotValidBeforeDate

func SecCertificateCopyNotValidBeforeDate(certificate unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyPreference

func SecCertificateCopyPreference(name unsafe.Pointer, keyUsage uint32, certificate unsafe.Pointer) int

@function SecCertificateCopyPreference @abstract Returns the preferred certificate for the specified name and key usage. If a preferred certificate does not exist for the specified name and key usage, NULL is returned. @param name A string containing an email address (RFC822) or other name for which a preferred certificate is requested. @param keyUsage A CSSM_KEYUSE key usage value, as defined in cssmtype.h. Pass 0 to ignore this parameter. @param certificate On return, a reference to the preferred certificate, or NULL if none was found. You are responsible for releasing this reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function will typically be used to obtain the preferred encryption certificate for an email recipient. This API is deprecated in 10.7. Please use the SecCertificateCopyPreferred API instead.

func SecCertificateCopyPreferred

func SecCertificateCopyPreferred(name unsafe.Pointer, keyUsage unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyPublicKey

func SecCertificateCopyPublicKey(certificate unsafe.Pointer, key unsafe.Pointer) int

@function SecCertificateCopyPublicKey @abstract Retrieves the public key for a given certificate. @param certificate A reference to the certificate from which to retrieve the public key. @param key On return, a reference to the public key for the specified certificate. Your code must release this reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h). @discussion NOTE: Deprecated in macOS 10.14; use SecCertificateCopyKey instead for cross-platform availability. Deprecated: since macOS 10.14.

func SecCertificateCopyRef

func SecCertificateCopyRef(certificate unsafe.Pointer) unsafe.Pointer

C function: sec_certificate_copy_ref

func SecCertificateCopySerialNumber deprecated

func SecCertificateCopySerialNumber(certificate unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: since macOS 10.13.

func SecCertificateCopySerialNumberData

func SecCertificateCopySerialNumberData(certificate unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyShortDescription

func SecCertificateCopyShortDescription(alloc unsafe.Pointer, certificate unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

func SecCertificateCopySubjectSummary

func SecCertificateCopySubjectSummary(certificate unsafe.Pointer) unsafe.Pointer

func SecCertificateCopyValues

func SecCertificateCopyValues(certificate unsafe.Pointer, keys unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

func SecCertificateCreate

func SecCertificateCreate(certificate unsafe.Pointer) unsafe.Pointer

C function: sec_certificate_create

func SecCertificateCreateFromData

func SecCertificateCreateFromData(data *CssmData, type_ uint32, encoding uint32, certificate unsafe.Pointer) int

@function SecCertificateCreateFromData @abstract Creates a certificate based on the input data, type, and encoding. @param data A pointer to the certificate data. @param type The certificate type as defined in cssmtype.h. @param encoding The certificate encoding as defined in cssmtype.h. @param certificate On return, a reference to the newly created certificate. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated in 10.7 Please use the SecCertificateCreateWithData API instead.

func SecCertificateCreateWithData

func SecCertificateCreateWithData(allocator unsafe.Pointer, data unsafe.Pointer) unsafe.Pointer

func SecCertificateGetAlgorithmID

func SecCertificateGetAlgorithmID(certificate unsafe.Pointer, algid *SecAsn1AlgId) int

@function SecCertificateGetAlgorithmID @abstract Retrieves the algorithm identifier for a given certificate. @param certificate A reference to the certificate from which to retrieve the algorithm identifier. @param algid On return, a pointer to a CSSM_X509_ALGORITHM_IDENTIFIER struct which identifies the algorithm for this certificate (x509defs.h). This pointer remains valid until the certificate reference is released. The caller should not attempt to free this pointer. @result A result code. See "Security Error Codes" (SecBase.h). discussion This API is deprecated in 10.7. Please use the SecCertificateCopyValues API instead.

func SecCertificateGetCLHandle

func SecCertificateGetCLHandle(certificate unsafe.Pointer, clHandle *int) int

@function SecCertificateGetCLHandle @abstract Retrieves the certificate library handle for a given certificate. @param certificate A reference to the certificate from which to obtain the certificate library handle. @param clHandle On return, the certificate library handle of the given certificate. This handle remains valid at least as long as the certificate does. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated in 10.7. Please use the SecCertificateCopyValues API instead.

func SecCertificateGetData

func SecCertificateGetData(certificate unsafe.Pointer, data *CssmData) int

@function SecCertificateGetData @abstract Retrieves the data for a given certificate. @param certificate A reference to the certificate from which to retrieve the data. @param data On return, the CSSM_DATA structure pointed to by data is filled in. You must allocate the space for a CSSM_DATA structure before calling this function. This data pointer is only guaranteed to remain valid as long as the certificate remains unchanged and valid. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated in 10.7. Please use the SecCertificateCopyData API instead.

func SecCertificateGetIssuer

func SecCertificateGetIssuer(certificate unsafe.Pointer, issuer *CssmX509Name) int

@function SecCertificateGetIssuer @abstract Retrieves the issuer name for a given certificate. @param certificate A reference to the certificate from which to obtain the issuer name. @param issuer On return, a pointer to a CSSM_X509_NAME struct which contains the issuer's X.509 name (x509defs.h). This pointer remains valid until the certificate reference is released. The caller should not attempt to free this pointer. @result A result code. See "Security Error Codes" (SecBase.h). @discussion Prior to Mac OS X 10.5, this function did not return any output in the issuer parameter. Your code should check the returned pointer value (in addition to the function result) before attempting to use it. For example: const CSSM_X509_NAME *issuer = NULL; OSStatus status = SecCertificateGetIssuer(certificate, &issuer); if ( (status == errSecSuccess) && (issuer != NULL) ) { // issuer is valid } This API is deprecated in 10.7. Please use the SecCertificateCopyValues API instead.

func SecCertificateGetSubject

func SecCertificateGetSubject(certificate unsafe.Pointer, subject *CssmX509Name) int

@function SecCertificateGetSubject @abstract Retrieves the subject name for a given certificate. @param certificate A reference to the certificate from which to obtain the subject name. @param subject On return, a pointer to a CSSM_X509_NAME struct which contains the subject's X.509 name (x509defs.h). This pointer remains valid until the certificate reference is released. The caller should not attempt to free this pointer. @result A result code. See "Security Error Codes" (SecBase.h). @discussion Prior to Mac OS X 10.5, this function did not return any output in the subject parameter. Your code should check the returned pointer value (in addition to the function result) before attempting to use it. For example: const CSSM_X509_NAME *subject = NULL; OSStatus status = SecCertificateGetSubject(certificate, &subject); if ( (status == errSecSuccess) && (subject != NULL) ) { // subject is valid } This API is deprecated in 10.7. Please use the SecCertificateCopyValues API instead.

func SecCertificateGetType

func SecCertificateGetType(certificate unsafe.Pointer, certificateType *uint32) int

@function SecCertificateGetType @abstract Retrieves the type for a given certificate. @param certificate A reference to the certificate from which to obtain the type. @param certificateType On return, the certificate type of the certificate. Certificate types are defined in cssmtype.h. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated in 10.7. Please use the SecCertificateCopyValues API instead.

func SecCertificateGetTypeID

func SecCertificateGetTypeID() uint

@function SecCertificateGetTypeID @abstract Returns the type identifier of SecCertificate instances. @result The CFTypeID of SecCertificate instances.

func SecCertificateSetPreference

func SecCertificateSetPreference(certificate unsafe.Pointer, name unsafe.Pointer, keyUsage uint32, date unsafe.Pointer) int

@function SecCertificateSetPreference @abstract Sets the preferred certificate for a specified name, key usage, and date. @param certificate A reference to the certificate which will be preferred. @param name A string containing an email address (RFC822) or other name for which a preferred certificate will be associated. @param keyUsage A CSSM_KEYUSE key usage value, as defined in cssmtype.h. Pass 0 to avoid specifying a particular key usage. @param date (optional) A date reference. If supplied, the preferred certificate will be changed only if this date is later than the currently saved setting. Pass NULL if this preference should not be restricted by date. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function will typically be used to set the preferred encryption certificate for an email recipient, either manually (when encrypting email to a recipient) or automatically upon receipt of encrypted email. This API is deprecated in 10.7. Plese use the SecCertificateSetPreferred API instead.

func SecCertificateSetPreferred

func SecCertificateSetPreferred(certificate unsafe.Pointer, name unsafe.Pointer, keyUsage unsafe.Pointer) int

@function SecCertificateSetPreferred @abstract Sets the preferred certificate for a specified name and optional key usage. @param certificate A reference to the preferred certificate. If NULL is passed, any existing preference for the specified name is cleared instead. @param name A string containing an email address (RFC822) or other name for which a preferred certificate will be associated. @param keyUsage A CFArrayRef value, containing items defined in SecItem.h Pass NULL to ignore this parameter. (kSecAttrCanEncrypt, kSecAttrCanDecrypt, kSecAttrCanDerive, kSecAttrCanSign, kSecAttrCanVerify, kSecAttrCanWrap, kSecAttrCanUnwrap) @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function will typically be used to set the preferred encryption certificate for an email recipient, either manually (when encrypting email to a recipient) or automatically upon receipt of encrypted email.

func SecCodeCheckValidity

func SecCodeCheckValidity(code unsafe.Pointer, flags SecCSFlags, requirement unsafe.Pointer) int

@function SecCodeCheckValidity Performs dynamic validation of the given SecCode object. The call obtains and verifies the signature on the code object. It checks the validity of only those sealed components required to establish identity. It checks the SecCode's dynamic validity status as reported by its host. It ensures that the SecCode's host is in turn valid. Finally, it validates the code against a SecRequirement if one is given. The call succeeds if all these conditions are satisfactory. It fails otherwise. This call is secure against attempts to modify the file system source of the SecCode. @param code The code object to be validated. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param requirement An optional code requirement specifying additional conditions the code object must satisfy to be considered valid. If NULL, no additional requirements are imposed. @result If validation passes, errSecSuccess. If validation fails, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecCodeCheckValidityWithErrors

func SecCodeCheckValidityWithErrors(code unsafe.Pointer, flags SecCSFlags, requirement unsafe.Pointer, errors_ unsafe.Pointer) int

@function SecCodeCheckValidityWithErrors Performs dynamic validation of the given SecCode object. The call obtains and verifies the signature on the code object. It checks the validity of only those sealed components required to establish identity. It checks the SecCode's dynamic validity status as reported by its host. It ensures that the SecCode's host is in turn valid. Finally, it validates the code against a SecRequirement if one is given. The call succeeds if all these conditions are satisfactory. It fails otherwise. This call is secure against attempts to modify the file system source of the SecCode. @param code The code object to be validated. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param requirement An optional code requirement specifying additional conditions the code object must satisfy to be considered valid. If NULL, no additional requirements are imposed. @param errors An optional pointer to a CFErrorRef variable. If the call fails (and something other than errSecSuccess is returned), and this argument is non-NULL, a CFErrorRef is stored there further describing the nature and circumstances of the failure. The caller must CFRelease() this error object when done with it. @result If validation passes, errSecSuccess. If validation fails, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecCodeCopyDesignatedRequirement

func SecCodeCopyDesignatedRequirement(code unsafe.Pointer, flags SecCSFlags, requirement unsafe.Pointer) int

@function SecCodeCopyDesignatedRequirement For a given Code or StaticCode object, determines its Designated Code Requirement. The Designated Requirement is the SecRequirement that the code believes should be used to properly identify it in the future. If the SecCode contains an explicit Designated Requirement, a copy of that is returned. If it does not, a SecRequirement is implicitly constructed from its signing authority and its embedded unique identifier. No Designated Requirement can be obtained from code that is unsigned. Code that is modified after signature, improperly signed, or has become invalid, may or may not yield a Designated Requirement. This call does not validate the SecStaticCode argument. @param code The Code or StaticCode object to be interrogated. For a Code argument, its StaticCode is processed as per SecCodeCopyStaticCode. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param requirement On successful return, contains a copy of a SecRequirement object representing the code's Designated Requirement. On error, unchanged. @result On success, errSecSuccess. On error, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecCodeCopyGuestWithAttributes

func SecCodeCopyGuestWithAttributes(host unsafe.Pointer, attributes unsafe.Pointer, flags SecCSFlags, guest unsafe.Pointer) int

func SecCodeCopyHost

func SecCodeCopyHost(guest unsafe.Pointer, flags SecCSFlags, host unsafe.Pointer) int

@function SecCodeCopyHost Given a SecCode object, identify the (different) SecCode object that acts as its host. A SecCode's host acts as a supervisor and controller, and is the ultimate authority on the its dynamic validity and status. The host relationship is securely established (absent reported errors). @param guest A valid SecCode object reference representing code running on the system. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param host On successful return, a SecCode object reference identifying the code's host. @result Upon success, errSecSuccess. Upon error, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecCodeCopyPath

func SecCodeCopyPath(staticCode unsafe.Pointer, flags SecCSFlags, path unsafe.Pointer) int

@function SecCodeCopyPath For a given Code or StaticCode object, returns a URL to a location on disk where the code object can be found. For single files, the URL points to that file. For bundles, it points to the directory containing the entire bundle. @param staticCode The Code or StaticCode object to be located. For a Code argument, its StaticCode is processed as per SecCodeCopyStaticCode. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param path On successful return, contains a CFURL identifying the location on disk of the staticCode object. @result On success, errSecSuccess. On error, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecCodeCopySelf

func SecCodeCopySelf(flags SecCSFlags, self unsafe.Pointer) int

@function SecCodeCopySelf Obtains a SecCode object for the code making the call. The calling code is determined in a way that is subject to modification over time, but obeys the following rules. If it is a UNIX process, its process id (pid) is always used. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param self Upon successful return, contains a SecCodeRef representing the caller. @result Upon success, errSecSuccess. Upon error, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecCodeCopySigningInformation

func SecCodeCopySigningInformation(code unsafe.Pointer, flags SecCSFlags, information unsafe.Pointer) int

func SecCodeCopyStaticCode

func SecCodeCopyStaticCode(code unsafe.Pointer, flags SecCSFlags, staticCode unsafe.Pointer) int

func SecCodeCreateWithXPCMessage

func SecCodeCreateWithXPCMessage(message unsafe.Pointer, flags SecCSFlags, target unsafe.Pointer) int

@function SecCodeCreateWithXPCMessage Creates a SecCode reference to the process that sent the provided XPC message, using the associated audit token. @param message The xpc_object_t of a message recieved via xpc to look up the audit token of the process that sent the message. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param processRef On successful return, a SecCode object reference identifying the particular guest of the process from the audit token. This argument will not be changed if the call fails (does not return errSecSuccess). @result Upon success, errSecSuccess. Upon error, an OSStatus value documented in CSCommon.h or certain other Security framework headers. In particular: @error errSecCSInvalidObjectRef The xpc_object_t was not of type XPC_TYPE_DICTIONARY. @error errSecCSInvalidObjectRef The xpc_object_t was not an xpc message with an associated connection. For a complete list of errors, please see {@link SecCodeCopyGuestWithAttributes}.

func SecCodeGetTypeID

func SecCodeGetTypeID() uint

@function SecCodeGetTypeID Returns the type identifier of all SecCode instances.

func SecCodeMapMemory

func SecCodeMapMemory(code unsafe.Pointer, flags SecCSFlags) int

func SecCodeValidateFileResource

func SecCodeValidateFileResource(code unsafe.Pointer, relativePath unsafe.Pointer, fileData unsafe.Pointer, flags SecCSFlags) int

@function SecCodeValidateFileResource For a SecStaticCodeRef, check that a given CFData object faithfully represents a plain-file resource in its resource seal. This call will fail if the file is missing in the bundle, even if it is optional. @param code A code or StaticCode object. @param relativePath A CFStringRef containing the relative path to a sealed resource file. This path is relative to the resource base, which is either Contents or the bundle root, depending on bundle format. @param fileData A CFDataRef containing the exact contents of that resource file. @param flags Pass kSecCSDefaultFlags. @result noErr if fileData is the exact content of the file at relativePath at the time it was signed. Various error codes if it is different, there was no such file, it was not a plain file, or anything is irregular.

func SecCopyErrorMessageString

func SecCopyErrorMessageString(status int, reserved unsafe.Pointer) unsafe.Pointer

func SecCreateSharedWebCredentialPassword

func SecCreateSharedWebCredentialPassword() unsafe.Pointer

func SecDecodeTransformCreate deprecated

func SecDecodeTransformCreate(decodeType unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecDecryptTransformCreate deprecated

func SecDecryptTransformCreate(keyRef unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecDecryptTransformGetTypeID deprecated

func SecDecryptTransformGetTypeID() uint

Deprecated: SecTransform is no longer supported

func SecDigestTransformCreate deprecated

func SecDigestTransformCreate(digestType unsafe.Pointer, digestLength int, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecDigestTransformGetTypeID deprecated

func SecDigestTransformGetTypeID() uint

Deprecated: SecTransform is no longer supported

func SecEncodeTransformCreate deprecated

func SecEncodeTransformCreate(encodeType unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecEncryptTransformCreate deprecated

func SecEncryptTransformCreate(keyRef unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecEncryptTransformGetTypeID deprecated

func SecEncryptTransformGetTypeID() uint

Deprecated: SecTransform is no longer supported

func SecGroupTransformGetTypeID deprecated

func SecGroupTransformGetTypeID() uint

Deprecated: SecTransform is no longer supported

func SecHostCreateGuest

func SecHostCreateGuest(host uint, status uint32, path unsafe.Pointer, attributes unsafe.Pointer, flags SecCSFlags, newGuest *uint) int

func SecHostRemoveGuest

func SecHostRemoveGuest(host uint, guest uint, flags SecCSFlags) int

func SecHostSelectGuest

func SecHostSelectGuest(guestRef uint, flags SecCSFlags) int

func SecHostSelectedGuest

func SecHostSelectedGuest(flags SecCSFlags, guestRef *uint) int

func SecHostSetGuestStatus

func SecHostSetGuestStatus(guestRef uint, status uint32, attributes unsafe.Pointer, flags SecCSFlags) int

func SecHostSetHostingPort

func SecHostSetHostingPort(hostingPort uint, flags SecCSFlags) int

func SecIdentityAccessCertificates

func SecIdentityAccessCertificates(identity unsafe.Pointer, handler func(unsafe.Pointer)) bool

C function: sec_identity_access_certificates

func SecIdentityCopyCertificate

func SecIdentityCopyCertificate(identityRef unsafe.Pointer, certificateRef unsafe.Pointer) int

@function SecIdentityCopyCertificate @abstract Returns a reference to a certificate for the given identity reference. @param identityRef An identity reference. @param certificateRef On return, a pointer to the found certificate reference. You are responsible for releasing this reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h).

func SecIdentityCopyCertificatesRef

func SecIdentityCopyCertificatesRef(identity unsafe.Pointer) unsafe.Pointer

C function: sec_identity_copy_certificates_ref

func SecIdentityCopyPreference

func SecIdentityCopyPreference(name unsafe.Pointer, keyUsage uint32, validIssuers unsafe.Pointer, identity unsafe.Pointer) int

@function SecIdentityCopyPreference @abstract Returns the preferred identity for the specified name and key usage, optionally limiting the result to an identity issued by a certificate whose subject is one of the distinguished names in validIssuers. If a preferred identity does not exist, NULL is returned. @param name A string containing a URI, RFC822 email address, DNS hostname, or other name which uniquely identifies the service requiring an identity. @param keyUsage A CSSM_KEYUSE key usage value, as defined in cssmtype.h. Pass 0 to ignore this parameter. @param validIssuers (optional) An array of CFDataRef instances whose contents are the subject names of allowable issuers, as returned by a call to SSLCopyDistinguishedNames (SecureTransport.h). Pass NULL if any issuer is allowed. @param identity On return, a reference to the preferred identity, or NULL if none was found. You are responsible for releasing this reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated in 10.7. Please use the SecIdentityCopyPreferred API instead.

func SecIdentityCopyPreferred

func SecIdentityCopyPreferred(name unsafe.Pointer, keyUsage unsafe.Pointer, validIssuers unsafe.Pointer) unsafe.Pointer

func SecIdentityCopyPrivateKey

func SecIdentityCopyPrivateKey(identityRef unsafe.Pointer, privateKeyRef unsafe.Pointer) int

@function SecIdentityCopyPrivateKey @abstract Returns the private key associated with an identity. @param identityRef An identity reference. @param privateKeyRef On return, a pointer to the private key for the given identity. On iOS, the private key must be of class type kSecAppleKeyItemClass. You are responsible for releasing this reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h).

func SecIdentityCopyRef

func SecIdentityCopyRef(identity unsafe.Pointer) unsafe.Pointer

C function: sec_identity_copy_ref

func SecIdentityCopySystemIdentity

func SecIdentityCopySystemIdentity(domain unsafe.Pointer, idRef unsafe.Pointer, actualDomain unsafe.Pointer) int

@function SecIdentityCopySystemIdentity @abstract Obtain the system-wide SecIdentityRef associated with a specified domain. @param domain Identifies the SecIdentityRef to be obtained, typically in the form "com.apple.subdomain...". @param idRef On return, the system SecIdentityRef assicated with the specified domain. Caller must CFRelease this when finished with it. @param actualDomain (optional) The actual domain name of the the returned identity is returned here. This may be different from the requested domain. @result A result code. See "Security Error Codes" (SecBase.h). @discussion If no system SecIdentityRef exists for the specified domain, a domain-specific alternate may be returned instead, typically (but not exclusively) the kSecIdentityDomainDefault SecIdentityRef.

func SecIdentityCreate

func SecIdentityCreate(allocator unsafe.Pointer, certificate unsafe.Pointer, privateKey unsafe.Pointer) unsafe.Pointer

func SecIdentityCreateWithCertificate

func SecIdentityCreateWithCertificate(keychainOrArray unsafe.Pointer, certificateRef unsafe.Pointer, identityRef unsafe.Pointer) int

@function SecIdentityCreateWithCertificate @abstract Creates a new identity reference for the given certificate, assuming the associated private key is in one of the specified keychains. @param keychainOrArray A reference to an array of keychains to search, a single keychain, or NULL to search the user's default keychain search list. @param certificateRef A certificate reference. @param identityRef On return, an identity reference. You are responsible for releasing this reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h).

func SecIdentityCreateWithCertificates

func SecIdentityCreateWithCertificates(identity unsafe.Pointer, certificates unsafe.Pointer) unsafe.Pointer

C function: sec_identity_create_with_certificates

func SecIdentityGetTypeID

func SecIdentityGetTypeID() uint

@function SecIdentityGetTypeID @abstract Returns the type identifier of SecIdentity instances. @result The CFTypeID of SecIdentity instances.

func SecIdentitySearchCopyNext

func SecIdentitySearchCopyNext(searchRef unsafe.Pointer, identity unsafe.Pointer) int

@function SecIdentitySearchCopyNext @abstract Finds the next identity matching the given search criteria, as previously specified by a call to SecIdentitySearchCreate or SecIdentitySearchCreateWithAttributes. @param searchRef A reference to the current identity search. You create the identity search reference by calling either SecIdentitySearchCreate or SecIdentitySearchCreateWithAttributes. @param identity On return, an identity reference for the next found identity, if any. You must call the CFRelease function when finished with the identity reference. @result A result code. When there are no more identities found that match the search criteria, errSecItemNotFound is returned. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in Mac OS X 10.7 and later; to find identities which match specified attributes, please use the SecItemCopyMatching API (see SecItem.h).

func SecIdentitySearchCreate

func SecIdentitySearchCreate(keychainOrArray unsafe.Pointer, keyUsage uint32, searchRef unsafe.Pointer) int

@function SecIdentitySearchCreate @abstract Creates a search reference for finding identities. @param keychainOrArray An reference to an array of keychains to search, a single keychain, or NULL to search the user's default keychain search list. @param keyUsage A CSSM_KEYUSE value, as defined in cssmtype.h. This value narrows the search to return only those identities which match the specified key usage. Pass a value of 0 to ignore key usage and return all available identities. Note that passing CSSM_KEYUSE_ANY limits the results to only those identities that can be used for every operation. @param searchRef On return, an identity search reference. You must release the identity search reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h). @discussion You can set values for key usage, and one or more keychains, to control the search for identities. You can use the returned search reference to obtain the remaining identities in subsequent calls to the SecIentitySearchCopyNext function. You must release the identity search reference by calling the CFRelease function. This function is deprecated in Mac OS X 10.7 and later; to find identities which match a given key usage or other attributes, please use the SecItemCopyMatching API (see SecItem.h).

func SecIdentitySearchGetTypeID

func SecIdentitySearchGetTypeID() uint

@function SecIdentitySearchGetTypeID @abstract Returns the type identifier of SecIdentitySearch instances. @result The CFTypeID of SecIdentitySearch instances. @discussion This API is deprecated in 10.7. The SecIdentitySearchRef type is no longer used.

func SecIdentitySetPreference

func SecIdentitySetPreference(identity unsafe.Pointer, name unsafe.Pointer, keyUsage uint32) int

@function SecIdentitySetPreference @abstract Sets the preferred identity for the specified name and key usage. @param identity A reference to the identity which will be preferred. @param name A string containing a URI, RFC822 email address, DNS hostname, or other name which uniquely identifies a service requiring this identity. @param keyUsage A CSSM_KEYUSE key usage value, as defined in cssmtype.h. Pass 0 to specify any key usage. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated in 10.7. Please use the SecIdentitySetPreferred API instead.

func SecIdentitySetPreferred

func SecIdentitySetPreferred(identity unsafe.Pointer, name unsafe.Pointer, keyUsage unsafe.Pointer) int

@function SecIdentitySetPreferred @abstract Sets the preferred identity for the specified name and key usage. @param identity A reference to the identity which will be preferred. If NULL is passed, any existing preference for the specified name is cleared instead. @param name A string containing a URI, RFC822 email address, DNS hostname, or other name which uniquely identifies a service requiring this identity. @param keyUsage A CFArrayRef value, containing items defined in SecItem.h Pass NULL to specify any key usage. (kSecAttrCanEncrypt, kSecAttrCanDecrypt, kSecAttrCanDerive, kSecAttrCanSign, kSecAttrCanVerify, kSecAttrCanWrap, kSecAttrCanUnwrap) @result A result code. See "Security Error Codes" (SecBase.h). @discussion Note: in versions of macOS prior to 11.3, identity preferences are shared between processes running as the same user. Starting in 11.3, URI names are considered per-application preferences. An identity preference for a URI name will be scoped to the application which created it, such that a subsequent call to SecIdentityCopyPreferred will only return it for that same application.

func SecIdentitySetSystemIdentity

func SecIdentitySetSystemIdentity(domain unsafe.Pointer, idRef unsafe.Pointer) int

@function SecIdentitySetSystemIdentity @abstract Assign the supplied SecIdentityRef to the specified domain. @param domain Identifies the domain to which the specified SecIdentityRef will be assigned. @param idRef (optional) The identity to be assigned to the specified domain. Pass NULL to delete a possible entry for the specified domain; in this case, it is not an error if no identity exists for the specified domain. @result A result code. See "Security Error Codes" (SecBase.h). @discussion The caller must be running as root.

func SecItemAdd

func SecItemAdd(attributes unsafe.Pointer, result unsafe.Pointer) int

@function SecItemAdd @abstract Add one or more items to a keychain. @param attributes A dictionary containing an item class specification and optional entries specifying the item's attribute values. See the "Attribute Key Constants" section for a description of currently defined attributes. @param result On return, a CFTypeRef reference to the newly added item(s). The exact type of the result is based on the values supplied in attributes, as discussed below. Pass NULL if this result is not required. @result A result code. See "Security Error Codes" (SecBase.h). @discussion Attributes defining an item are specified by adding key/value pairs to the attributes dictionary. To add multiple items to a keychain at once use the kSecUseItemList key with an array of items as its value. This is currently only supported for non password items. On macOS, to add an item to a particular keychain, supply kSecUseKeychain with a SecKeychainRef as its value. On iOS, watchOS & tvOS, Certificate, Key, and Identity items may be added by reference, but neither Internet Passwords nor Generic Passwords may be. Similarly, on macOS with either kSecUseDataProtectionKeychain set to true or kSecAttrSynchronizable set to true, Certificate, Key, and Identity items may be added by reference, but neither Internet Passwords nor Generic Passwords may be. Result types are specified as follows: To obtain the data of the added item (CFDataRef), specify kSecReturnData with a value of kCFBooleanTrue. To obtain all the attributes of the added item (CFDictionaryRef), specify kSecReturnAttributes with a value of kCFBooleanTrue. To obtain a reference to the added item (SecKeychainItemRef, SecKeyRef, SecCertificateRef, or SecIdentityRef), specify kSecReturnRef with a value of kCFBooleanTrue. See also note about kSecReturnRef and macOS. To obtain a persistent reference to the added item (CFDataRef), specify kSecReturnPersistentRef with a value of kCFBooleanTrue. Note that unlike normal references, a persistent reference may be stored on disk or passed between processes. If more than one of these result types is specified, the result is returned as a CFDictionaryRef containing all the requested data. On iOS, if a result type is not specified, no results are returned. On macOS, the added item is returned.

func SecItemCopyMatching

func SecItemCopyMatching(query unsafe.Pointer, result unsafe.Pointer) int

@function SecItemCopyMatching @abstract Returns one or more items which match a search query. @param query A dictionary containing an item class specification and optional attributes for controlling the search. See the "Keychain Search Attributes" section for a description of currently defined search attributes. @param result On return, a CFTypeRef reference to the found item(s). The exact type of the result is based on the search attributes supplied in the query, as discussed below. @result A result code. See "Security Error Codes" (SecBase.h). @discussion Attributes defining a search are specified by adding key/value pairs to the query dictionary. A typical query consists of: a kSecClass key, whose value is a constant from the Class Constants section that specifies the class of item(s) to be searched one or more keys from the "Attribute Key Constants" section, whose value is the attribute data to be matched one or more keys from the "Search Constants" section, whose value is used to further refine the search a key from the "Return Type Key Constants" section, specifying the type of results desired Result types are specified as follows: To obtain the data of a matching item (CFDataRef), specify kSecReturnData with a value of kCFBooleanTrue. To obtain the attributes of a matching item (CFDictionaryRef), specify kSecReturnAttributes with a value of kCFBooleanTrue. To obtain a reference to a matching item (SecKeychainItemRef, SecKeyRef, SecCertificateRef, or SecIdentityRef), specify kSecReturnRef with a value of kCFBooleanTrue. Note that returning references is supported only for Certificate, Key or Identity items on iOS, watchOS and tvOS. Similarly, returning references is supported only for Certificate, Key or Identity items on macOS when either kSecUseDataProtectionKeychain is set to true or kSecAttrSynchronizable is set to true. To obtain a persistent reference to a matching item (CFDataRef), specify kSecReturnPersistentRef with a value of kCFBooleanTrue. Note that unlike normal references, a persistent reference may be stored on disk or passed between processes. If more than one of these result types is specified, the result is returned as a CFDictionaryRef containing all the requested data. If a result type is not specified, no results are returned. By default, this function returns only the first match found. To obtain more than one matching item at a time, specify kSecMatchLimit with a value greater than 1. The result will be a CFArrayRef containing up to that number of matching items; the items' types are described above. To filter a provided list of items down to those matching the query, specify a kSecMatchItemList whose value is a CFArray of SecKeychainItemRef, SecKeyRef, SecCertificateRef, or SecIdentityRef items. The objects in the provided array must be of the same type. On iOS, to convert from a persistent item reference to a normal item reference, specify a kSecValuePersistentRef whose value a CFDataRef (the persistent reference), and a kSecReturnRef whose value is kCFBooleanTrue. On macOS, to convert from persistent item references to normal item references, specify a kSecMatchItemList whose value is a CFArray containing one or more CFDataRef elements (the persistent reference), and a kSecReturnRef whose value is kCFBooleanTrue. The objects in the provided array must be of the same type.

func SecItemDelete

func SecItemDelete(query unsafe.Pointer) int

@function SecItemDelete @abstract Delete zero or more items which match a search query. @param query A dictionary containing an item class specification and optional attributes for controlling the search. See the "Attribute Constants" and "Search Constants" sections for a description of currently defined search attributes. @result A result code. See "Security Error Codes" (SecBase.h). @discussion Attributes defining a search are specified by adding key/value pairs to the query dictionary. By default, this function deletes all items matching the specified query. You can change this behavior by specifying one of the follow keys: To delete an item identified by a transient reference, on iOS, specify kSecValueRef with a item reference. On macOS, give a kSecMatchItemList containing an item reference. To delete an item identified by a persistent reference, on iOS, specify kSecValuePersistentRef with a persistent reference returned by using the kSecReturnPersistentRef key to SecItemCopyMatching or SecItemAdd. On macOS, use kSecMatchItemList with a persistent reference returned by using the kSecReturnPersistentRef key with SecItemCopyMatching or SecItemAdd. To delete multiple items specify kSecMatchItemList with an array of references. If more than one of these result keys is specified, the behavior is undefined.

func SecItemExport

func SecItemExport(secItemOrArray unsafe.Pointer, outputFormat SecExternalFormat, flags SecItemImportExportFlags, keyParams *SecItemImportExportKeyParameters, exportedData unsafe.Pointer) int

func SecItemImport

func SecItemImport(importedData unsafe.Pointer, fileNameOrExtension unsafe.Pointer, inputFormat *SecExternalFormat, itemType *SecExternalItemType, flags SecItemImportExportFlags, keyParams *SecItemImportExportKeyParameters, importKeychain unsafe.Pointer, outItems unsafe.Pointer) int

func SecItemUpdate

func SecItemUpdate(query unsafe.Pointer, attributesToUpdate unsafe.Pointer) int

@function SecItemUpdate @abstract Modify zero or more items which match a search query. @param query A dictionary containing an item class specification and optional attributes for controlling the search. See the "Attribute Constants" and "Search Constants" sections for a description of currently defined search attributes. @param attributesToUpdate A dictionary containing one or more attributes whose values should be set to the ones specified. Only real keychain attributes are permitted in this dictionary (no "meta" attributes are allowed.) See the "Attribute Key Constants" section for a description of currently defined value attributes. @result A result code. See "Security Error Codes" (SecBase.h). @discussion Attributes defining a search are specified by adding key/value pairs to the query dictionary.

func SecKeyCopyAttributes

func SecKeyCopyAttributes(key unsafe.Pointer) unsafe.Pointer

@function SecKeyCopyAttributes @abstract Retrieve keychain attributes of a key. @param key The key whose attributes are to be retrieved. @result Dictionary containing attributes of the key. The keys that populate this dictionary are defined and discussed in SecItem.h. @discussion The attributes provided by this function are: kSecAttrCanEncrypt kSecAttrCanDecrypt kSecAttrCanDerive kSecAttrCanSign kSecAttrCanVerify kSecAttrKeyClass kSecAttrKeyType kSecAttrKeySizeInBits kSecAttrTokenID kSecAttrApplicationLabel The set of values is not fixed. Future versions may return more values in this dictionary.

func SecKeyCopyExternalRepresentation

func SecKeyCopyExternalRepresentation(key unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

@function SecKeyCopyExternalRepresentation @abstract Create an external representation for the given key suitable for the key's type. @param key The key to be exported. @param error On error, will be populated with an error object describing the failure. See "Security Error Codes" (SecBase.h). @result A CFData representing the key in a format suitable for that key type. @discussion This function may fail if the key is not exportable (e.g., bound to a smart card or Secure Enclave). The format in which the key will be exported depends on the type of key: kSecAttrKeyTypeRSA PKCS#1 format kSecAttrKeyTypeECSECPrimeRandom ANSI X9.63 format (04 || X || Y [ || K])

func SecKeyCopyKeyExchangeResult

func SecKeyCopyKeyExchangeResult(privateKey unsafe.Pointer, algorithm unsafe.Pointer, publicKey unsafe.Pointer, parameters unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

@function SecKeyCopyKeyExchangeResult @abstract Perform Diffie-Hellman style of key exchange operation, optionally with additional key-derivation steps. @param algorithm One of SecKeyAlgorithm constants suitable to perform this operation. @param publicKey Remote party's public key. @param parameters Dictionary with parameters, see SecKeyKeyExchangeParameter constants. Used algorithm determines the set of required and optional parameters to be used. @param error Pointer to an error object on failure. See "Security Error Codes" (SecBase.h). @result Result of key exchange operation as a CFDataRef, or NULL on failure.

func SecKeyCopyPublicKey

func SecKeyCopyPublicKey(key unsafe.Pointer) unsafe.Pointer

@function SecKeyCopyPublicKey @abstract Retrieve the public key from a key pair or private key. @param key The key from which to retrieve a public key. @result The public key or NULL if public key is not available for specified key. @discussion Fails if key does not contain a public key or no public key can be computed from it.

func SecKeyCreateDecryptedData

func SecKeyCreateDecryptedData(key unsafe.Pointer, algorithm unsafe.Pointer, ciphertext unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

@function SecKeyCreateDecryptedData @abstract Decrypt a block of ciphertext. @param key Private key with which to decrypt the data. @param algorithm One of SecKeyAlgorithm constants suitable to perform decryption with this key. @param ciphertext The data to decrypt. The length and format of the data must conform to chosen algorithm, typically be less or equal to the value returned by SecKeyGetBlockSize(). @param error On error, will be populated with an error object describing the failure. See "Security Error Codes" (SecBase.h). @result The plaintext represented as a CFData, or NULL on failure. @discussion Decrypts ciphertext data using specified key. The exact type of the operation including the format of input and output data is specified by decryption algorithm.

func SecKeyCreateEncryptedData

func SecKeyCreateEncryptedData(key unsafe.Pointer, algorithm unsafe.Pointer, plaintext unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

@function SecKeyCreateEncryptedData @abstract Encrypt a block of plaintext. @param key Public key with which to encrypt the data. @param algorithm One of SecKeyAlgorithm constants suitable to perform encryption with this key. @param plaintext The data to encrypt. The length and format of the data must conform to chosen algorithm, typically be less or equal to the value returned by SecKeyGetBlockSize(). @param error On error, will be populated with an error object describing the failure. See "Security Error Codes" (SecBase.h). @result The ciphertext represented as a CFData, or NULL on failure. @discussion Encrypts plaintext data using specified key. The exact type of the operation including the format of input and output data is specified by encryption algorithm.

func SecKeyCreateFromData deprecated

func SecKeyCreateFromData(parameters unsafe.Pointer, keyData unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: No longer supported

func SecKeyCreatePair

func SecKeyCreatePair(keychainRef unsafe.Pointer, algorithm uint32, keySizeInBits uint32, contextHandle uint64, publicKeyUsage uint32, publicKeyAttr uint32, privateKeyUsage uint32, privateKeyAttr uint32, initialAccess unsafe.Pointer, publicKey unsafe.Pointer, privateKey unsafe.Pointer) int

@function SecKeyCreatePair @abstract Creates an asymmetric key pair and stores it in a specified keychain. @param keychainRef A reference to the keychain in which to store the private and public key items. Specify NULL for the default keychain. @param algorithm An algorithm for the key pair. This parameter is ignored if a valid (non-zero) contextHandle is supplied. @param keySizeInBits A key size for the key pair. This parameter is ignored if a valid (non-zero) contextHandle is supplied. @param contextHandle (optional) A CSSM_CC_HANDLE, or 0. If this argument is supplied, the algorithm and keySizeInBits parameters are ignored. If extra parameters are needed to generate a key (some algorithms require this), you should create a context using CSSM_CSP_CreateKeyGenContext, using the CSPHandle obtained by calling SecKeychainGetCSPHandle. Then use CSSM_UpdateContextAttributes to add parameters, and dispose of the context using CSSM_DeleteContext after calling this function. @param publicKeyUsage A bit mask indicating all permitted uses for the new public key. CSSM_KEYUSE bit mask values are defined in cssmtype.h. @param publicKeyAttr A bit mask defining attribute values for the new public key. The bit mask values are equivalent to a CSSM_KEYATTR_FLAGS and are defined in cssmtype.h. @param privateKeyUsage A bit mask indicating all permitted uses for the new private key. CSSM_KEYUSE bit mask values are defined in cssmtype.h. @param privateKeyAttr A bit mask defining attribute values for the new private key. The bit mask values are equivalent to a CSSM_KEYATTR_FLAGS and are defined in cssmtype.h. @param initialAccess (optional) A SecAccess object that determines the initial access rights to the private key. The public key is given "any/any" access rights by default. @param publicKey (optional) On return, the keychain item reference of the generated public key. Use the SecKeyGetCSSMKey function to obtain the CSSM_KEY. The caller must call CFRelease on this value if it is returned. Pass NULL if a reference to this key is not required. @param privateKey (optional) On return, the keychain item reference of the generated private key. Use the SecKeyGetCSSMKey function to obtain the CSSM_KEY. The caller must call CFRelease on this value if it is returned. Pass NULL if a reference to this key is not required. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated for 10.7. Please use the SecKeyGeneratePair API instead.

func SecKeyCreateRandomKey

func SecKeyCreateRandomKey(parameters unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

@function SecKeyCreateRandomKey @abstract Generates a new public/private key pair. @param parameters A dictionary containing one or more key-value pairs. See the discussion sections below for a complete overview of options. @param error On error, will be populated with an error object describing the failure. See "Security Error Codes" (SecBase.h). @return Newly generated private key. To get associated public key, use SecKeyCopyPublicKey(). @discussion In order to generate a keypair the parameters dictionary must at least contain the following keys: kSecAttrKeyType with a value being kSecAttrKeyTypeRSA or any other kSecAttrKeyType defined in SecItem.h kSecAttrKeySizeInBits with a value being a CFNumberRef or CFStringRef containing the requested key size in bits. Example sizes for RSA keys are: 512, 768, 1024, 2048. The values below may be set either in the top-level dictionary or in a dictionary that is the value of the kSecPrivateKeyAttrs or kSecPublicKeyAttrs key in the top-level dictionary. Setting these attributes explicitly will override the defaults below. See SecItem.h for detailed information on these attributes including the types of the values. kSecAttrLabel default NULL kSecAttrIsPermanent if this key is present and has a Boolean value of true, the key or key pair will be added to the default keychain. kSecAttrTokenID if this key should be generated on specified token. This attribute can contain CFStringRef and can be present only in the top-level parameters dictionary. kSecAttrApplicationTag default NULL kSecAttrEffectiveKeySize default NULL same as kSecAttrKeySizeInBits kSecAttrCanEncrypt default false for private keys, true for public keys kSecAttrCanDecrypt default true for private keys, false for public keys kSecAttrCanDerive default true kSecAttrCanSign default true for private keys, false for public keys kSecAttrCanVerify default false for private keys, true for public keys kSecAttrCanWrap default false for private keys, true for public keys kSecAttrCanUnwrap default true for private keys, false for public keys

func SecKeyCreateSignature

func SecKeyCreateSignature(key unsafe.Pointer, algorithm unsafe.Pointer, dataToSign unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

@function SecKeyCreateSignature @abstract Given a private key and data to sign, generate a digital signature. @param key Private key with which to sign. @param algorithm One of SecKeyAlgorithm constants suitable to generate signature with this key. @param dataToSign The data to be signed, typically the digest of the actual data. @param error On error, will be populated with an error object describing the failure. See "Security Error Codes" (SecBase.h). @result The signature over dataToSign represented as a CFData, or NULL on failure. @discussion Computes digital signature using specified key over input data. The operation algorithm further defines the exact format of input data, operation to be performed and output signature.

func SecKeyCreateWithData

func SecKeyCreateWithData(keyData unsafe.Pointer, attributes unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

@function SecKeyCreateWithData @abstract Create a SecKey from a well-defined external representation. @param keyData CFData representing the key. The format of the data depends on the type of key being created. @param attributes Dictionary containing attributes describing the key to be imported. The keys in this dictionary are kSecAttr* constants from SecItem.h. Mandatory attributes are: kSecAttrKeyType kSecAttrKeyClass @param error On error, will be populated with an error object describing the failure. See "Security Error Codes" (SecBase.h). @result A SecKey object representing the key, or NULL on failure. @discussion This function does not add keys to any keychain, but the SecKey object it returns can be added to keychain using the SecItemAdd function. The requested data format depend on the type of key (kSecAttrKeyType) being created: kSecAttrKeyTypeRSA PKCS#1 format, public key can be also in x509 public key format kSecAttrKeyTypeECSECPrimeRandom ANSI X9.63 format (04 || X || Y [ || K])

func SecKeyDeriveFromPassword deprecated

func SecKeyDeriveFromPassword(password unsafe.Pointer, parameters unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: No longer supported

func SecKeyGenerate

func SecKeyGenerate(keychainRef unsafe.Pointer, algorithm uint32, keySizeInBits uint32, contextHandle uint64, keyUsage uint32, keyAttr uint32, initialAccess unsafe.Pointer, keyRef unsafe.Pointer) int

@function SecKeyGenerate @abstract Creates a symmetric key and optionally stores it in a specified keychain. @param keychainRef (optional) A reference to the keychain in which to store the generated key. Specify NULL to generate a transient key. @param algorithm An algorithm for the symmetric key. This parameter is ignored if a valid (non-zero) contextHandle is supplied. @param keySizeInBits A key size for the key pair. This parameter is ignored if a valid (non-zero) contextHandle is supplied. @param contextHandle (optional) A CSSM_CC_HANDLE, or 0. If this argument is supplied, the algorithm and keySizeInBits parameters are ignored. If extra parameters are needed to generate a key (some algorithms require this), you should create a context using CSSM_CSP_CreateKeyGenContext, using the CSPHandle obtained by calling SecKeychainGetCSPHandle. Then use CSSM_UpdateContextAttributes to add parameters, and dispose of the context using CSSM_DeleteContext after calling this function. @param keyUsage A bit mask indicating all permitted uses for the new key. CSSM_KEYUSE bit mask values are defined in cssmtype.h. @param keyAttr A bit mask defining attribute values for the new key. The bit mask values are equivalent to a CSSM_KEYATTR_FLAGS and are defined in cssmtype.h. @param initialAccess (optional) A SecAccess object that determines the initial access rights for the key. This parameter is ignored if the keychainRef is NULL. @param keyRef On return, a reference to the generated key. Use the SecKeyGetCSSMKey function to obtain the CSSM_KEY. The caller must call CFRelease on this value if it is returned. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated for 10.7. Please use the SecKeyGenerateSymmetric API instead.

func SecKeyGeneratePair

func SecKeyGeneratePair(parameters unsafe.Pointer, publicKey unsafe.Pointer, privateKey unsafe.Pointer) int

@function SecKeyGeneratePair @abstract Generate a private/public keypair. @param parameters A dictionary containing one or more key-value pairs. See the discussion sections below for a complete overview of options. @param publicKey On return, a SecKeyRef reference to the public key. @param privateKey On return, a SecKeyRef reference to the private key. @result A result code. See "Security Error Codes" (SecBase.h). @discussion In order to generate a keypair the parameters dictionary must at least contain the following keys: kSecAttrKeyType with a value of kSecAttrKeyTypeRSA or any other kSecAttrKeyType defined in SecItem.h kSecAttrKeySizeInBits with a value being a CFNumberRef containing the requested key size in bits. Example sizes for RSA keys are: 512, 768, 1024, 2048. The values below may be set either in the top-level dictionary or in a dictionary that is the value of the kSecPrivateKeyAttrs or kSecPublicKeyAttrs key in the top-level dictionary. Setting these attributes explicitly will override the defaults below. See SecItem.h for detailed information on these attributes including the types of the values. kSecAttrLabel default NULL kSecUseKeychain default NULL, which specifies the default keychain kSecAttrIsPermanent default false if this key is present and has a Boolean value of true, the key or key pair will be added to the keychain. kSecAttrTokenID default NULL The CFStringRef ID of the token to generate the key or keypair on. This attribute can contain CFStringRef and can be present only in the top-level parameters dictionary. kSecAttrApplicationTag default NULL kSecAttrEffectiveKeySize default NULL same as kSecAttrKeySizeInBits kSecAttrCanEncrypt default false for private keys, true for public keys kSecAttrCanDecrypt default true for private keys, false for public keys kSecAttrCanDerive default true kSecAttrCanSign default true for private keys, false for public keys kSecAttrCanVerify default false for private keys, true for public keys kSecAttrCanWrap default false for private keys, true for public keys kSecAttrCanUnwrap default true for private keys, false for public keys NOTE: The function always saves keys in the keychain on macOS and as such attribute kSecAttrIsPermanent is ignored. The function respects attribute kSecAttrIsPermanent on iOS, tvOS and watchOS. It is recommended to use SecKeyCreateRandomKey() which respects kSecAttrIsPermanent on all platforms. Deprecated: Use SecKeyCreateRandomKey

func SecKeyGeneratePairAsync

func SecKeyGeneratePairAsync(parameters unsafe.Pointer, deliveryQueue unsafe.Pointer, result func(unsafe.Pointer, unsafe.Pointer, unsafe.Pointer))

@function SecKeyGeneratePairAsync @abstract Generate a private/public keypair returning the values in a callback. @param parameters A dictionary containing one or more key-value pairs. @param deliveryQueue A dispatch queue to be used to deliver the results. @param result A callback function to result when the operation has completed. @discussion In order to generate a keypair the parameters dictionary must at least contain the following keys: kSecAttrKeyType with a value being kSecAttrKeyTypeRSA or any other kSecAttrKeyType defined in SecItem.h kSecAttrKeySizeInBits with a value being a CFNumberRef or CFStringRef containing the requested key size in bits. Example sizes for RSA keys are: 512, 768, 1024, 2048. Setting the following attributes explicitly will override the defaults below. See SecItem.h for detailed information on these attributes including the types of the values. kSecAttrLabel default NULL kSecAttrIsPermanent if this key is present and has a Boolean value of true, the key or key pair will be added to the default keychain. kSecAttrApplicationTag default NULL kSecAttrEffectiveKeySize default NULL same as kSecAttrKeySizeInBits kSecAttrCanEncrypt default false for private keys, true for public keys kSecAttrCanDecrypt default true for private keys, false for public keys kSecAttrCanDerive default true kSecAttrCanSign default true for private keys, false for public keys kSecAttrCanVerify default false for private keys, true for public keys kSecAttrCanWrap default false for private keys, true for public keys kSecAttrCanUnwrap default true for private keys, false for public keys Deprecated: No longer supported

func SecKeyGenerateSymmetric deprecated

func SecKeyGenerateSymmetric(parameters unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: No longer supported

func SecKeyGetBlockSize

func SecKeyGetBlockSize(key unsafe.Pointer) uint

@function SecKeyGetBlockSize @abstract Returns block length of the key in bytes. @param key The key for which the block length is requested. @result The block length of the key in bytes. @discussion If for example key is an RSA key the value returned by this function is the size of the modulus.

func SecKeyGetCSPHandle

func SecKeyGetCSPHandle(keyRef unsafe.Pointer, cspHandle *int) int

@function SecKeyGetCSPHandle @abstract Returns the CSSM_CSP_HANDLE for the given key reference. The handle is valid until the key reference is released. @param keyRef A key reference. @param cspHandle On return, the CSSM_CSP_HANDLE for the given keychain. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated in 10.7. Its use should no longer be needed.

func SecKeyGetCSSMKey

func SecKeyGetCSSMKey(key unsafe.Pointer, cssmKey *CssmKey) int

@function SecKeyGetCSSMKey @abstract Returns a pointer to the CSSM_KEY for the given key item reference. @param key A keychain key item reference. The key item must be of class type kSecPublicKeyItemClass, kSecPrivateKeyItemClass, or kSecSymmetricKeyItemClass. @param cssmKey On return, a pointer to a CSSM_KEY structure for the given key. This pointer remains valid until the key reference is released. The caller should not attempt to modify or free this data. @result A result code. See "Security Error Codes" (SecBase.h). @discussion The CSSM_KEY is valid until the key item reference is released. This API is deprecated in 10.7. Its use should no longer be needed.

func SecKeyGetCredentials

func SecKeyGetCredentials(keyRef unsafe.Pointer, operation int32, credentialType SecCredentialType, outCredentials *CssmAccessCredentials) int

@function SecKeyGetCredentials @abstract For a given key, return a pointer to a CSSM_ACCESS_CREDENTIALS structure which will allow the key to be used. @param keyRef The key for which a credential is requested. @param operation The type of operation to be performed with this key. See "Authorization tag type" for defined operations (cssmtype.h). @param credentialType The type of credential requested. @param outCredentials On return, a pointer to a CSSM_ACCESS_CREDENTIALS structure. This pointer remains valid until the key reference is released. The caller should not attempt to modify or free this data. @result A result code. See "Security Error Codes" (SecBase.h).

func SecKeyGetTypeID

func SecKeyGetTypeID() uint

@function SecKeyGetTypeID @abstract Returns the type identifier of SecKey instances. @result The CFTypeID of SecKey instances.

func SecKeyIsAlgorithmSupported

func SecKeyIsAlgorithmSupported(key unsafe.Pointer, operation SecKeyOperationType, algorithm unsafe.Pointer) uint8

@function SecKeyIsAlgorithmSupported @abstract Checks whether key supports specified algorithm for specified operation. @param key Key to query @param operation Operation type for which the key is queried @param algorithm Algorithm which is queried @return True if key supports specified algorithm for specified operation, False otherwise.

func SecKeyUnwrapSymmetric deprecated

func SecKeyUnwrapSymmetric(keyToUnwrap unsafe.Pointer, unwrappingKey unsafe.Pointer, parameters unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: No longer supported

func SecKeyVerifySignature

func SecKeyVerifySignature(key unsafe.Pointer, algorithm unsafe.Pointer, signedData unsafe.Pointer, signature unsafe.Pointer, error_ unsafe.Pointer) uint8

@function SecKeyVerifySignature @abstract Given a public key, data which has been signed, and a signature, verify the signature. @param key Public key with which to verify the signature. @param algorithm One of SecKeyAlgorithm constants suitable to verify signature with this key. @param signedData The data over which sig is being verified, typically the digest of the actual data. @param signature The signature to verify. @param error On error, will be populated with an error object describing the failure. See "Security Error Codes" (SecBase.h). @result True if the signature was valid, False otherwise. @discussion Verifies digital signature operation using specified key and signed data. The operation algorithm further defines the exact format of input data, signature and operation to be performed.

func SecKeyWrapSymmetric deprecated

func SecKeyWrapSymmetric(keyToWrap unsafe.Pointer, wrappingKey unsafe.Pointer, parameters unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: No longer supported

func SecKeychainAddCallback

func SecKeychainAddCallback(callbackFunction unsafe.Pointer, eventMask SecKeychainEventMask, userContext unsafe.Pointer) int

@function SecKeychainAddCallback @abstract Registers your keychain event callback function @param callbackFunction A pointer to your keychain event callback function, described in SecKeychainCallback. You indicate the type of keychain events you want to receive by passing a bit mask of the desired events in the eventMask parameter. @param eventMask A bit mask indicating the keychain events that your application wishes to be notified of. See SecKeychainEventMask for a description of this bit mask. The Keychain Manager tests this mask to determine the keychain events that you wish to receive, and passes these events in the keychainEvent parameter of your callback function. See SecKeychainEvent for a description of these events. @param userContext A pointer to application-defined storage that will be passed to your callback function. Your application can use this to associate any particular call of SecKeychainAddCallback with any particular call of your keychain event callback function. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainAddGenericPassword

func SecKeychainAddGenericPassword(keychain unsafe.Pointer, serviceNameLength uint, serviceName string, accountNameLength uint, accountName string, passwordLength uint, passwordData unsafe.Pointer, itemRef unsafe.Pointer) int

@function SecKeychainAddGenericPassword @abstract Adds a generic password to the specified keychain. @param keychain A reference to the keychain in which to store a generic password. Pass NULL to specify the user's default keychain. @param serviceNameLength The length of the buffer pointed to by serviceName. @param serviceName A pointer to a string containing the service name associated with this password. @param accountNameLength The length of the buffer pointed to by accountName. @param accountName A pointer to a string containing the account name associated with this password. @param passwordLength The length of the buffer pointed to by passwordData. @param passwordData A pointer to a buffer containing the password data to be stored in the keychain. @param itemRef On return, a reference to the new keychain item. @result A result code. See "Security Error Codes" (SecBase.h). @discussion The SecKeychainAddGenericPassword function adds a new generic password to the default keychain. Required parameters to identify the password are serviceName and accountName, which are application-defined strings. SecKeychainAddGenericPassword optionally returns a reference to the newly added item. Deprecated: SecKeychain is deprecated

func SecKeychainAddInternetPassword

func SecKeychainAddInternetPassword(keychain unsafe.Pointer, serverNameLength uint, serverName string, securityDomainLength uint, securityDomain string, accountNameLength uint, accountName string, pathLength uint, path string, port uint16, protocol SecProtocolType, authenticationType SecAuthenticationType, passwordLength uint, passwordData unsafe.Pointer, itemRef unsafe.Pointer) int

@function SecKeychainAddInternetPassword @abstract Adds an Internet password to the specified keychain. @param keychain A reference to a keychain in which to store an Internet password. Pass NULL to specify the user's default keychain. @param serverNameLength The length of the buffer pointed to by serverName. @param serverName A pointer to a string containing the server name associated with this password. @param securityDomainLength The length of the buffer pointed to by securityDomain. @param securityDomain A pointer to a string containing the security domain associated with this password, or NULL if there is no relevant security domain. @param accountNameLength The length of the buffer pointed to by accountName. @param accountName A pointer to a string containing the account name associated with this password. @param pathLength The length of the buffer pointed to by path. @param path A pointer to a string containing the path associated with this password, or NULL if there is no relevant path string. @param port The TCP/IP port number. If no specific port number is associated with this item, pass 0. @param protocol The protocol associated with this password. See SecProtocolType for a description of possible values. @param authenticationType The authentication scheme used. See SecAuthenticationType for a description of possible values. Pass the constant kSecAuthenticationTypeDefault to specify the default authentication scheme. @param passwordLength The length of the buffer pointed to by passwordData. @param passwordData A pointer to a buffer containing the password data to be stored in the keychain. @param itemRef On return, a reference to the new keychain item. @result A result code. See "Security Error Codes" (SecBase.h). @discussion The SecKeychainAddInternetPassword function adds a new Internet server password to the specified keychain. Required parameters to identify the password are serverName and accountName (you cannot pass NULL for both parameters). In addition, some protocols may require an optional securityDomain when authentication is requested. SecKeychainAddInternetPassword optionally returns a reference to the newly added item. Deprecated: SecKeychain is deprecated

func SecKeychainAttributeInfoForItemID

func SecKeychainAttributeInfoForItemID(keychain unsafe.Pointer, itemID uint, info *SecKeychainAttributeInfo) int

@function SecKeychainAttributeInfoForItemID @abstract Obtains tags for all possible attributes for a given item class. @param keychain A keychain reference. @param itemID The relation identifier of the item tags (an itemID is a CSSM_DB_RECORDTYPE defined in cssmapple.h). @param info On return, a pointer to the keychain attribute information. User should call the SecKeychainFreeAttributeInfo function to release the structure when done with it. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if not enough valid parameters were supplied (NULL). @discussion Warning, this call returns more attributes than are support by the old style Keychain API and passing them into older calls will yield an invalid attribute error. The recommended call to retrieve the attribute values is the SecKeychainItemCopyAttributesAndData function. Deprecated: SecKeychain is deprecated

func SecKeychainCopyAccess

func SecKeychainCopyAccess(keychain unsafe.Pointer, access unsafe.Pointer) int

@function SecKeychainCopyAccess @abstract Retrieves the access for a keychain. @param keychain A reference to the keychain from which to copy the access. @param access On return, a pointer to the access reference. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainCopyDefault

func SecKeychainCopyDefault(keychain unsafe.Pointer) int

@function SecKeychainCopyDefault @abstract Retrieves a reference to the default keychain. @param keychain On return, a pointer to the default keychain reference. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainCopyDomainDefault deprecated

func SecKeychainCopyDomainDefault(domain SecPreferencesDomain, keychain unsafe.Pointer) int

Deprecated: SecKeychain is deprecated

func SecKeychainCopyDomainSearchList deprecated

func SecKeychainCopyDomainSearchList(domain SecPreferencesDomain, searchList unsafe.Pointer) int

Deprecated: SecKeychain is deprecated

func SecKeychainCopySearchList

func SecKeychainCopySearchList(searchList unsafe.Pointer) int

@function SecKeychainCopySearchList @abstract Retrieves a keychain search list. @param searchList The returned list of keychains to search. When finished with the array, you must call CFRelease() to release the memory. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if the keychain list is not specified (NULL). Deprecated: SecKeychain is deprecated

func SecKeychainCopySettings

func SecKeychainCopySettings(keychain unsafe.Pointer, outSettings *SecKeychainSettings) int

@function SecKeychainCopySettings @abstract Copy the keychain settings. @param keychain A reference to the keychain from which to copy its settings. @param outSettings A pointer to a keychain settings structure. Since this structure is versioned, you must preallocate it and fill in the version of the structure. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainCreate

func SecKeychainCreate(pathName string, passwordLength uint, password unsafe.Pointer, promptUser uint8, initialAccess unsafe.Pointer, keychain unsafe.Pointer) int

@function SecKeychainCreate @abstract Creates a new keychain. @param pathName The POSIX path to a keychain file. @param passwordLength An unsigned 32-bit integer representing the length of the password buffer. @param password A pointer to the buffer containing the password. The password must be in canonical UTF8 encoding. @param promptUser A boolean representing whether to display a password dialog to the user. @param initialAccess An access reference. @param keychain On return, a pointer to a keychain reference. The memory that keychain occupies must be released by calling CFRelease when finished with it. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if the keychain parameter is invalid (NULL). Deprecated: SecKeychain is deprecated

func SecKeychainDelete

func SecKeychainDelete(keychainOrArray unsafe.Pointer) int

@function SecKeychainDelete @abstract Removes one or more keychains from the current keychain searchlist, and deletes the keychain storage (if the keychains are file-based). @param keychainOrArray A single keychain reference or a reference to an array of keychains to delete. IMPORTANT: SecKeychainDelete does not dispose the memory occupied by keychain references; use the CFRelease function when you are completely finished with a keychain. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecInvalidKeychain (-25295) may be returned if the keychain parameter is invalid (NULL). Deprecated: SecKeychain is deprecated

func SecKeychainFindGenericPassword

func SecKeychainFindGenericPassword(keychainOrArray unsafe.Pointer, serviceNameLength uint, serviceName string, accountNameLength uint, accountName string, passwordLength *uint, passwordData unsafe.Pointer, itemRef unsafe.Pointer) int

@function SecKeychainFindGenericPassword @abstract Find a generic password based on the attributes passed. @param keychainOrArray A reference to an array of keychains to search, a single keychain, or NULL to search the user's default keychain search list. @param serviceNameLength The length of the buffer pointed to by serviceName. @param serviceName A pointer to a string containing the service name. @param accountNameLength The length of the buffer pointed to by accountName. @param accountName A pointer to a string containing the account name. @param passwordLength On return, the length of the buffer pointed to by passwordData. @param passwordData On return, a pointer to a data buffer containing the password. Your application must call SecKeychainItemFreeContent(NULL, passwordData) to release this data buffer when it is no longer needed. Pass NULL if you are not interested in retrieving the password data at this time, but simply want to find the item reference. @param itemRef On return, a reference to the keychain item which was found. @result A result code. See "Security Error Codes" (SecBase.h). @discussion The SecKeychainFindGenericPassword function finds the first generic password item which matches the attributes you provide. Most attributes are optional; you should pass only as many as you need to narrow the search sufficiently for your application's intended use. SecKeychainFindGenericPassword optionally returns a reference to the found item. Deprecated: SecKeychain is deprecated

func SecKeychainFindInternetPassword

func SecKeychainFindInternetPassword(keychainOrArray unsafe.Pointer, serverNameLength uint, serverName string, securityDomainLength uint, securityDomain string, accountNameLength uint, accountName string, pathLength uint, path string, port uint16, protocol SecProtocolType, authenticationType SecAuthenticationType, passwordLength *uint, passwordData unsafe.Pointer, itemRef unsafe.Pointer) int

@function SecKeychainFindInternetPassword @abstract Finds an Internet password based on the attributes passed. @param keychainOrArray A reference to an array of keychains to search, a single keychain, or NULL to search the user's default keychain search list. @param serverNameLength The length of the buffer pointed to by serverName. @param serverName A pointer to a string containing the server name. @param securityDomainLength The length of the buffer pointed to by securityDomain. @param securityDomain A pointer to a string containing the security domain. This parameter is optional, as not all protocols will require it. @param accountNameLength The length of the buffer pointed to by accountName. @param accountName A pointer to a string containing the account name. @param pathLength The length of the buffer pointed to by path. @param path A pointer to a string containing the path. @param port The TCP/IP port number. Pass 0 to ignore the port number. @param protocol The protocol associated with this password. See SecProtocolType for a description of possible values. @param authenticationType The authentication scheme used. See SecAuthenticationType for a description of possible values. Pass the constant kSecAuthenticationTypeDefault to specify the default authentication scheme. @param passwordLength On return, the length of the buffer pointed to by passwordData. @param passwordData On return, a pointer to a data buffer containing the password. Your application must call SecKeychainItemFreeContent(NULL, passwordData) to release this data buffer when it is no longer needed. Pass NULL if you are not interested in retrieving the password data at this time, but simply want to find the item reference. @param itemRef On return, a reference to the keychain item which was found. @result A result code. See "Security Error Codes" (SecBase.h). @discussion The SecKeychainFindInternetPassword function finds the first Internet password item which matches the attributes you provide. Most attributes are optional; you should pass only as many as you need to narrow the search sufficiently for your application's intended use. SecKeychainFindInternetPassword optionally returns a reference to the found item. Deprecated: SecKeychain is deprecated

func SecKeychainFreeAttributeInfo

func SecKeychainFreeAttributeInfo(info *SecKeychainAttributeInfo) int

@function SecKeychainFreeAttributeInfo @abstract Releases the memory acquired by calling the SecKeychainAttributeInfoForItemID function. @param info A pointer to the keychain attribute information to release. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if not enough valid parameters were supplied (NULL). Deprecated: SecKeychain is deprecated

func SecKeychainGetCSPHandle

func SecKeychainGetCSPHandle(keychain unsafe.Pointer, cspHandle *int) int

@function SecKeychainGetCSPHandle @abstract Returns the CSSM_CSP_HANDLE attachment for the given keychain reference. The handle is valid until the keychain reference is released. @param keychain A keychain reference. @param cspHandle On return, a pointer to the CSSM_CSP_HANDLE for the given keychain. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated for 10.7. It should nho longer be needed.

func SecKeychainGetDLDBHandle

func SecKeychainGetDLDBHandle(keychain unsafe.Pointer, dldbHandle *CssmDlDbHandle) int

@function SecKeychainGetDLDBHandle @abstract Returns the CSSM_DL_DB_HANDLE for a given keychain reference. The handle is valid until the keychain reference is released. @param keychain A keychain reference. @param dldbHandle On return, a pointer to the CSSM_DL_DB_HANDLE for the given keychain. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated for 10.7. It should nho longer be needed.

func SecKeychainGetPath

func SecKeychainGetPath(keychain unsafe.Pointer, ioPathLength *uint, pathName string) int

@function SecKeychainGetPath @abstract Get the path of the specified keychain. @param keychain A reference to a keychain. @param ioPathLength On input, a pointer to the size of the buffer pointed to by pathName. On return, the size of the buffer without the zero termination. @param pathName On return, the POSIX path to the keychain. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainGetPreferenceDomain deprecated

func SecKeychainGetPreferenceDomain(domain *SecPreferencesDomain) int

Deprecated: SecKeychain is deprecated

func SecKeychainGetStatus

func SecKeychainGetStatus(keychain unsafe.Pointer, keychainStatus *uint) int

@function SecKeychainGetStatus @abstract Retrieves status information for the specified keychain. @param keychain A keychain reference. Pass NULL to specify the default keychain. @param keychainStatus On return, a pointer to the status of the specified keychain. See KeychainStatus for valid status constants. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainGetTypeID

func SecKeychainGetTypeID() uint

@function SecKeychainGetTypeID @abstract Returns the type identifier of SecKeychain instances. @result The CFTypeID of SecKeychain instances. Deprecated: SecKeychain is deprecated

func SecKeychainGetUserInteractionAllowed

func SecKeychainGetUserInteractionAllowed(state *uint8) int

@function SecKeychainGetUserInteractionAllowed @abstract Retrieves the current state of user interaction. @param state On return, a pointer to the current state of user interaction. If this is TRUE then user interaction is allowed, if it is FALSE, then user interaction is not allowed. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainGetVersion

func SecKeychainGetVersion(returnVers *uint) int

@function SecKeychainGetVersion @abstract Determines the version of the Keychain Manager installed on the user�s system. @param returnVers On return, a pointer to the version number of the Keychain Manager installed on the current system. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainItemCopyAccess

func SecKeychainItemCopyAccess(itemRef unsafe.Pointer, access unsafe.Pointer) int

@function SecKeychainItemCopyAccess @abstract Copies the access of a given keychain item. @param itemRef A reference to a keychain item. @param access On return, a reference to the keychain item's access. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainItemCopyAttributesAndData

func SecKeychainItemCopyAttributesAndData(itemRef unsafe.Pointer, info *SecKeychainAttributeInfo, itemClass *SecItemClass, attrList *SecKeychainAttributeList, length *uint, outData unsafe.Pointer) int

@function SecKeychainItemCopyAttributesAndData @abstract Copies the data and/or attributes stored in the given keychain item. You must call SecKeychainItemFreeAttributesAndData when you no longer need the attributes and data. If you want to modify the attributes returned here, use SecKeychainModifyAttributesAndData. @param itemRef A reference to the keychain item to copy. @param info A list of tags and formats of the attributes you wish to retrieve. Pass NULL if you don't need to retrieve any attributes. You can call SecKeychainAttributeInfoForItemID to obtain a list with all possible attribute tags and formats for the item's class. @param itemClass On return, the item's class. Pass NULL if you don't require this information. @param attrList On return, a pointer to the list of retrieved attributes. Pass NULL if you don't need to retrieve any attributes. You must call SecKeychainItemFreeAttributesAndData when you no longer need this list. @param length On return, the length of the buffer pointed to by outData. @param outData On return, a pointer to a buffer containing the data in this item. Pass NULL if you don't need to retrieve the data. You must call SecKeychainItemFreeAttributesAndData when you no longer need the data. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if not enough valid parameters are supplied. Deprecated: SecKeychain is deprecated

func SecKeychainItemCopyContent

func SecKeychainItemCopyContent(itemRef unsafe.Pointer, itemClass *SecItemClass, attrList *SecKeychainAttributeList, length *uint, outData unsafe.Pointer) int

@function SecKeychainItemCopyContent @abstract Copies the data and/or attributes stored in the given keychain item. It is recommended that you use SecKeychainItemCopyAttributesAndData(). You must call SecKeychainItemFreeContent when you no longer need the attributes and data. If you want to modify the attributes returned here, use SecKeychainModifyContent(). @param itemRef A reference to the keychain item to modify. @param itemClass On return, the item's class. Pass NULL if you don't require this information. @param attrList On input, the list of attributes to retrieve. On output, the attributes are filled in. Pass NULL if you don't need to retrieve any attributes. You must call SecKeychainItemFreeContent when you no longer need the attributes. @param length On return, the length of the buffer pointed to by outData. @param outData On return, a pointer to a buffer containing the data in this item. Pass NULL if you don't need to retrieve the data. You must call SecKeychainItemFreeContent when you no longer need the data. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if not enough valid parameters are supplied. Deprecated: SecKeychain is deprecated

func SecKeychainItemCopyFromPersistentReference

func SecKeychainItemCopyFromPersistentReference(persistentItemRef unsafe.Pointer, itemRef unsafe.Pointer) int

@function SecKeychainItemCopyFromPersistentReference @abstract Returns a SecKeychainItemRef, given a persistent reference previously obtained by calling SecKeychainItemCreatePersistentReference(). @param persistentItemRef A CFDataRef containing a persistent reference to a keychain item. @param itemRef On return, a SecKeychainItemRef for the keychain item described by the persistent reference. You must release this item reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainItemCopyKeychain

func SecKeychainItemCopyKeychain(itemRef unsafe.Pointer, keychainRef unsafe.Pointer) int

@function SecKeychainItemCopyKeychain @abstract Copies an existing keychain reference from a keychain item. @param itemRef A keychain item reference. @param keychainRef On return, the keychain reference for the specified item. Release this reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainItemCreateCopy

func SecKeychainItemCreateCopy(itemRef unsafe.Pointer, destKeychainRef unsafe.Pointer, initialAccess unsafe.Pointer, itemCopy unsafe.Pointer) int

@function SecKeychainItemCreateCopy @abstract Copies a keychain item. @param itemRef A reference to the keychain item to copy. @param destKeychainRef A reference to the keychain in which to insert the copied keychain item. @param initialAccess The initial access for the copied keychain item. @param itemCopy On return, a reference to the copied keychain item. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainItemCreateFromContent

func SecKeychainItemCreateFromContent(itemClass SecItemClass, attrList *SecKeychainAttributeList, length uint, data unsafe.Pointer, keychainRef unsafe.Pointer, initialAccess unsafe.Pointer, itemRef unsafe.Pointer) int

@function SecKeychainItemCreateFromContent @abstract Creates a new keychain item from the supplied parameters. @param itemClass A constant identifying the class of item to create. @param attrList The list of attributes of the item to create. @param length The length of the buffer pointed to by data. @param data A pointer to a buffer containing the data to store. @param initialAccess A reference to the access for this keychain item. @param keychainRef A reference to the keychain in which to add the item. @param itemRef On return, a pointer to a reference to the newly created keychain item (optional). When the item reference is no longer required, call CFRelease to deallocate memory occupied by the item. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if not enough valid parameters are supplied, or errSecAllocate (-108) if there is not enough memory in the current heap zone to create the object. Deprecated: SecKeychain is deprecated

func SecKeychainItemCreatePersistentReference

func SecKeychainItemCreatePersistentReference(itemRef unsafe.Pointer, persistentItemRef unsafe.Pointer) int

@function SecKeychainItemCreatePersistentReference @abstract Returns a CFDataRef which can be used as a persistent reference to the given keychain item. The data obtained can be turned back into a SecKeychainItemRef later by calling SecKeychainItemCopyFromPersistentReference(). @param itemRef A reference to a keychain item. @param persistentItemRef On return, a CFDataRef containing a persistent reference. You must release this data reference by calling the CFRelease function. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainItemDelete

func SecKeychainItemDelete(itemRef unsafe.Pointer) int

@function SecKeychainItemDelete @abstract Deletes a keychain item from the default keychain's permanent data store. @param itemRef A keychain item reference of the item to delete. @result A result code. See "Security Error Codes" (SecBase.h). @discussion If itemRef has not previously been added to the keychain, SecKeychainItemDelete does nothing and returns errSecSuccess. IMPORTANT: SecKeychainItemDelete does not dispose the memory occupied by the item reference itself; use the CFRelease function when you are completely finished with an item. Deprecated: SecKeychain is deprecated

func SecKeychainItemExport deprecated

func SecKeychainItemExport(keychainItemOrArray unsafe.Pointer, outputFormat SecExternalFormat, flags SecItemImportExportFlags, keyParams *SecKeyImportExportParameters, exportedData unsafe.Pointer) int

Deprecated: since macOS 10.7.

func SecKeychainItemFreeAttributesAndData

func SecKeychainItemFreeAttributesAndData(attrList *SecKeychainAttributeList, data unsafe.Pointer) int

@function SecKeychainItemFreeAttributesAndData @abstract Releases the memory used by the keychain attribute list and the keychain data retrieved in a previous call to SecKeychainItemCopyAttributesAndData. @param attrList A pointer to the attribute list to release. Pass NULL to ignore this parameter. @param data A pointer to the data buffer to release. Pass NULL to ignore this parameter. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainItemFreeContent

func SecKeychainItemFreeContent(attrList *SecKeychainAttributeList, data unsafe.Pointer) int

@function SecKeychainItemFreeContent @abstract Releases the memory used by the keychain attribute list and the keychain data retrieved in a previous call to SecKeychainItemCopyContent. @param attrList A pointer to the attribute list to release. Pass NULL to ignore this parameter. @param data A pointer to the data buffer to release. Pass NULL to ignore this parameter. Deprecated: SecKeychain is deprecated

func SecKeychainItemGetDLDBHandle

func SecKeychainItemGetDLDBHandle(keyItemRef unsafe.Pointer, dldbHandle *CssmDlDbHandle) int

@function SecKeychainItemGetDLDBHandle @abstract Returns the CSSM_DL_DB_HANDLE for a given keychain item reference. @param keyItemRef A keychain item reference. @param dldbHandle On return, a CSSM_DL_DB_HANDLE for the keychain database containing the given item. The handle is valid until the keychain reference is released. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated for 10.7. It should no longer be needed.

func SecKeychainItemGetTypeID

func SecKeychainItemGetTypeID() uint

@function SecKeychainItemGetTypeID @abstract Returns the type identifier of SecKeychainItem instances. @result The CFTypeID of SecKeychainItem instances. Deprecated: SecKeychain is deprecated

func SecKeychainItemGetUniqueRecordID

func SecKeychainItemGetUniqueRecordID(itemRef unsafe.Pointer, uniqueRecordID *CssmDbUniqueRecord) int

@function SecKeychainItemGetUniqueRecordID @abstract Returns a CSSM_DB_UNIQUE_RECORD for the given keychain item reference. @param itemRef A keychain item reference. @param uniqueRecordID On return, a pointer to a CSSM_DB_UNIQUE_RECORD structure for the given item. The unique record is valid until the item reference is released. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This API is deprecated for 10.7. It should no longer be needed.

func SecKeychainItemImport deprecated

func SecKeychainItemImport(importedData unsafe.Pointer, fileNameOrExtension unsafe.Pointer, inputFormat *SecExternalFormat, itemType *SecExternalItemType, flags SecItemImportExportFlags, keyParams *SecKeyImportExportParameters, importKeychain unsafe.Pointer, outItems unsafe.Pointer) int

Deprecated: since macOS 10.7.

func SecKeychainItemModifyAttributesAndData

func SecKeychainItemModifyAttributesAndData(itemRef unsafe.Pointer, attrList *SecKeychainAttributeList, length uint, data unsafe.Pointer) int

@function SecKeychainItemModifyAttributesAndData @abstract Updates an existing keychain item after changing its attributes or data. @param itemRef A reference to the keychain item to modify. @param attrList The list of attributes to modify, along with their new values. Pass NULL if you don't need to modify any attributes. @param length The length of the buffer pointed to by data. @param data Pointer to a buffer containing the data to store. Pass NULL if you don't need to modify the data. @result A result code. See "Security Error Codes" (SecBase.h). @discussion The keychain item is written to the keychain's permanent data store. If the keychain item has not previously been added to a keychain, a call to the SecKeychainItemModifyContent function does nothing and returns errSecSuccess. Deprecated: SecKeychain is deprecated

func SecKeychainItemModifyContent

func SecKeychainItemModifyContent(itemRef unsafe.Pointer, attrList *SecKeychainAttributeList, length uint, data unsafe.Pointer) int

@function SecKeychainItemModifyContent @abstract Updates an existing keychain item after changing its attributes or data. This call should only be used in conjunction with SecKeychainItemCopyContent(). @param itemRef A reference to the keychain item to modify. @param attrList The list of attributes to modify, along with their new values. Pass NULL if you don't need to modify any attributes. @param length The length of the buffer pointed to by data. @param data A pointer to a buffer containing the data to store. Pass NULL if you don't need to modify the data. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainItemSetAccess

func SecKeychainItemSetAccess(itemRef unsafe.Pointer, access unsafe.Pointer) int

@function SecKeychainItemSetAccess @abstract Sets the access of a given keychain item. @param itemRef A reference to a keychain item. @param access A reference to an access to replace the keychain item's current access. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainLock

func SecKeychainLock(keychain unsafe.Pointer) int

@function SecKeychainLock @abstract Locks the specified keychain. @param keychain A reference to the keychain to lock. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainLockAll

func SecKeychainLockAll() int

@function SecKeychainLockAll @abstract Locks all keychains belonging to the current user. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainOpen

func SecKeychainOpen(pathName string, keychain unsafe.Pointer) int

@function SecKeychainOpen @abstract Create a SecKeychainRef for a keychain at pathName. This keychain might not currently exist, use SecKeychainGetStatus if you want to confirm the existence of this keychain. @param pathName The POSIX path to a keychain. @param keychain On return, a pointer to the keychain reference. The memory that keychain occupies must be released by calling CFRelease when finished with it. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if the keychain parameter is invalid (NULL). Deprecated: SecKeychain is deprecated

func SecKeychainRemoveCallback

func SecKeychainRemoveCallback(callbackFunction unsafe.Pointer) int

@function SecKeychainRemoveCallback @abstract Unregisters your keychain event callback function. Once removed, keychain events won't be sent to the owner of the callback. @param callbackFunction The callback function pointer to remove @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainSearchCopyNext

func SecKeychainSearchCopyNext(searchRef unsafe.Pointer, itemRef unsafe.Pointer) int

@function SecKeychainSearchCopyNext @abstract Finds the next keychain item matching the given search criteria. @param searchRef A reference to the current search criteria. The search reference is created in the SecKeychainSearchCreateFromAttributes function and must be released by calling the CFRelease function when you are done with it. @param itemRef On return, a pointer to a keychain item reference of the next matching keychain item, if any. @result A result code. When there are no more items that match the parameters specified to SecPolicySearchCreate, errSecItemNotFound is returned. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in Mac OS X 10.7 and later; to find keychain items which match specified attributes, please use the SecItemCopyMatching API (see SecItem.h). Deprecated: SecKeychainSearch is not supported

func SecKeychainSearchCreateFromAttributes

func SecKeychainSearchCreateFromAttributes(keychainOrArray unsafe.Pointer, itemClass SecItemClass, attrList *SecKeychainAttributeList, searchRef unsafe.Pointer) int

@function SecKeychainSearchCreateFromAttributes @abstract Creates a search reference matching a list of zero or more specified attributes in the specified keychain. @param keychainOrArray An reference to an array of keychains to search, a single keychain or NULL to search the user's default keychain search list. @param itemClass The keychain item class. @param attrList A pointer to a list of zero or more keychain attribute records to match. Pass NULL to match any keychain attribute. @param searchRef On return, a pointer to the current search reference. You are responsible for calling the CFRelease function to release this reference when finished with it. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in Mac OS X 10.7 and later; to find keychain items which match specified attributes, please use the SecItemCopyMatching API (see SecItem.h). Deprecated: SecKeychainSearch is not supported

func SecKeychainSearchGetTypeID

func SecKeychainSearchGetTypeID() uint

@function SecKeychainSearchGetTypeID @abstract Returns the type identifier of SecKeychainSearch instances. @result The CFTypeID of SecKeychainSearch instances. @discussion This API is deprecated in 10.7. The SecKeychainSearchRef type is no longer used. Deprecated: SecKeychainSearch is not supported

func SecKeychainSetAccess

func SecKeychainSetAccess(keychain unsafe.Pointer, access unsafe.Pointer) int

@function SecKeychainSetAccess @abstract Sets the access for a keychain. @param keychain A reference to the keychain for which to set the access. @param access An access reference. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainSetDefault

func SecKeychainSetDefault(keychain unsafe.Pointer) int

@function SecKeychainSetDefault @abstract Sets the default keychain. @param keychain A reference to the keychain to set as default. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if the keychain parameter is invalid (NULL). Deprecated: SecKeychain is deprecated

func SecKeychainSetDomainDefault deprecated

func SecKeychainSetDomainDefault(domain SecPreferencesDomain, keychain unsafe.Pointer) int

Deprecated: SecKeychain is deprecated

func SecKeychainSetDomainSearchList deprecated

func SecKeychainSetDomainSearchList(domain SecPreferencesDomain, searchList unsafe.Pointer) int

Deprecated: SecKeychain is deprecated

func SecKeychainSetPreferenceDomain deprecated

func SecKeychainSetPreferenceDomain(domain SecPreferencesDomain) int

Deprecated: SecKeychain is deprecated

func SecKeychainSetSearchList

func SecKeychainSetSearchList(searchList unsafe.Pointer) int

@function SecKeychainSetSearchList @abstract Specifies the list of keychains to use in a keychain search list. @param searchList The list of keychains to use in a search list when the SecKeychainCopySearchList function is called. An empty array clears the search list. @result A result code. See "Security Error Codes" (SecBase.h). In addition, errSecParam (-50) may be returned if the keychain list is not specified (NULL). Deprecated: SecKeychain is deprecated

func SecKeychainSetSettings

func SecKeychainSetSettings(keychain unsafe.Pointer, newSettings *SecKeychainSettings) int

@function SecKeychainSetSettings @abstract Changes the settings of a keychain. @param keychain A reference to a keychain. @param newSettings A pointer to the new keychain settings. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainSetUserInteractionAllowed

func SecKeychainSetUserInteractionAllowed(state uint8) int

@function SecKeychainSetUserInteractionAllowed @abstract Turns on or off any optional user interaction @param state A boolean representing the state of user interaction. You should pass TRUE to allow user interaction, and FALSE to disallow user interaction @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecKeychainUnlock

func SecKeychainUnlock(keychain unsafe.Pointer, passwordLength uint, password unsafe.Pointer, usePassword uint8) int

@function SecKeychainUnlock @abstract Unlocks the specified keychain. @param keychain A reference to the keychain to unlock. Pass NULL to specify the default keychain. If you pass NULL and the default keychain is currently locked, the keychain will appear as the default choice. If you pass a locked keychain, SecKeychainUnlock will use the password provided to unlock it. If the default keychain is currently unlocked, SecKeychainUnlock returns errSecSuccess. @param passwordLength An unsigned 32-bit integer representing the length of the password buffer. @param password A buffer containing the password for the keychain. Pass NULL if the user password is unknown. In this case, SecKeychainUnlock displays the Unlock Keychain dialog box, and the authentication user interface associated with the keychain about to be unlocked. @param usePassword A boolean indicating whether the password parameter is used. You should pass TRUE if it is used or FALSE if it is ignored. @result A result code. See "Security Error Codes" (SecBase.h). @discussion In most cases, your application does not need to call the SecKeychainUnlock function directly, since most Keychain Manager functions that require an unlocked keychain call SecKeychainUnlock automatically. If your application needs to verify that a keychain is unlocked, call the function SecKeychainGetStatus. Deprecated: SecKeychain is deprecated

func SecPKCS12Import

func SecPKCS12Import(pkcs12_data unsafe.Pointer, options unsafe.Pointer, items unsafe.Pointer) int

@function SecPKCS12Import @abstract Imports the contents of a PKCS12 formatted blob. @param pkcs12_data The PKCS#12 formatted data to be imported. @param options A dictionary containing import options. A kSecImportExportPassphrase entry is required at minimum. Only password-based PKCS12 blobs are currently supported. @param items On return, an array containing a dictionary for every item extracted. Use kSecImportItem constants to access specific elements of these dictionaries. Your code must CFRelease the array when it is no longer needed. @result errSecSuccess in case of success. errSecDecode means either the blob can't be read or it is malformed. errSecAuthFailed means an incorrect password was supplied, or data in the container is damaged. @discussion The normal behavior of this function is to import items into process memory on iOS, and into the default keychain on macOS. You can modify this behavior with entries in the options dictionary. To specify a file-based keychain and legacy access control on macOS, provide kSecImportExportKeychain with a SecKeychainRef value, and/or kSecImportExportAccess with a SecAccessRef value. In macOS 14 and later, it is possible to specify the data protection keychain instead of a file-based keychain by including kSecUseDataProtectionKeychain with a value of kCFBooleanTrue. Starting with macOS 15 and iOS 18, kSecImportToMemoryOnly (with a value of kCFBooleanTrue) allows you to skip importing to the keychain on macOS and explicitly specify iOS behavior.

func SecPolicyCopyProperties

func SecPolicyCopyProperties(policyRef unsafe.Pointer) unsafe.Pointer

func SecPolicyCreateBasicX509

func SecPolicyCreateBasicX509() unsafe.Pointer

@function SecPolicyCreateBasicX509 @abstract Returns a policy object for the default X.509 policy. @result A policy object. The caller is responsible for calling CFRelease on this when it is no longer needed.

func SecPolicyCreateRevocation

func SecPolicyCreateRevocation(revocationFlags uint) unsafe.Pointer

func SecPolicyCreateSSL

func SecPolicyCreateSSL(server uint8, hostname unsafe.Pointer) unsafe.Pointer

@function SecPolicyCreateSSL @abstract Returns a policy object for evaluating SSL certificate chains. @param server Passing true for this parameter creates a policy for SSL server certificates. @param hostname (Optional) If present, the policy will require the specified hostname to match the hostname in the leaf certificate. @result A policy object. The caller is responsible for calling CFRelease on this when it is no longer needed.

func SecPolicyCreateWithOID

func SecPolicyCreateWithOID(policyOID unsafe.Pointer) unsafe.Pointer

func SecPolicyCreateWithProperties

func SecPolicyCreateWithProperties(policyIdentifier unsafe.Pointer, properties unsafe.Pointer) unsafe.Pointer

func SecPolicyGetOID

func SecPolicyGetOID(policyRef unsafe.Pointer, oid *CssmData) int

@function SecPolicyGetOID @abstract Returns a policy's object identifier. @param policyRef A policy reference. @param oid On return, a pointer to the policy's object identifier. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in Mac OS X 10.7 and later; use SecPolicyCopyProperties instead.

func SecPolicyGetTPHandle

func SecPolicyGetTPHandle(policyRef unsafe.Pointer, tpHandle *int) int

@function SecPolicyGetTPHandle @abstract Returns the CSSM trust policy handle for the given policy. @param policyRef A policy reference. @param tpHandle On return, a pointer to a value of type CSSM_TP_HANDLE. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in Mac OS X 10.7 and later.

func SecPolicyGetTypeID

func SecPolicyGetTypeID() uint

@function SecPolicyGetTypeID @abstract Returns the type identifier of SecPolicy instances. @result The CFTypeID of SecPolicy instances.

func SecPolicyGetValue

func SecPolicyGetValue(policyRef unsafe.Pointer, value *CssmData) int

@function SecPolicyGetValue @abstract Returns a policy's value. @param policyRef A policy reference. @param value On return, a pointer to the policy's value. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in Mac OS X 10.7 and later; use SecPolicyCopyProperties instead.

func SecPolicySearchCopyNext

func SecPolicySearchCopyNext(searchRef unsafe.Pointer, policyRef unsafe.Pointer) int

@function SecPolicySearchCopyNext @abstract Finds the next policy matching the given search criteria @param searchRef A reference to the current policy search criteria. You create the policy search reference by a calling the SecPolicySearchCreate function. You are responsible for releasing the policy by calling the CFRelease function when finished with it. @param policyRef On return, a pointer to a policy reference. @result A result code. When there are no more policies that match the parameters specified to SecPolicySearchCreate, errSecPolicyNotFound is returned. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in 10.7. To create a SecPolicyRef, use one of the SecPolicyCreate functions in SecPolicy.h.

func SecPolicySearchCreate

func SecPolicySearchCreate(certType uint32, policyOID *CssmData, value *CssmData, searchRef unsafe.Pointer) int

@function SecPolicySearchCreate @abstract Creates a search reference for finding a policy by specifying its object identifier. @param certType The type of certificates a policy uses. @param policyOID A pointer to a BER-encoded policy object identifier that uniquely specifies the policy. @param value Unused. Pass NULL for this value. Use SecPolicySetValue to set per policy data. @param searchRef On return, a pointer to a policy search reference. The policy search reference is used for subsequent calls to the SecCopyNextPolicy function to obtain the remaining trust policies. You are responsible for releasing the search reference by calling the CFRelease function when finished with it. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in 10.7. To create a SecPolicyRef, use one of the SecPolicyCreate functions in SecPolicy.h.

func SecPolicySearchGetTypeID

func SecPolicySearchGetTypeID() uint

@function SecPolicySearchGetTypeID @abstract Returns the type identifier of SecPolicySearch instances. @result The CFTypeID of SecPolicySearch instances. @discussion This API is deprecated in 10.7. The SecPolicySearchRef type is no longer used.

func SecPolicySetProperties

func SecPolicySetProperties(policyRef unsafe.Pointer, properties unsafe.Pointer) int

@function SecPolicySetProperties @abstract Sets a policy's properties. @param policyRef A policy reference. @param properties A properties dictionary. See "Policy Value Constants" for a list of currently defined property keys. This dictionary replaces the policy's existing properties, if any. Note that the policy OID (specified by kSecPolicyOid) is a read-only property of the policy and cannot be set. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in Mac OS X 10.9 and later. Policy instances should be considered read-only; in cases where your code would consider changing properties of a policy, it should instead create a new policy instance with the desired properties.

func SecPolicySetValue

func SecPolicySetValue(policyRef unsafe.Pointer, value *CssmData) int

@function SecPolicySetValue @abstract Sets a policy's value. @param policyRef A policy reference. @param value The value to be set into the policy object, replacing any previous value. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in Mac OS X 10.7 and later. Policy instances should be considered read-only; in cases where your code would consider changing properties of a policy, it should instead create a new policy instance with the desired properties.

func SecProtocolMetadataAccessDistinguishedNames

func SecProtocolMetadataAccessDistinguishedNames(metadata unsafe.Pointer, handler func(unsafe.Pointer)) bool

C function: sec_protocol_metadata_access_distinguished_names

func SecProtocolMetadataAccessOcspResponse

func SecProtocolMetadataAccessOcspResponse(metadata unsafe.Pointer, handler func(unsafe.Pointer)) bool

C function: sec_protocol_metadata_access_ocsp_response

func SecProtocolMetadataAccessPeerCertificateChain

func SecProtocolMetadataAccessPeerCertificateChain(metadata unsafe.Pointer, handler func(unsafe.Pointer)) bool

C function: sec_protocol_metadata_access_peer_certificate_chain

func SecProtocolMetadataAccessPreSharedKeys

func SecProtocolMetadataAccessPreSharedKeys(metadata unsafe.Pointer, handler func(unsafe.Pointer, unsafe.Pointer)) bool

C function: sec_protocol_metadata_access_pre_shared_keys

func SecProtocolMetadataAccessSupportedSignatureAlgorithms

func SecProtocolMetadataAccessSupportedSignatureAlgorithms(metadata unsafe.Pointer, handler func(uint16)) bool

C function: sec_protocol_metadata_access_supported_signature_algorithms

func SecProtocolMetadataChallengeParametersAreEqual

func SecProtocolMetadataChallengeParametersAreEqual(metadataA unsafe.Pointer, metadataB unsafe.Pointer) bool

C function: sec_protocol_metadata_challenge_parameters_are_equal

func SecProtocolMetadataCopyNegotiatedProtocol

func SecProtocolMetadataCopyNegotiatedProtocol(metadata unsafe.Pointer) string

C function: sec_protocol_metadata_copy_negotiated_protocol

func SecProtocolMetadataCopyPeerPublicKey

func SecProtocolMetadataCopyPeerPublicKey(metadata unsafe.Pointer) unsafe.Pointer

C function: sec_protocol_metadata_copy_peer_public_key

func SecProtocolMetadataCopyServerName

func SecProtocolMetadataCopyServerName(metadata unsafe.Pointer) string

C function: sec_protocol_metadata_copy_server_name

func SecProtocolMetadataCreateSecret

func SecProtocolMetadataCreateSecret(metadata unsafe.Pointer, label_len uint, label string, exporter_length uint) unsafe.Pointer

C function: sec_protocol_metadata_create_secret

func SecProtocolMetadataCreateSecretWithContext

func SecProtocolMetadataCreateSecretWithContext(metadata unsafe.Pointer, label_len uint, label string, context_len uint, context_ *uint8, exporter_length uint) unsafe.Pointer

C function: sec_protocol_metadata_create_secret_with_context

func SecProtocolMetadataGetEarlyDataAccepted

func SecProtocolMetadataGetEarlyDataAccepted(metadata unsafe.Pointer) bool

C function: sec_protocol_metadata_get_early_data_accepted

func SecProtocolMetadataGetNegotiatedCiphersuite

func SecProtocolMetadataGetNegotiatedCiphersuite(metadata unsafe.Pointer) uint16

C function: sec_protocol_metadata_get_negotiated_ciphersuite

func SecProtocolMetadataGetNegotiatedProtocol

func SecProtocolMetadataGetNegotiatedProtocol(metadata unsafe.Pointer) string

C function: sec_protocol_metadata_get_negotiated_protocol Deprecated: since macOS 15.5.

func SecProtocolMetadataGetServerName

func SecProtocolMetadataGetServerName(metadata unsafe.Pointer) string

C function: sec_protocol_metadata_get_server_name Deprecated: since macOS 15.5.

func SecProtocolMetadataPeersAreEqual

func SecProtocolMetadataPeersAreEqual(metadataA unsafe.Pointer, metadataB unsafe.Pointer) bool

C function: sec_protocol_metadata_peers_are_equal

func SecProtocolOptionsAddPreSharedKey

func SecProtocolOptionsAddPreSharedKey(options unsafe.Pointer, psk unsafe.Pointer, psk_identity unsafe.Pointer)

C function: sec_protocol_options_add_pre_shared_key

func SecProtocolOptionsAddTlsApplicationProtocol

func SecProtocolOptionsAddTlsApplicationProtocol(options unsafe.Pointer, application_protocol string)

C function: sec_protocol_options_add_tls_application_protocol

func SecProtocolOptionsAddTlsCiphersuite

func SecProtocolOptionsAddTlsCiphersuite(options unsafe.Pointer, ciphersuite uint16)

C function: sec_protocol_options_add_tls_ciphersuite Deprecated: Use sec_protocol_options_append_tls_ciphersuite

func SecProtocolOptionsAddTlsCiphersuiteGroup

func SecProtocolOptionsAddTlsCiphersuiteGroup(options unsafe.Pointer, group SSLCiphersuiteGroup)

C function: sec_protocol_options_add_tls_ciphersuite_group Deprecated: Use sec_protocol_options_append_tls_ciphersuite_group

func SecProtocolOptionsAppendTlsCiphersuite

func SecProtocolOptionsAppendTlsCiphersuite(options unsafe.Pointer, ciphersuite Tls_ciphersuite_t)

C function: sec_protocol_options_append_tls_ciphersuite

func SecProtocolOptionsAppendTlsCiphersuiteGroup

func SecProtocolOptionsAppendTlsCiphersuiteGroup(options unsafe.Pointer, group Tls_ciphersuite_group_t)

C function: sec_protocol_options_append_tls_ciphersuite_group

func SecProtocolOptionsAreEqual

func SecProtocolOptionsAreEqual(optionsA unsafe.Pointer, optionsB unsafe.Pointer) bool

C function: sec_protocol_options_are_equal

func SecProtocolOptionsSetChallengeBlock

func SecProtocolOptionsSetChallengeBlock(options unsafe.Pointer, challenge_block func(unsafe.Pointer, objc.Block), challenge_queue unsafe.Pointer)

C function: sec_protocol_options_set_challenge_block

func SecProtocolOptionsSetKeyUpdateBlock

func SecProtocolOptionsSetKeyUpdateBlock(options unsafe.Pointer, key_update_block func(unsafe.Pointer, objc.Block), key_update_queue unsafe.Pointer)

C function: sec_protocol_options_set_key_update_block

func SecProtocolOptionsSetLocalIdentity

func SecProtocolOptionsSetLocalIdentity(options unsafe.Pointer, identity unsafe.Pointer)

C function: sec_protocol_options_set_local_identity

func SecProtocolOptionsSetMaxTlsProtocolVersion

func SecProtocolOptionsSetMaxTlsProtocolVersion(options unsafe.Pointer, version Tls_protocol_version_t)

C function: sec_protocol_options_set_max_tls_protocol_version

func SecProtocolOptionsSetMinTlsProtocolVersion

func SecProtocolOptionsSetMinTlsProtocolVersion(options unsafe.Pointer, version Tls_protocol_version_t)

C function: sec_protocol_options_set_min_tls_protocol_version

func SecProtocolOptionsSetPeerAuthenticationRequired

func SecProtocolOptionsSetPeerAuthenticationRequired(options unsafe.Pointer, peer_authentication_required bool)

C function: sec_protocol_options_set_peer_authentication_required

func SecProtocolOptionsSetPreSharedKeySelectionBlock

func SecProtocolOptionsSetPreSharedKeySelectionBlock(options unsafe.Pointer, psk_selection_block func(unsafe.Pointer, unsafe.Pointer, objc.Block), psk_selection_queue unsafe.Pointer)

C function: sec_protocol_options_set_pre_shared_key_selection_block

func SecProtocolOptionsSetTlsDiffieHellmanParameters

func SecProtocolOptionsSetTlsDiffieHellmanParameters(options unsafe.Pointer, params unsafe.Pointer)

C function: sec_protocol_options_set_tls_diffie_hellman_parameters Deprecated: DHE ciphersuites are no longer supported

func SecProtocolOptionsSetTlsFalseStartEnabled

func SecProtocolOptionsSetTlsFalseStartEnabled(options unsafe.Pointer, false_start_enabled bool)

C function: sec_protocol_options_set_tls_false_start_enabled

func SecProtocolOptionsSetTlsIsFallbackAttempt

func SecProtocolOptionsSetTlsIsFallbackAttempt(options unsafe.Pointer, is_fallback_attempt bool)

C function: sec_protocol_options_set_tls_is_fallback_attempt

func SecProtocolOptionsSetTlsMaxVersion

func SecProtocolOptionsSetTlsMaxVersion(options unsafe.Pointer, version SSLProtocol)

C function: sec_protocol_options_set_tls_max_version

func SecProtocolOptionsSetTlsMinVersion

func SecProtocolOptionsSetTlsMinVersion(options unsafe.Pointer, version SSLProtocol)

C function: sec_protocol_options_set_tls_min_version

func SecProtocolOptionsSetTlsOcspEnabled

func SecProtocolOptionsSetTlsOcspEnabled(options unsafe.Pointer, ocsp_enabled bool)

C function: sec_protocol_options_set_tls_ocsp_enabled

func SecProtocolOptionsSetTlsPreSharedKeyIdentityHint

func SecProtocolOptionsSetTlsPreSharedKeyIdentityHint(options unsafe.Pointer, psk_identity_hint unsafe.Pointer)

C function: sec_protocol_options_set_tls_pre_shared_key_identity_hint

func SecProtocolOptionsSetTlsRenegotiationEnabled

func SecProtocolOptionsSetTlsRenegotiationEnabled(options unsafe.Pointer, renegotiation_enabled bool)

C function: sec_protocol_options_set_tls_renegotiation_enabled

func SecProtocolOptionsSetTlsResumptionEnabled

func SecProtocolOptionsSetTlsResumptionEnabled(options unsafe.Pointer, resumption_enabled bool)

C function: sec_protocol_options_set_tls_resumption_enabled

func SecProtocolOptionsSetTlsSctEnabled

func SecProtocolOptionsSetTlsSctEnabled(options unsafe.Pointer, sct_enabled bool)

C function: sec_protocol_options_set_tls_sct_enabled

func SecProtocolOptionsSetTlsServerName

func SecProtocolOptionsSetTlsServerName(options unsafe.Pointer, server_name string)

C function: sec_protocol_options_set_tls_server_name

func SecProtocolOptionsSetTlsTicketsEnabled

func SecProtocolOptionsSetTlsTicketsEnabled(options unsafe.Pointer, tickets_enabled bool)

C function: sec_protocol_options_set_tls_tickets_enabled

func SecProtocolOptionsSetVerifyBlock

func SecProtocolOptionsSetVerifyBlock(options unsafe.Pointer, verify_block func(unsafe.Pointer, unsafe.Pointer, objc.Block), verify_block_queue unsafe.Pointer)

C function: sec_protocol_options_set_verify_block

func SecRandomCopyBytes

func SecRandomCopyBytes(rnd unsafe.Pointer, count uint, bytes_ unsafe.Pointer) int

@function SecRandomCopyBytes @abstract Return count random bytes in *bytes, allocated by the caller. It is critical to check the return value for error. @param rnd Only @p kSecRandomDefault is supported. @param count The number of bytes to generate. @param bytes A buffer to fill with random output. @result Return 0 on success, any other value on failure. @discussion If @p rnd is unrecognized or unsupported, @p kSecRandomDefault is used.

func SecRelease

func SecRelease(obj unsafe.Pointer)

C function: sec_release

func SecRequestSharedWebCredential

func SecRequestSharedWebCredential(fqdn unsafe.Pointer, account unsafe.Pointer, completionHandler func(unsafe.Pointer, unsafe.Pointer))

@function SecRequestSharedWebCredential @abstract Asynchronously obtain one or more shared passwords for a website. @param fqdn (Optional) Fully qualified domain name of the website for which passwords are being requested. If NULL is passed in this argument, the domain name(s) listed in the calling application's 'com.apple.developer.associated-domains' entitlement are searched implicitly. @param account (Optional) Account name for which passwords are being requested. The account may be NULL to request all shared credentials which are available for the site, allowing the caller to discover an existing account. @param completionHandler A block which will be called to deliver the requested credentials. If no matching items were found, the credentials array will be empty, and the CFErrorRef parameter will provide the error result. Note: the credentials and error references will be automatically released after this handler is called, though you may optionally retain either for as long as needed. @discussion This function requests one or more shared passwords for a given website, depending on whether the optional account parameter is supplied. To obtain results, the website specified in the fqdn parameter must be one which matches an entry in the calling application's 'com.apple.developer.associated-domains' entitlement. If matching shared password items are found, the credentials provided to the completionHandler will be a CFArrayRef containing CFDictionaryRef entries. Each dictionary entry will contain the following pairs (see Security/SecItem.h): key: kSecAttrServer value: CFStringRef (the website) key: kSecAttrAccount value: CFStringRef (the account) key: kSecSharedPassword value: CFStringRef (the password) If the found item specifies a non-standard port number (i.e. other than 443 for https), the following key may also be present: key: kSecAttrPort value: CFNumberRef (the port number) Note: since a request involving shared web credentials may potentially require user interaction or other verification to be approved, this function is dispatched asynchronously; your code provides a completion handler that will be called once the results (if any) are available.

func SecRequirementCopyData

func SecRequirementCopyData(requirement unsafe.Pointer, flags SecCSFlags, data unsafe.Pointer) int

@function SecRequirementCopyData Extracts a stable, persistent binary form of a SecRequirement. This is the effective inverse of SecRequirementCreateWithData. @param requirement A valid SecRequirement object. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param data On successful return, contains a reference to a CFData object containing a binary blob that can be fed to SecRequirementCreateWithData to recreate a SecRequirement object with identical behavior. @result Upon success, errSecSuccess. Upon error, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecRequirementCopyString

func SecRequirementCopyString(requirement unsafe.Pointer, flags SecCSFlags, text unsafe.Pointer) int

@function SecRequirementCopyString Converts a SecRequirement object into text form. This is the effective inverse of SecRequirementCreateWithString. Repeated application of this function may produce text that differs in formatting, may contain different source comments, and may perform its validation functions in different order. However, it is guaranteed that recompiling the text using SecRequirementCreateWithString will produce a SecRequirement object that behaves identically to the one you start with. @param requirement A valid SecRequirement object. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param text On successful return, contains a reference to a CFString object containing a text representation of the requirement. @result Upon success, errSecSuccess. Upon error, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecRequirementCreateWithData

func SecRequirementCreateWithData(data unsafe.Pointer, flags SecCSFlags, requirement unsafe.Pointer) int

@function SecRequirementCreateWithData Create a SecRequirement object from binary form. This is the effective inverse of SecRequirementCopyData. @param data A binary blob obtained earlier from a valid SecRequirement object using the SecRequirementCopyData call. This is the only publicly supported way to get such a data blob. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param requirement On successful return, contains a reference to a SecRequirement object that behaves identically to the one the data blob was obtained from. @result Upon success, errSecSuccess. Upon error, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecRequirementCreateWithString

func SecRequirementCreateWithString(text unsafe.Pointer, flags SecCSFlags, requirement unsafe.Pointer) int

@function SecRequirementCreateWithString Create a SecRequirement object by compiling a valid text representation of a requirement. @param text A CFString containing the text form of a (single) Code Requirement. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param requirement On successful return, contains a reference to a SecRequirement object that implements the conditions described in text. @result Upon success, errSecSuccess. Upon error, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecRequirementCreateWithStringAndErrors

func SecRequirementCreateWithStringAndErrors(text unsafe.Pointer, flags SecCSFlags, errors_ unsafe.Pointer, requirement unsafe.Pointer) int

func SecRequirementGetTypeID

func SecRequirementGetTypeID() uint

@function SecRequirementGetTypeID Returns the type identifier of all SecRequirement instances.

func SecRetain

func SecRetain(obj unsafe.Pointer) unsafe.Pointer

C function: sec_retain

func SecSignTransformCreate deprecated

func SecSignTransformCreate(key unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecStaticCodeCheckValidity

func SecStaticCodeCheckValidity(staticCode unsafe.Pointer, flags SecCSFlags, requirement unsafe.Pointer) int

func SecStaticCodeCheckValidityWithErrors

func SecStaticCodeCheckValidityWithErrors(staticCode unsafe.Pointer, flags SecCSFlags, requirement unsafe.Pointer, errors_ unsafe.Pointer) int

func SecStaticCodeCreateWithPath

func SecStaticCodeCreateWithPath(path unsafe.Pointer, flags SecCSFlags, staticCode unsafe.Pointer) int

@function SecStaticCodeCreateWithPath Given a path to a file system object, create a SecStaticCode object representing the code at that location, if possible. Such a SecStaticCode is not inherently linked to running code in the system. It is possible to create a SecStaticCode object from an unsigned code object. Most uses of such an object will return the errSecCSUnsigned error. However, SecCodeCopyPath and SecCodeCopySigningInformation can be safely applied to such objects. @param path A path to a location in the file system. Only file:// URLs are currently supported. For bundles, pass a URL to the root directory of the bundle. For single files, pass a URL to the file. If you pass a URL to the main executable of a bundle, the bundle as a whole will be generally recognized. Caution: Paths containing embedded // or /../ within a bundle's directory may cause the bundle to be misconstrued. If you expect to submit such paths, first clean them with realpath(3) or equivalent. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param staticCode On successful return, contains a reference to the StaticCode object representing the code at path. Unchanged on error. @result Upon success, errSecSuccess. Upon error, an OSStatus value documented in CSCommon.h or certain other Security framework headers.

func SecStaticCodeCreateWithPathAndAttributes

func SecStaticCodeCreateWithPathAndAttributes(path unsafe.Pointer, flags SecCSFlags, attributes unsafe.Pointer, staticCode unsafe.Pointer) int

@function SecStaticCodeCreateWithPathAndAttributes Given a path to a file system object, create a SecStaticCode object representing the code at that location, if possible. Such a SecStaticCode is not inherently linked to running code in the system. It is possible to create a SecStaticCode object from an unsigned code object. Most uses of such an object will return the errSecCSUnsigned error. However, SecCodeCopyPath and SecCodeCopySigningInformation can be safely applied to such objects. @param path A path to a location in the file system. Only file:// URLs are currently supported. For bundles, pass a URL to the root directory of the bundle. For single files, pass a URL to the file. If you pass a URL to the main executable of a bundle, the bundle as a whole will be generally recognized. Caution: Paths containing embedded // or /../ within a bundle's directory may cause the bundle to be misconstrued. If you expect to submit such paths, first clean them with realpath(3) or equivalent. @param flags Optional flags. Pass kSecCSDefaultFlags for standard behavior. @param attributes A CFDictionary containing additional attributes of the code sought. @param staticCode On successful return, contains a reference to the StaticCode object representing the code at path. Unchanged on error. @result Upon success, errSecSuccess. Upon error, an OSStatus value documented in CSCommon.h or certain other Security framework headers. @constant kSecCodeAttributeArchitecture Specifies the Mach-O architecture of code desired. This can be a CFString containing a canonical architecture name ("i386" etc.), or a CFNumber specifying an architecture numerically (see mach/machine.h). This key is ignored if the code is not in Mach-O binary form. If the code is Mach-O but not universal ("thin"), the architecture specified must agree with the actual file contents. @constant kSecCodeAttributeSubarchitecture If the architecture is specified numerically (using the kSecCodeAttributeArchitecture key), specifies any sub-architecture by number. This key is ignored if no main architecture is specified; if it is specified by name; or if the code is not in Mach-O form. @constant kSecCodeAttributeUniversalFileOffset The offset of a Mach-O specific slice of a universal Mach-O file. @constant kSecCodeAttributeBundleVersion If the code sought is a deep framework bundle (Something.framework/Versions/...), then select the specified framework version. This key is otherwise ignored.

func SecStaticCodeGetTypeID

func SecStaticCodeGetTypeID() uint

@function SecStaticCodeGetTypeID Returns the type identifier of all SecStaticCode instances.

func SecTaskCopySigningIdentifier

func SecTaskCopySigningIdentifier(task unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

func SecTaskCopyValueForEntitlement

func SecTaskCopyValueForEntitlement(task unsafe.Pointer, entitlement unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

func SecTaskCopyValuesForEntitlements

func SecTaskCopyValuesForEntitlements(task unsafe.Pointer, entitlements unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

func SecTaskCreateFromSelf

func SecTaskCreateFromSelf(allocator unsafe.Pointer) unsafe.Pointer

func SecTaskCreateWithAuditToken

func SecTaskCreateWithAuditToken(allocator unsafe.Pointer, token unsafe.Pointer) unsafe.Pointer

func SecTaskGetTypeID

func SecTaskGetTypeID() uint

@function SecTaskGetTypeID @abstract Returns the type ID for CF instances of SecTask. @result A CFTypeID for SecTask

func SecTranformCustomGetAttribute

func SecTranformCustomGetAttribute(ref unsafe.Pointer, attribute unsafe.Pointer, type_ SecTransformMetaAttributeType) unsafe.Pointer

func SecTransformConnectTransforms deprecated

func SecTransformConnectTransforms(sourceTransformRef unsafe.Pointer, sourceAttributeName unsafe.Pointer, destinationTransformRef unsafe.Pointer, destinationAttributeName unsafe.Pointer, group unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformCopyExternalRepresentation deprecated

func SecTransformCopyExternalRepresentation(transformRef unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformCreate deprecated

func SecTransformCreate(name unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformCreateFromExternalRepresentation deprecated

func SecTransformCreateFromExternalRepresentation(dictionary unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformCreateGroupTransform deprecated

func SecTransformCreateGroupTransform() unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformCreateReadTransformWithReadStream deprecated

func SecTransformCreateReadTransformWithReadStream(inputStream unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformCustomGetAttribute deprecated

func SecTransformCustomGetAttribute(ref unsafe.Pointer, attribute unsafe.Pointer, type_ SecTransformMetaAttributeType) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformCustomSetAttribute deprecated

func SecTransformCustomSetAttribute(ref unsafe.Pointer, attribute unsafe.Pointer, type_ SecTransformMetaAttributeType, value unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformExecute deprecated

func SecTransformExecute(transformRef unsafe.Pointer, errorRef unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformExecuteAsync deprecated

func SecTransformExecuteAsync(transformRef unsafe.Pointer, deliveryQueue unsafe.Pointer, deliveryBlock func(unsafe.Pointer, unsafe.Pointer, uint8))

Deprecated: SecTransform is no longer supported

func SecTransformFindByName deprecated

func SecTransformFindByName(transform unsafe.Pointer, name unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformGetAttribute deprecated

func SecTransformGetAttribute(transformRef unsafe.Pointer, key unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformGetTypeID deprecated

func SecTransformGetTypeID() uint

Deprecated: SecTransform is no longer supported

func SecTransformNoData deprecated

func SecTransformNoData() unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformPushbackAttribute deprecated

func SecTransformPushbackAttribute(ref unsafe.Pointer, attribute unsafe.Pointer, value unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformRegister deprecated

func SecTransformRegister(uniqueName unsafe.Pointer, createTransformFunction unsafe.Pointer, error_ unsafe.Pointer) uint8

Deprecated: SecTransform is no longer supported

func SecTransformSetAttribute deprecated

func SecTransformSetAttribute(transformRef unsafe.Pointer, key unsafe.Pointer, value unsafe.Pointer, error_ unsafe.Pointer) uint8

Deprecated: SecTransform is no longer supported

func SecTransformSetAttributeAction deprecated

func SecTransformSetAttributeAction(ref unsafe.Pointer, action unsafe.Pointer, attribute unsafe.Pointer, newAction func(unsafe.Pointer, unsafe.Pointer) unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformSetDataAction deprecated

func SecTransformSetDataAction(ref unsafe.Pointer, action unsafe.Pointer, newAction func(unsafe.Pointer) unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTransformSetTransformAction deprecated

func SecTransformSetTransformAction(ref unsafe.Pointer, action unsafe.Pointer, newAction func() unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SecTrustCopyAnchorCertificates

func SecTrustCopyAnchorCertificates(anchors unsafe.Pointer) int

@function SecTrustCopyAnchorCertificates @abstract Returns an array of default anchor (root) certificates used by the system. @param anchors On return, an array containing the system's default anchors (roots). Call the CFRelease function to release this pointer. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is not available on iOS, as certificate data for system-trusted roots is currently unavailable on that platform.

func SecTrustCopyCertificateChain

func SecTrustCopyCertificateChain(trust unsafe.Pointer) unsafe.Pointer

func SecTrustCopyCustomAnchorCertificates

func SecTrustCopyCustomAnchorCertificates(trust unsafe.Pointer, anchors unsafe.Pointer) int

@function SecTrustCopyCustomAnchorCertificates @abstract Returns an array of custom anchor certificates used by a given trust, as set by a prior call to SecTrustSetAnchorCertificates, or NULL if no custom anchors have been specified. @param trust A reference to a trust object. @param anchors On return, an array of custom anchor certificates (roots) used by this trust, or NULL if no custom anchors have been specified. Call the CFRelease function to release this reference. @result A result code. See "Security Error Codes" (SecBase.h).

func SecTrustCopyExceptions

func SecTrustCopyExceptions(trust unsafe.Pointer) unsafe.Pointer

func SecTrustCopyKey

func SecTrustCopyKey(trust unsafe.Pointer) unsafe.Pointer

func SecTrustCopyPolicies

func SecTrustCopyPolicies(trust unsafe.Pointer, policies unsafe.Pointer) int

@function SecTrustCopyPolicies @abstract Returns an array of policies used for this evaluation. @param trust A reference to a trust object. @param policies On return, an array of policies used by this trust. Call the CFRelease function to release this reference. @result A result code. See "Security Error Codes" (SecBase.h).

func SecTrustCopyProperties deprecated

func SecTrustCopyProperties(trust unsafe.Pointer) unsafe.Pointer

Deprecated: since macOS 12.0.

func SecTrustCopyPublicKey deprecated

func SecTrustCopyPublicKey(trust unsafe.Pointer) unsafe.Pointer

Deprecated: since macOS 11.0.

func SecTrustCopyRef

func SecTrustCopyRef(trust unsafe.Pointer) unsafe.Pointer

C function: sec_trust_copy_ref

func SecTrustCopyResult

func SecTrustCopyResult(trust unsafe.Pointer) unsafe.Pointer

func SecTrustCreate

func SecTrustCreate(trust unsafe.Pointer) unsafe.Pointer

C function: sec_trust_create

func SecTrustCreateWithCertificates

func SecTrustCreateWithCertificates(certificates unsafe.Pointer, policies unsafe.Pointer, trust unsafe.Pointer) int

@function SecTrustCreateWithCertificates @abstract Creates a trust object based on the given certificates and policies. @param certificates The group of certificates to verify. This can either be a CFArrayRef of SecCertificateRef objects or a single SecCertificateRef @param policies An array of one or more policies. You may pass a SecPolicyRef to represent a single policy. @param trust On return, a pointer to the trust management reference. @result A result code. See "Security Error Codes" (SecBase.h). @discussion If multiple policies are passed in, all policies must verify for the chain to be considered valid.

func SecTrustEvaluate

func SecTrustEvaluate(trust unsafe.Pointer, result *SecTrustResultType) int

@function SecTrustEvaluate @abstract Evaluates a trust reference synchronously. @param trust A reference to the trust object to evaluate. @param result A pointer to a result type. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function will completely evaluate trust before returning, possibly including network access to fetch intermediate certificates or to perform revocation checking. Since this function can block during those operations, you should call it from within a function that is placed on a dispatch queue, or in a separate thread from your application's main run loop. Alternatively, you can use the SecTrustEvaluateAsync function.

func SecTrustEvaluateAsync

func SecTrustEvaluateAsync(trust unsafe.Pointer, queue unsafe.Pointer, result func(unsafe.Pointer, SecTrustResultType)) int

@function SecTrustEvaluateAsync @abstract Evaluates a trust reference asynchronously. @param trust A reference to the trust object to evaluate. @param queue A dispatch queue on which the result callback should be executed. Pass NULL to use the current dispatch queue. @param result A SecTrustCallback block which will be executed when the trust evaluation is complete. @result A result code. See "Security Error Codes" (SecBase.h).

func SecTrustEvaluateAsyncWithError

func SecTrustEvaluateAsyncWithError(trust unsafe.Pointer, queue unsafe.Pointer, result func(unsafe.Pointer, bool, unsafe.Pointer)) int

@function SecTrustEvaluateAsyncWithError @abstract Evaluates a trust reference asynchronously. @param trust A reference to the trust object to evaluate. @param queue A dispatch queue on which the result callback will be executed. Note that this function MUST be called from that queue. @param result A SecTrustWithErrorCallback block which will be executed when the trust evaluation is complete. The block is guaranteed to be called exactly once when the result code is errSecSuccess, and not called otherwise. Note that this block may be called synchronously inline if no asynchronous operations are required. @result A result code. See "Security Error Codes" (SecBase.h). @discussion If the certificate is trusted, the callback will return a result parameter of true and the error will be set to NULL. If the certificate is not trusted or the evaluation was unable to complete, the result parameter will be false and the error will be set with a description of the failure. The error contains a code for the most serious error encountered (if multiple trust failures occurred). The localized description indicates the certificate with the most serious problem and the type of error. The underlying error contains a localized description of each certificate in the chain that had an error and all errors found with that certificate.

func SecTrustEvaluateWithError

func SecTrustEvaluateWithError(trust unsafe.Pointer, error_ unsafe.Pointer) bool

func SecTrustGetCertificateAtIndex deprecated

func SecTrustGetCertificateAtIndex(trust unsafe.Pointer, ix int) unsafe.Pointer

Deprecated: since macOS 12.0.

func SecTrustGetCertificateCount

func SecTrustGetCertificateCount(trust unsafe.Pointer) int

@function SecTrustGetCertificateCount @abstract Returns the number of certificates in an evaluated certificate chain. @param trust A reference to a trust object. @result The number of certificates in the trust chain, including the anchor. @discussion Important: if the trust reference has not yet been evaluated, this function will evaluate it first before returning. If speed is critical, you may want to call SecTrustGetTrustResult first to make sure that a result other than kSecTrustResultInvalid is present for the trust object.

func SecTrustGetCssmResult

func SecTrustGetCssmResult(trust unsafe.Pointer, result **CssmTpVerifyContextResult) int

@function SecTrustGetCssmResult @abstract Gets the CSSM trust result. @param trust A reference to a trust. @param result On return, a pointer to the CSSM trust result. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in OS X 10.7 and later, and is not available on iOS. To get detailed status information for each certificate, use SecTrustCopyProperties. To get the overall trust result for the evaluation, use SecTrustGetTrustResult.

func SecTrustGetCssmResultCode

func SecTrustGetCssmResultCode(trust unsafe.Pointer, resultCode *int) int

@function SecTrustGetCssmResultCode @abstract Gets the result code from the most recent call to SecTrustEvaluate for the specified trust. @param trust A reference to a trust. @param resultCode On return, the result code produced by the most recent evaluation of the given trust (cssmerr.h). The value of resultCode is undefined if SecTrustEvaluate has not been called. @result A result code. See "Security Error Codes" (SecBase.h). Returns errSecTrustNotAvailable if SecTrustEvaluate has not been called for the specified trust. @discussion This function is deprecated in OS X 10.7 and later, and is not available on iOS. To get detailed status information for each certificate, use SecTrustCopyProperties. To get the overall trust result for the evaluation, use SecTrustGetTrustResult.

func SecTrustGetNetworkFetchAllowed

func SecTrustGetNetworkFetchAllowed(trust unsafe.Pointer, allowFetch *uint8) int

@function SecTrustGetNetworkFetchAllowed @abstract Returns whether a trust evaluation is permitted to fetch missing intermediate certificates from the network. @param trust A trust reference. @param allowFetch On return, the boolean pointed to by this parameter is set to true if the evaluation is permitted to download missing certificates. @result A result code. See "Security Error Codes" (SecBase.h). @discussion By default, network fetch of missing certificates is enabled if the trust evaluation includes the SSL policy, otherwise it is disabled.

func SecTrustGetResult

func SecTrustGetResult(trustRef unsafe.Pointer, result *SecTrustResultType, certChain unsafe.Pointer, statusChain *CSSM_TP_APPLE_EVIDENCE_INFO) int

@function SecTrustGetResult @abstract Returns detailed information on the outcome of an evaluation. @param trustRef A reference to a trust object. @param result A pointer to the result from the call to SecTrustEvaluate. @param certChain On return, a pointer to the certificate chain used to validate the input certificate. Call the CFRelease function to release this pointer. @param statusChain On return, a pointer to the status of the certificate chain. Do not attempt to free this pointer; it remains valid until the trust is destroyed or the next call to SecTrustEvaluate. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in OS X 10.7 and later, and is not available on iOS. To get the complete certificate chain, use SecTrustCopyCertificateChain. To get detailed status information for each certificate, use SecTrustCopyProperties. To get the overall trust result for the evaluation, use SecTrustGetTrustResult.

func SecTrustGetTPHandle

func SecTrustGetTPHandle(trust unsafe.Pointer, handle *int) int

@function SecTrustGetTPHandle @abstract Gets the CSSM trust handle @param trust A reference to a trust. @param handle On return, a CSSM trust handle. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in OS X 10.7 and later.

func SecTrustGetTrustResult

func SecTrustGetTrustResult(trust unsafe.Pointer, result *SecTrustResultType) int

@function SecTrustGetTrustResult @param trust A reference to a trust object. @param result A pointer to the result from the most recent call to SecTrustEvaluate for this trust reference. If SecTrustEvaluate has not been called or trust parameters have changed, the result is kSecTrustResultInvalid. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function replaces SecTrustGetResult for the purpose of obtaining the current evaluation result of a given trust reference.

func SecTrustGetTypeID

func SecTrustGetTypeID() uint

@function SecTrustGetTypeID @abstract Returns the type identifier of SecTrust instances. @result The CFTypeID of SecTrust instances.

func SecTrustGetVerifyTime

func SecTrustGetVerifyTime(trust unsafe.Pointer) float64

@function SecTrustGetVerifyTime @abstract Returns the verify time. @param trust A reference to the trust object being verified. @result A CFAbsoluteTime value representing the time at which certificates should be checked for validity. @discussion This function retrieves the verification time for the given trust reference, as set by a prior call to SecTrustSetVerifyDate(). If the verification time has not been set, this function returns a value of 0, indicating that the current date/time is implicitly used for verification.

func SecTrustSetAnchorCertificates

func SecTrustSetAnchorCertificates(trust unsafe.Pointer, anchorCertificates unsafe.Pointer) int

@function SecTrustSetAnchorCertificates @abstract Sets the anchor certificates for a given trust. @param trust A reference to a trust object. @param anchorCertificates An array of anchor certificates. Pass NULL to restore the default set of anchor certificates. @result A result code. See "Security Error Codes" (SecBase.h). @discussion Calling this function without also calling SecTrustSetAnchorCertificatesOnly() will disable trusting any anchors other than the ones in anchorCertificates.

func SecTrustSetAnchorCertificatesOnly

func SecTrustSetAnchorCertificatesOnly(trust unsafe.Pointer, anchorCertificatesOnly uint8) int

@function SecTrustSetAnchorCertificatesOnly @abstract Reenables trusting anchor certificates in addition to those passed in via the SecTrustSetAnchorCertificates API. @param trust A reference to a trust object. @param anchorCertificatesOnly If true, disables trusting any anchors other than the ones passed in via SecTrustSetAnchorCertificates(). If false, the built in anchor certificates are also trusted. @result A result code. See "Security Error Codes" (SecBase.h).

func SecTrustSetExceptions

func SecTrustSetExceptions(trust unsafe.Pointer, exceptions unsafe.Pointer) bool

@function SecTrustSetExceptions @abstract Set a trust cookie to be used for evaluating this certificate chain. @param trust A reference to a trust object. @param exceptions An exceptions cookie as returned by a call to SecTrustCopyExceptions() in the past. You may pass NULL to clear any exceptions which have been previously set on this trust reference. @result Upon calling SecTrustEvaluate(), any failures that were present at the time the exceptions object was created are ignored, and instead of returning kSecTrustResultRecoverableTrustFailure, kSecTrustResultProceed will be returned (if the certificate for which exceptions was created matches the current leaf certificate). @result Returns true if the exceptions cookies was valid and matches the current leaf certificate, false otherwise. This function will invalidate the existing trust result, requiring a subsequent evaluation for the newly-set exceptions. Note that this function returning true doesn't mean the caller can skip calling SecTrustEvaluate, as there may be new errors since the exceptions cookie was created (for example, a certificate may have subsequently expired.) @discussion Clients of this interface will need to establish the context of this exception to later decide when this exception cookie is to be used. Examples of this context would be the server we are connecting to, the ssid of the wireless network for which this cert is needed, the account for which this cert should be considered valid, and so on.

func SecTrustSetKeychains

func SecTrustSetKeychains(trust unsafe.Pointer, keychainOrArray unsafe.Pointer) int

@function SecTrustSetKeychains @abstract Sets the keychains for a given trust object. @param trust A reference to a trust object. @param keychainOrArray A reference to an array of keychains to search, a single keychain, or NULL to use the default keychain search list. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in macOS 10.13 and later. Beginning in macOS 10.12, this function no longer affected the behavior of the trust evaluation: the user's keychain search list and the system anchors keychain are searched for certificates to complete the chain. To change the keychains that are searched, callers must use SecKeychainSetSearchList to change the user's keychain search list. Note: this function was never applicable to iOS.

func SecTrustSetNetworkFetchAllowed

func SecTrustSetNetworkFetchAllowed(trust unsafe.Pointer, allowFetch uint8) int

@function SecTrustSetNetworkFetchAllowed @abstract Specifies whether a trust evaluation is permitted to fetch missing intermediate certificates from the network. @param trust A trust reference. @param allowFetch If true, and a certificate's issuer is not present in the trust reference but its network location is known, the evaluation is permitted to attempt to download it automatically. Pass false to disable network fetch for this trust evaluation. @result A result code. See "Security Error Codes" (SecBase.h). @discussion By default, network fetch of missing certificates is enabled if the trust evaluation includes the SSL policy, otherwise it is disabled.

func SecTrustSetOCSPResponse

func SecTrustSetOCSPResponse(trust unsafe.Pointer, responseData unsafe.Pointer) int

@function SecTrustSetOCSPResponse @abstract Attach OCSPResponse data to a trust object. @param trust A reference to a trust object. @param responseData This may be either a CFData object containing a single DER-encoded OCSPResponse (per RFC 2560), or a CFArray of these. @result A result code. See "Security Error Codes" (SecBase.h). @discussion Allows the caller to provide OCSPResponse data (which may be obtained during a TLS/SSL handshake, per RFC 3546) as input to a trust evaluation. If this data is available, it can obviate the need to contact an OCSP server for current revocation information.

func SecTrustSetOptions

func SecTrustSetOptions(trustRef unsafe.Pointer, options SecTrustOptionFlags) int

@function SecTrustSetOptions @abstract Sets optional flags for customizing a trust evaluation. @param trustRef A trust reference. @param options Flags to change evaluation behavior for this trust. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is not available on iOS. Use SecTrustSetExceptions and SecTrustCopyExceptions to modify default trust results, and SecTrustSetNetworkFetchAllowed to specify whether missing CA certificates can be fetched from the network.

func SecTrustSetParameters

func SecTrustSetParameters(trustRef unsafe.Pointer, action uint32, actionData unsafe.Pointer) int

@function SecTrustSetParameters @abstract Sets the action and action data for a trust object. @param trustRef The reference to the trust to change. @param action A trust action. @param actionData A reference to data associated with this action. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function is deprecated in OS X 10.7 and later, where it was replaced by SecTrustSetOptions, and is not available on iOS. Your code should use SecTrustSetExceptions and SecTrustCopyExceptions to modify default trust results, and SecTrustSetNetworkFetchAllowed to specify whether missing CA certificates can be fetched from the network.

func SecTrustSetPolicies

func SecTrustSetPolicies(trust unsafe.Pointer, policies unsafe.Pointer) int

@function SecTrustSetPolicies @abstract Set the policies for which trust should be verified. @param trust A trust reference. @param policies An array of one or more policies. You may pass a SecPolicyRef to represent a single policy. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function will invalidate the existing trust result, requiring a fresh evaluation for the newly-set policies.

func SecTrustSetSignedCertificateTimestamps

func SecTrustSetSignedCertificateTimestamps(trust unsafe.Pointer, sctArray unsafe.Pointer) int

@function SecTrustSignedCertificateTimestamps @abstract Attach SignedCertificateTimestamp data to a trust object. @param trust A reference to a trust object. @param sctArray is a CFArray of CFData objects each containing a SCT (per RFC 6962). @result A result code. See "Security Error Codes" (SecBase.h). @discussion Allows the caller to provide SCT data (which may be obtained during a TLS/SSL handshake, per RFC 6962) as input to a trust evaluation.

func SecTrustSetVerifyDate

func SecTrustSetVerifyDate(trust unsafe.Pointer, verifyDate unsafe.Pointer) int

@function SecTrustSetVerifyDate @abstract Set the date for which the trust should be verified. @param trust A reference to a trust object. @param verifyDate The date for which to verify trust. @result A result code. See "Security Error Codes" (SecBase.h). @discussion This function lets you evaluate certificate validity for a given date (for example, to determine if a signature was valid on the date it was signed, even if the certificate has since expired.) If this function is not called, the time at which SecTrustEvaluate() is called is used implicitly as the verification time.

func SecTrustSettingsCopyCertificates

func SecTrustSettingsCopyCertificates(domain SecTrustSettingsDomain, certArray unsafe.Pointer) int

func SecTrustSettingsCopyModificationDate

func SecTrustSettingsCopyModificationDate(certRef unsafe.Pointer, domain SecTrustSettingsDomain, modificationDate unsafe.Pointer) int

func SecTrustSettingsCopyTrustSettings

func SecTrustSettingsCopyTrustSettings(certRef unsafe.Pointer, domain SecTrustSettingsDomain, trustSettings unsafe.Pointer) int

func SecTrustSettingsCreateExternalRepresentation

func SecTrustSettingsCreateExternalRepresentation(domain SecTrustSettingsDomain, trustSettings unsafe.Pointer) int

func SecTrustSettingsImportExternalRepresentation

func SecTrustSettingsImportExternalRepresentation(domain SecTrustSettingsDomain, trustSettings unsafe.Pointer) int

func SecTrustSettingsRemoveTrustSettings

func SecTrustSettingsRemoveTrustSettings(certRef unsafe.Pointer, domain SecTrustSettingsDomain) int

func SecTrustSettingsSetTrustSettings

func SecTrustSettingsSetTrustSettings(certRef unsafe.Pointer, domain SecTrustSettingsDomain, trustSettingsDictOrArray unsafe.Pointer) int

func SecTrustedApplicationCopyData

func SecTrustedApplicationCopyData(appRef unsafe.Pointer, data unsafe.Pointer) int

@function SecTrustedApplicationCopyData @abstract Retrieves the data of a given trusted application reference @param appRef A trusted application reference to retrieve data from @param data On return, a pointer to a data reference of the trusted application. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecTrustedApplicationCreateFromPath

func SecTrustedApplicationCreateFromPath(path string, app unsafe.Pointer) int

@function SecTrustedApplicationCreateFromPath @abstract Creates a trusted application reference based on the trusted application specified by path. @param path The path to the application or tool to trust. For application bundles, use the path to the bundle directory. Pass NULL to refer to yourself, i.e. the application or tool making this call. @param app On return, a pointer to the trusted application reference. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecTrustedApplicationGetTypeID

func SecTrustedApplicationGetTypeID() uint

@function SecTrustedApplicationGetTypeID @abstract Returns the type identifier of SecTrustedApplication instances. @result The CFTypeID of SecTrustedApplication instances. Deprecated: SecKeychain is deprecated

func SecTrustedApplicationSetData

func SecTrustedApplicationSetData(appRef unsafe.Pointer, data unsafe.Pointer) int

@function SecTrustedApplicationSetData @abstract Sets the data of a given trusted application reference @param appRef A trusted application reference. @param data A reference to the data to set in the trusted application. @result A result code. See "Security Error Codes" (SecBase.h). Deprecated: SecKeychain is deprecated

func SecVerifyTransformCreate deprecated

func SecVerifyTransformCreate(key unsafe.Pointer, signature unsafe.Pointer, error_ unsafe.Pointer) unsafe.Pointer

Deprecated: SecTransform is no longer supported

func SessionCreate

func SessionCreate(flags SessionCreationFlags, attributes SessionAttributeBits) int

@function SessionCreate This (very specialized) function creates a security session. Upon completion, the new session contains the calling process (and none other). You cannot create a session for someone else, and cannot avoid being placed into the new session. This is (currently) the only call that changes a process's session membership. By default, a new bootstrap subset port is created for the calling process. The process acquires this new port as its bootstrap port, which all its children will inherit. If you happen to have created the subset port on your own, you can pass the sessionKeepCurrentBootstrap flag, and SessionCreate will use it. Note however that you cannot supersede a prior SessionCreate call that way; only a single SessionCreate call is allowed for each Session (however made). This call will discard any security information established for the calling process. In particular, any authorization handles acquired will become invalid, and so will any keychain related information. We recommend that you call SessionCreate before making any other security-related calls that establish rights of any kind, to the extent this is practical. Also, we strongly recommend that you do not perform security-related calls in any other threads while calling SessionCreate. @param flags Flags controlling how the session is created. @param attributes The set of attribute bits to set for the new session. Not all bits can be set this way. @result An OSStatus indicating success (errSecSuccess) or an error cause. errSessionInvalidAttributes -60501 Attempt to set invalid attribute bits errSessionAuthorizationDenied -60502 Attempt to re-initialize a session errSessionInvalidFlags -60011 Attempt to specify unsupported flag bits

func SessionGetInfo

func SessionGetInfo(session uint, sessionId *uint, attributes *SessionAttributeBits) int

@function SessionGetInfo Obtain information about a session. You can ask about any session whose identifier you know. Use the callerSecuritySession constant to ask about your own session (the one your process is in). @param session (input) The Session you are asking about. Can be one of the special constants defined above. @param sessionId (output/optional) The actual SecuritySessionId for the session you asked about. Will never be one of those constants. @param attributes (output/optional) Receives the attribute bits for the session. @result An OSStatus indicating success (errSecSuccess) or an error cause. errSessionInvalidId -60500 Invalid session id specified

func SymbolAvailable

func SymbolAvailable(symbol string) bool

SymbolAvailable reports whether the named C symbol was bound when the library loaded. Calling a generated wrapper whose symbol is unavailable dereferences a nil function variable and panics.

Types

type Acl_entry_id_t

type Acl_entry_id_t int64
const (
	ACL_FIRST_ENTRY Acl_entry_id_t = 0
	ACL_NEXT_ENTRY  Acl_entry_id_t = -1
	ACL_LAST_ENTRY  Acl_entry_id_t = -2
)

func (Acl_entry_id_t) String

func (e Acl_entry_id_t) String() string

type Acl_flag_t

type Acl_flag_t int64
const (
	ACL_FLAG_DEFER_INHERIT      Acl_flag_t = 1
	ACL_FLAG_NO_INHERIT         Acl_flag_t = 131072
	ACL_ENTRY_INHERITED         Acl_flag_t = 16
	ACL_ENTRY_FILE_INHERIT      Acl_flag_t = 32
	ACL_ENTRY_DIRECTORY_INHERIT Acl_flag_t = 64
	ACL_ENTRY_LIMIT_INHERIT     Acl_flag_t = 128
	ACL_ENTRY_ONLY_INHERIT      Acl_flag_t = 256
)

func (Acl_flag_t) String

func (e Acl_flag_t) String() string

type Acl_perm_t

type Acl_perm_t int64
const (
	ACL_READ_DATA           Acl_perm_t = 2
	ACL_LIST_DIRECTORY      Acl_perm_t = 2
	ACL_WRITE_DATA          Acl_perm_t = 4
	ACL_ADD_FILE            Acl_perm_t = 4
	ACL_EXECUTE             Acl_perm_t = 8
	ACL_SEARCH              Acl_perm_t = 8
	ACL_DELETE              Acl_perm_t = 16
	ACL_APPEND_DATA         Acl_perm_t = 32
	ACL_ADD_SUBDIRECTORY    Acl_perm_t = 32
	ACL_DELETE_CHILD        Acl_perm_t = 64
	ACL_READ_ATTRIBUTES     Acl_perm_t = 128
	ACL_WRITE_ATTRIBUTES    Acl_perm_t = 256
	ACL_READ_EXTATTRIBUTES  Acl_perm_t = 512
	ACL_WRITE_EXTATTRIBUTES Acl_perm_t = 1024
	ACL_READ_SECURITY       Acl_perm_t = 2048
	ACL_WRITE_SECURITY      Acl_perm_t = 4096
	ACL_CHANGE_OWNER        Acl_perm_t = 8192
	ACL_SYNCHRONIZE         Acl_perm_t = 1048576
)

func (Acl_perm_t) String

func (e Acl_perm_t) String() string

type Acl_tag_t

type Acl_tag_t int64
const (
	ACL_UNDEFINED_TAG  Acl_tag_t = 0
	ACL_EXTENDED_ALLOW Acl_tag_t = 1
	ACL_EXTENDED_DENY  Acl_tag_t = 2
)

func (Acl_tag_t) String

func (e Acl_tag_t) String() string

type Acl_type_t

type Acl_type_t int64
const (
	ACL_TYPE_EXTENDED Acl_type_t = 256
	ACL_TYPE_ACCESS   Acl_type_t = 0
	ACL_TYPE_DEFAULT  Acl_type_t = 1
	ACL_TYPE_AFS      Acl_type_t = 2
	ACL_TYPE_CODA     Acl_type_t = 3
	ACL_TYPE_NTFS     Acl_type_t = 4
	ACL_TYPE_NWFS     Acl_type_t = 5
)

func (Acl_type_t) String

func (e Acl_type_t) String() string

type AuthorizationExternalForm

type AuthorizationExternalForm struct {
	Bytes [32]int8
}

The external representation of an authorization reference.

type AuthorizationFlags

type AuthorizationFlags int64

The flags used to specify authorization options.

const (
	// An empty flag set that you use as a placeholder when you don’t want any of the other flags.
	KAuthorizationFlagDefaults AuthorizationFlags = 0
	// A flag that permits user interaction as needed.
	KAuthorizationFlagInteractionAllowed AuthorizationFlags = 1
	// A flag that permits the Security Server to attempt to grant the rights requested.
	KAuthorizationFlagExtendRights AuthorizationFlags = 2
	// A flag that permits the Security Server to grant rights on an individual basis.
	KAuthorizationFlagPartialRights AuthorizationFlags = 4
	// A flag that instructs the Security Server to revoke authorization.
	KAuthorizationFlagDestroyRights AuthorizationFlags = 8
	// A flag that instructs the Security Server to preauthorize the rights requested.
	KAuthorizationFlagPreAuthorize     AuthorizationFlags = 16
	KAuthorizationFlagSkipInternalAuth AuthorizationFlags = 512
	// Private flag. Do not use.
	KAuthorizationFlagNoData AuthorizationFlags = 1048576
)

func (AuthorizationFlags) String

func (e AuthorizationFlags) String() string

type AuthorizationItem

type AuthorizationItem struct {
	Name        string
	ValueLength uint
	Value       unsafe.Pointer
	Flags       uint
}

A structure containing information about an authorization right or the authorization environment.

type AuthorizationItemSet

type AuthorizationItemSet struct {
	Count uint
	Items *AuthorizationItem
}

A structure containing a set of authorization items.

type AuthorizationOpaqueRef

type AuthorizationOpaqueRef struct{}

@typedef AuthorizationRef Opaque reference to an authorization object. AuthorizationOpaqueRef is an opaque type.

type CEAccessDescription

type CEAccessDescription struct {
	AccessMethod   CssmData
	AccessLocation CE_GeneralName
}

C struct: __CE_AccessDescription

type CEAuthorityInfoAccess

type CEAuthorityInfoAccess struct {
	NumAccessDescriptions uint32
	AccessDescriptions    *CE_AccessDescription
}

C struct: __CE_AuthorityInfoAccess

type CEAuthorityKeyID

type CEAuthorityKeyID struct {
	KeyIdentifierPresent int32
	KeyIdentifier        CssmData
	GeneralNamesPresent  int32
	GeneralNames         *CE_GeneralNames
	SerialNumberPresent  int32
	SerialNumber         CssmData
}

C struct: __CE_AuthorityKeyID

type CEBasicConstraints

type CEBasicConstraints struct {
	CA                       int32
	PathLenConstraintPresent int32
	PathLenConstraint        uint32
}

C struct: __CE_BasicConstraints

type CECRLDistPointsSyntax

type CECRLDistPointsSyntax struct {
	NumDistPoints uint32
	DistPoints    *CE_CRLDistributionPoint
}

C struct: __CE_CRLDistPointsSyntax

type CECRLDistributionPoint

type CECRLDistributionPoint struct {
	DistPointName  *CE_DistributionPointName
	ReasonsPresent int32
	Reasons        uint8
	CrlIssuer      *CE_GeneralNames
}

C struct: __CE_CRLDistributionPoint

type CECertPolicies

type CECertPolicies struct {
	NumPolicies uint32
	Policies    *CE_PolicyInformation
}

C struct: __CE_CertPolicies

type CEDataAndType

type CEDataAndType struct {
	Type      __CE_DataType
	Extension unsafe.Pointer
	Critical  int32
}

C struct: __CE_DataAndType

type CEDistributionPointName

type CEDistributionPointName struct {
	NameType __CE_CrlDistributionPointNameType
	Dpn      unsafe.Pointer
}

C struct: __CE_DistributionPointName

type CEExtendedKeyUsage

type CEExtendedKeyUsage struct {
	NumPurposes uint32
	Purposes    *CssmData
}

C struct: __CE_ExtendedKeyUsage

type CEGeneralName

type CEGeneralName struct {
	NameType   __CE_GeneralNameType
	BerEncoded int32
	Name       CssmData
}

C struct: __CE_GeneralName

type CEGeneralNames

type CEGeneralNames struct {
	NumNames    uint32
	GeneralName *CE_GeneralName
}

C struct: __CE_GeneralNames

type CEGeneralSubtree

type CEGeneralSubtree struct {
	Base           *CE_GeneralNames
	Minimum        uint32
	MaximumPresent int32
	Maximum        uint32
}

C struct: __CE_GeneralSubtree

type CEGeneralSubtrees

type CEGeneralSubtrees struct {
	NumSubtrees uint32
	Subtrees    *CE_GeneralSubtree
}

C struct: __CE_GeneralSubtrees

type CEIssuingDistributionPoint

type CEIssuingDistributionPoint struct {
	DistPointName          *CE_DistributionPointName
	OnlyUserCertsPresent   int32
	OnlyUserCerts          int32
	OnlyCACertsPresent     int32
	OnlyCACerts            int32
	OnlySomeReasonsPresent int32
	OnlySomeReasons        uint8
	IndirectCrlPresent     int32
	IndirectCrl            int32
}

C struct: __CE_IssuingDistributionPoint

type CENameConstraints

type CENameConstraints struct {
	Permitted *CE_GeneralSubtrees
	Excluded  *CE_GeneralSubtrees
}

C struct: __CE_NameConstraints

type CEOtherName

type CEOtherName struct {
	TypeId CssmData
	Value  CssmData
}

C struct: __CE_OtherName

type CEPolicyConstraints

type CEPolicyConstraints struct {
	RequireExplicitPolicyPresent int32
	RequireExplicitPolicy        uint32
	InhibitPolicyMappingPresent  int32
	InhibitPolicyMapping         uint32
}

C struct: __CE_PolicyConstraints

type CEPolicyInformation

type CEPolicyInformation struct {
	CertPolicyId        CssmData
	NumPolicyQualifiers uint32
	PolicyQualifiers    *CE_PolicyQualifierInfo
}

C struct: __CE_PolicyInformation

type CEPolicyMapping

type CEPolicyMapping struct {
	IssuerDomainPolicy  CssmData
	SubjectDomainPolicy CssmData
}

C struct: __CE_PolicyMapping

type CEPolicyMappings

type CEPolicyMappings struct {
	NumPolicyMappings uint32
	PolicyMappings    *CE_PolicyMapping
}

C struct: __CE_PolicyMappings

type CEPolicyQualifierInfo

type CEPolicyQualifierInfo struct {
	PolicyQualifierId CssmData
	Qualifier         CssmData
}

C struct: __CE_PolicyQualifierInfo

type CEQCStatement

type CEQCStatement struct {
	StatementId   CssmData
	SemanticsInfo *CE_SemanticsInformation
	OtherInfo     *CssmData
}

C struct: __CE_QC_Statement

type CEQCStatements

type CEQCStatements struct {
	NumQCStatements uint32
	QcStatements    *CE_QC_Statement
}

C struct: __CE_QC_Statements

type CESemanticsInformation

type CESemanticsInformation struct {
	SemanticsIdentifier         *CssmData
	NameRegistrationAuthorities *CE_GeneralNames
}

C struct: __CE_SemanticsInformation

type CE_AccessDescription

type CE_AccessDescription = CEAccessDescription

CE_AccessDescription is an alias for __CE_AccessDescription (C typedef CE_AccessDescription).

type CE_AuthorityInfoAccess

type CE_AuthorityInfoAccess = CEAuthorityInfoAccess

CE_AuthorityInfoAccess is an alias for __CE_AuthorityInfoAccess (C typedef CE_AuthorityInfoAccess).

type CE_AuthorityKeyID

type CE_AuthorityKeyID = CEAuthorityKeyID

CE_AuthorityKeyID is an alias for __CE_AuthorityKeyID (C typedef CE_AuthorityKeyID).

type CE_BasicConstraints

type CE_BasicConstraints = CEBasicConstraints

CE_BasicConstraints is an alias for __CE_BasicConstraints (C typedef CE_BasicConstraints).

type CE_CRLDistPointsSyntax

type CE_CRLDistPointsSyntax = CECRLDistPointsSyntax

CE_CRLDistPointsSyntax is an alias for __CE_CRLDistPointsSyntax (C typedef CE_CRLDistPointsSyntax).

type CE_CRLDistributionPoint

type CE_CRLDistributionPoint = CECRLDistributionPoint

CE_CRLDistributionPoint is an alias for __CE_CRLDistributionPoint (C typedef CE_CRLDistributionPoint).

type CE_CertPolicies

type CE_CertPolicies = CECertPolicies

CE_CertPolicies is an alias for __CE_CertPolicies (C typedef CE_CertPolicies).

type CE_DataAndType

type CE_DataAndType = CEDataAndType

CE_DataAndType is an alias for __CE_DataAndType (C typedef CE_DataAndType).

type CE_DistributionPointName

type CE_DistributionPointName = CEDistributionPointName

CE_DistributionPointName is an alias for __CE_DistributionPointName (C typedef CE_DistributionPointName).

type CE_ExtendedKeyUsage

type CE_ExtendedKeyUsage = CEExtendedKeyUsage

CE_ExtendedKeyUsage is an alias for __CE_ExtendedKeyUsage (C typedef CE_ExtendedKeyUsage).

type CE_GeneralName

type CE_GeneralName = CEGeneralName

CE_GeneralName is an alias for __CE_GeneralName (C typedef CE_GeneralName).

type CE_GeneralNames

type CE_GeneralNames = CEGeneralNames

CE_GeneralNames is an alias for __CE_GeneralNames (C typedef CE_GeneralNames).

type CE_GeneralSubtree

type CE_GeneralSubtree = CEGeneralSubtree

CE_GeneralSubtree is an alias for __CE_GeneralSubtree (C typedef CE_GeneralSubtree).

type CE_GeneralSubtrees

type CE_GeneralSubtrees = CEGeneralSubtrees

CE_GeneralSubtrees is an alias for __CE_GeneralSubtrees (C typedef CE_GeneralSubtrees).

type CE_IssuingDistributionPoint

type CE_IssuingDistributionPoint = CEIssuingDistributionPoint

CE_IssuingDistributionPoint is an alias for __CE_IssuingDistributionPoint (C typedef CE_IssuingDistributionPoint).

type CE_NameConstraints

type CE_NameConstraints = CENameConstraints

CE_NameConstraints is an alias for __CE_NameConstraints (C typedef CE_NameConstraints).

type CE_OtherName

type CE_OtherName = CEOtherName

CE_OtherName is an alias for __CE_OtherName (C typedef CE_OtherName).

type CE_PolicyConstraints

type CE_PolicyConstraints = CEPolicyConstraints

CE_PolicyConstraints is an alias for __CE_PolicyConstraints (C typedef CE_PolicyConstraints).

type CE_PolicyInformation

type CE_PolicyInformation = CEPolicyInformation

CE_PolicyInformation is an alias for __CE_PolicyInformation (C typedef CE_PolicyInformation).

type CE_PolicyMapping

type CE_PolicyMapping = CEPolicyMapping

CE_PolicyMapping is an alias for __CE_PolicyMapping (C typedef CE_PolicyMapping).

type CE_PolicyMappings

type CE_PolicyMappings = CEPolicyMappings

CE_PolicyMappings is an alias for __CE_PolicyMappings (C typedef CE_PolicyMappings).

type CE_PolicyQualifierInfo

type CE_PolicyQualifierInfo = CEPolicyQualifierInfo

CE_PolicyQualifierInfo is an alias for __CE_PolicyQualifierInfo (C typedef CE_PolicyQualifierInfo).

type CE_QC_Statement

type CE_QC_Statement = CEQCStatement

CE_QC_Statement is an alias for __CE_QC_Statement (C typedef CE_QC_Statement).

type CE_QC_Statements

type CE_QC_Statements = CEQCStatements

CE_QC_Statements is an alias for __CE_QC_Statements (C typedef CE_QC_Statements).

type CE_SemanticsInformation

type CE_SemanticsInformation = CESemanticsInformation

CE_SemanticsInformation is an alias for __CE_SemanticsInformation (C typedef CE_SemanticsInformation).

type CMSCertificateChainMode

type CMSCertificateChainMode int64

Constants that can be set to specify what certificates to include in a signed message.

const (
	// Don’t include any certificates.
	KCMSCertificateNone CMSCertificateChainMode = 0
	// Only include signer certificates.
	KCMSCertificateSignerOnly CMSCertificateChainMode = 1
	// Include the signer certificate chain up to but not including the root certificate.
	KCMSCertificateChain CMSCertificateChainMode = 2
	// Include the entire signer certificate chain, including the root certificate.
	KCMSCertificateChainWithRoot       CMSCertificateChainMode = 3
	KCMSCertificateChainWithRootOrFail CMSCertificateChainMode = 4
)

func (CMSCertificateChainMode) String

func (e CMSCertificateChainMode) String() string

type CMSDecoder

type CMSDecoder struct{}

C struct: _CMSDecoder CMSDecoder is an opaque type.

type CMSEncoder

type CMSEncoder struct{}

C struct: _CMSEncoder CMSEncoder is an opaque type.

type CMSSignedAttributes

type CMSSignedAttributes int64

Optional attributes you can add to a signed message.

const (
	// No attributes.
	KCMSAttrNone CMSSignedAttributes = 0
	// Identify signature, encryption, and digest algorithms supported by the encoder.
	KCMSAttrSmimeCapabilities CMSSignedAttributes = 1
	// Indicate that the signing certificate included with the message is the preferred one for S/MIME encryption.
	KCMSAttrSmimeEncryptionKeyPrefs CMSSignedAttributes = 2
	// Indicate that the signing certificate included with the message is the preferred one for S/MIME encryption, but using an attribute object identifier (OID) preferred by Microsoft.
	KCMSAttrSmimeMSEncryptionKeyPrefs CMSSignedAttributes = 4
	// Include the signing time.
	KCMSAttrSigningTime CMSSignedAttributes = 8
	// Include Apple codesigning hash agility.
	KCMSAttrAppleCodesigningHashAgility CMSSignedAttributes = 16
	// Include Apple codesigning hash agility, version 2.
	KCMSAttrAppleCodesigningHashAgilityV2 CMSSignedAttributes = 32
	// Include the expiration time.
	KCMSAttrAppleExpirationTime CMSSignedAttributes = 64
)

func (CMSSignedAttributes) String

func (e CMSSignedAttributes) String() string

type CMSSignerStatus

type CMSSignerStatus int64

The constants that indicate the status of the signature and signer information in a signed message.

const (
	// The message was not signed.
	KCMSSignerUnsigned CMSSignerStatus = 0
	// The message was signed and both the signature and the signer certificate have been verified.
	KCMSSignerValid CMSSignerStatus = 1
	// The message was signed but has detached content. You must call the CMSDecoderSetDetachedContent function before ascertaining the signature status.
	KCMSSignerNeedsDetachedContent CMSSignerStatus = 2
	// The message was signed but the signature is invalid.
	KCMSSignerInvalidSignature CMSSignerStatus = 3
	// The message was signed but the signer’s certificate could not be verified.
	KCMSSignerInvalidCert CMSSignerStatus = 4
	// The specified value for the signer index (signerIndex parameter) is greater than the number of signers of the message minus one (signerIndex > (numSigners – 1)).
	KCMSSignerInvalidIndex CMSSignerStatus = 5
)

func (CMSSignerStatus) String

func (e CMSSignerStatus) String() string

type CSSM_ACCESS_CREDENTIALS

type CSSM_ACCESS_CREDENTIALS = CssmAccessCredentials

CSSM_ACCESS_CREDENTIALS is an alias for cssm_access_credentials (C typedef CSSM_ACCESS_CREDENTIALS).

type CSSM_ACCESS_CREDENTIALS_PTR

type CSSM_ACCESS_CREDENTIALS_PTR = *CssmAccessCredentials

CSSM_ACCESS_CREDENTIALS_PTR is an opaque pointer to cssm_access_credentials (C typedef CSSM_ACCESS_CREDENTIALS_PTR).

type CSSM_ACL_EDIT

type CSSM_ACL_EDIT = CssmAclEdit

CSSM_ACL_EDIT is an alias for cssm_acl_edit (C typedef CSSM_ACL_EDIT).

type CSSM_ACL_EDIT_PTR

type CSSM_ACL_EDIT_PTR = *CssmAclEdit

CSSM_ACL_EDIT_PTR is an opaque pointer to cssm_acl_edit (C typedef CSSM_ACL_EDIT_PTR).

type CSSM_ACL_ENTRY_INFO

type CSSM_ACL_ENTRY_INFO = CssmAclEntryInfo

CSSM_ACL_ENTRY_INFO is an alias for cssm_acl_entry_info (C typedef CSSM_ACL_ENTRY_INFO).

type CSSM_ACL_ENTRY_INFO_PTR

type CSSM_ACL_ENTRY_INFO_PTR = *CssmAclEntryInfo

CSSM_ACL_ENTRY_INFO_PTR is an opaque pointer to cssm_acl_entry_info (C typedef CSSM_ACL_ENTRY_INFO_PTR).

type CSSM_ACL_ENTRY_INPUT

type CSSM_ACL_ENTRY_INPUT = CssmAclEntryInput

CSSM_ACL_ENTRY_INPUT is an alias for cssm_acl_entry_input (C typedef CSSM_ACL_ENTRY_INPUT).

type CSSM_ACL_ENTRY_INPUT_PTR

type CSSM_ACL_ENTRY_INPUT_PTR = *CssmAclEntryInput

CSSM_ACL_ENTRY_INPUT_PTR is an opaque pointer to cssm_acl_entry_input (C typedef CSSM_ACL_ENTRY_INPUT_PTR).

type CSSM_ACL_ENTRY_PROTOTYPE

type CSSM_ACL_ENTRY_PROTOTYPE = CssmAclEntryPrototype

CSSM_ACL_ENTRY_PROTOTYPE is an alias for cssm_acl_entry_prototype (C typedef CSSM_ACL_ENTRY_PROTOTYPE).

type CSSM_ACL_ENTRY_PROTOTYPE_PTR

type CSSM_ACL_ENTRY_PROTOTYPE_PTR = *CssmAclEntryPrototype

CSSM_ACL_ENTRY_PROTOTYPE_PTR is an opaque pointer to cssm_acl_entry_prototype (C typedef CSSM_ACL_ENTRY_PROTOTYPE_PTR).

type CSSM_ACL_KEYCHAIN_PROMPT_SELECTOR

type CSSM_ACL_KEYCHAIN_PROMPT_SELECTOR = CssmAclKeychainPromptSelector

CSSM_ACL_KEYCHAIN_PROMPT_SELECTOR is an alias for cssm_acl_keychain_prompt_selector (C typedef CSSM_ACL_KEYCHAIN_PROMPT_SELECTOR).

type CSSM_ACL_OWNER_PROTOTYPE

type CSSM_ACL_OWNER_PROTOTYPE = CssmAclOwnerPrototype

CSSM_ACL_OWNER_PROTOTYPE is an alias for cssm_acl_owner_prototype (C typedef CSSM_ACL_OWNER_PROTOTYPE).

type CSSM_ACL_OWNER_PROTOTYPE_PTR

type CSSM_ACL_OWNER_PROTOTYPE_PTR = *CssmAclOwnerPrototype

CSSM_ACL_OWNER_PROTOTYPE_PTR is an opaque pointer to cssm_acl_owner_prototype (C typedef CSSM_ACL_OWNER_PROTOTYPE_PTR).

type CSSM_ACL_PROCESS_SUBJECT_SELECTOR

type CSSM_ACL_PROCESS_SUBJECT_SELECTOR = CssmAclProcessSubjectSelector

CSSM_ACL_PROCESS_SUBJECT_SELECTOR is an alias for cssm_acl_process_subject_selector (C typedef CSSM_ACL_PROCESS_SUBJECT_SELECTOR).

type CSSM_ACL_VALIDITY_PERIOD

type CSSM_ACL_VALIDITY_PERIOD = CssmAclValidityPeriod

CSSM_ACL_VALIDITY_PERIOD is an alias for cssm_acl_validity_period (C typedef CSSM_ACL_VALIDITY_PERIOD).

type CSSM_ACL_VALIDITY_PERIOD_PTR

type CSSM_ACL_VALIDITY_PERIOD_PTR = *CssmAclValidityPeriod

CSSM_ACL_VALIDITY_PERIOD_PTR is an opaque pointer to cssm_acl_validity_period (C typedef CSSM_ACL_VALIDITY_PERIOD_PTR).

type CSSM_APPLECSPDL_DB_CHANGE_PASSWORD_PARAMETERS

type CSSM_APPLECSPDL_DB_CHANGE_PASSWORD_PARAMETERS = CssmApplecspdlDbChangePasswordParameters

CSSM_APPLECSPDL_DB_CHANGE_PASSWORD_PARAMETERS is an alias for cssm_applecspdl_db_change_password_parameters (C typedef CSSM_APPLECSPDL_DB_CHANGE_PASSWORD_PARAMETERS).

type CSSM_APPLECSPDL_DB_CHANGE_PASSWORD_PARAMETERS_PTR

type CSSM_APPLECSPDL_DB_CHANGE_PASSWORD_PARAMETERS_PTR = *CssmApplecspdlDbChangePasswordParameters

CSSM_APPLECSPDL_DB_CHANGE_PASSWORD_PARAMETERS_PTR is an opaque pointer to cssm_applecspdl_db_change_password_parameters (C typedef CSSM_APPLECSPDL_DB_CHANGE_PASSWORD_PARAMETERS_PTR).

type CSSM_APPLECSPDL_DB_IS_LOCKED_PARAMETERS

type CSSM_APPLECSPDL_DB_IS_LOCKED_PARAMETERS = CssmApplecspdlDbIsLockedParameters

CSSM_APPLECSPDL_DB_IS_LOCKED_PARAMETERS is an alias for cssm_applecspdl_db_is_locked_parameters (C typedef CSSM_APPLECSPDL_DB_IS_LOCKED_PARAMETERS).

type CSSM_APPLECSPDL_DB_IS_LOCKED_PARAMETERS_PTR

type CSSM_APPLECSPDL_DB_IS_LOCKED_PARAMETERS_PTR = *CssmApplecspdlDbIsLockedParameters

CSSM_APPLECSPDL_DB_IS_LOCKED_PARAMETERS_PTR is an opaque pointer to cssm_applecspdl_db_is_locked_parameters (C typedef CSSM_APPLECSPDL_DB_IS_LOCKED_PARAMETERS_PTR).

type CSSM_APPLECSPDL_DB_SETTINGS_PARAMETERS

type CSSM_APPLECSPDL_DB_SETTINGS_PARAMETERS = CssmApplecspdlDbSettingsParameters

CSSM_APPLECSPDL_DB_SETTINGS_PARAMETERS is an alias for cssm_applecspdl_db_settings_parameters (C typedef CSSM_APPLECSPDL_DB_SETTINGS_PARAMETERS).

type CSSM_APPLECSPDL_DB_SETTINGS_PARAMETERS_PTR

type CSSM_APPLECSPDL_DB_SETTINGS_PARAMETERS_PTR = *CssmApplecspdlDbSettingsParameters

CSSM_APPLECSPDL_DB_SETTINGS_PARAMETERS_PTR is an opaque pointer to cssm_applecspdl_db_settings_parameters (C typedef CSSM_APPLECSPDL_DB_SETTINGS_PARAMETERS_PTR).

type CSSM_APPLEDL_OPEN_PARAMETERS

type CSSM_APPLEDL_OPEN_PARAMETERS = CssmAppledlOpenParameters

CSSM_APPLEDL_OPEN_PARAMETERS is an alias for cssm_appledl_open_parameters (C typedef CSSM_APPLEDL_OPEN_PARAMETERS).

type CSSM_APPLEDL_OPEN_PARAMETERS_PTR

type CSSM_APPLEDL_OPEN_PARAMETERS_PTR = *CssmAppledlOpenParameters

CSSM_APPLEDL_OPEN_PARAMETERS_PTR is an opaque pointer to cssm_appledl_open_parameters (C typedef CSSM_APPLEDL_OPEN_PARAMETERS_PTR).

type CSSM_APPLE_CL_CSR_REQUEST

type CSSM_APPLE_CL_CSR_REQUEST struct {
	SubjectNameX509   *CssmX509Name
	SignatureAlg      uint32
	SignatureOid      CssmData
	CspHand           int
	SubjectPublicKey  *CssmKey
	SubjectPrivateKey *CssmKey
	ChallengeString   string
}

type CSSM_APPLE_TP_ACTION_DATA

type CSSM_APPLE_TP_ACTION_DATA struct {
	Version     uint32
	ActionFlags uint32
}

type CSSM_APPLE_TP_CERT_REQUEST

type CSSM_APPLE_TP_CERT_REQUEST struct {
	CspHand          int
	ClHand           int
	SerialNumber     uint32
	NumSubjectNames  uint32
	SubjectNames     *CSSM_APPLE_TP_NAME_OID
	NumIssuerNames   uint32
	IssuerNames      *CSSM_APPLE_TP_NAME_OID
	IssuerNameX509   *CssmX509Name
	CertPublicKey    *CssmKey
	IssuerPrivateKey *CssmKey
	SignatureAlg     uint32
	SignatureOid     CssmData
	NotBefore        uint32
	NotAfter         uint32
	NumExtensions    uint32
	Extensions       *CE_DataAndType
	ChallengeString  string
}

type CSSM_APPLE_TP_CRL_OPTIONS

type CSSM_APPLE_TP_CRL_OPTIONS struct {
	Version  uint32
	CrlFlags uint32
	CrlStore *CssmDlDbHandle
}

type CSSM_APPLE_TP_NAME_OID

type CSSM_APPLE_TP_NAME_OID struct {
	String string
	Oid    *CssmData
}

type CSSM_APPLE_TP_SMIME_OPTIONS

type CSSM_APPLE_TP_SMIME_OPTIONS struct {
	Version        uint32
	IntendedUsage  uint16
	SenderEmailLen uint32
	SenderEmail    string
}

type CSSM_APPLE_TP_SSL_OPTIONS

type CSSM_APPLE_TP_SSL_OPTIONS struct {
	Version       uint32
	ServerNameLen uint32
	ServerName    string
	Flags         uint32
}

type CSSM_AUTHORIZATIONGROUP

type CSSM_AUTHORIZATIONGROUP = CssmAuthorizationgroup

CSSM_AUTHORIZATIONGROUP is an alias for cssm_authorizationgroup (C typedef CSSM_AUTHORIZATIONGROUP).

type CSSM_AUTHORIZATIONGROUP_PTR

type CSSM_AUTHORIZATIONGROUP_PTR = *CssmAuthorizationgroup

CSSM_AUTHORIZATIONGROUP_PTR is an opaque pointer to cssm_authorizationgroup (C typedef CSSM_AUTHORIZATIONGROUP_PTR).

type CSSM_BASE_CERTS

type CSSM_BASE_CERTS = CssmBaseCerts

CSSM_BASE_CERTS is an alias for cssm_base_certs (C typedef CSSM_BASE_CERTS).

type CSSM_BASE_CERTS_PTR

type CSSM_BASE_CERTS_PTR = *CssmBaseCerts

CSSM_BASE_CERTS_PTR is an opaque pointer to cssm_base_certs (C typedef CSSM_BASE_CERTS_PTR).

type CSSM_CERTGROUP

type CSSM_CERTGROUP = CssmCertgroup

CSSM_CERTGROUP is an alias for cssm_certgroup (C typedef CSSM_CERTGROUP).

type CSSM_CERTGROUP_PTR

type CSSM_CERTGROUP_PTR = *CssmCertgroup

CSSM_CERTGROUP_PTR is an opaque pointer to cssm_certgroup (C typedef CSSM_CERTGROUP_PTR).

type CSSM_CERT_BUNDLE

type CSSM_CERT_BUNDLE = CssmCertBundle

CSSM_CERT_BUNDLE is an alias for cssm_cert_bundle (C typedef CSSM_CERT_BUNDLE).

type CSSM_CERT_BUNDLE_HEADER

type CSSM_CERT_BUNDLE_HEADER = CssmCertBundleHeader

CSSM_CERT_BUNDLE_HEADER is an alias for cssm_cert_bundle_header (C typedef CSSM_CERT_BUNDLE_HEADER).

type CSSM_CERT_BUNDLE_HEADER_PTR

type CSSM_CERT_BUNDLE_HEADER_PTR = *CssmCertBundleHeader

CSSM_CERT_BUNDLE_HEADER_PTR is an opaque pointer to cssm_cert_bundle_header (C typedef CSSM_CERT_BUNDLE_HEADER_PTR).

type CSSM_CERT_BUNDLE_PTR

type CSSM_CERT_BUNDLE_PTR = *CssmCertBundle

CSSM_CERT_BUNDLE_PTR is an opaque pointer to cssm_cert_bundle (C typedef CSSM_CERT_BUNDLE_PTR).

type CSSM_CERT_PAIR

type CSSM_CERT_PAIR = CssmCertPair

CSSM_CERT_PAIR is an alias for cssm_cert_pair (C typedef CSSM_CERT_PAIR).

type CSSM_CERT_PAIR_PTR

type CSSM_CERT_PAIR_PTR = *CssmCertPair

CSSM_CERT_PAIR_PTR is an opaque pointer to cssm_cert_pair (C typedef CSSM_CERT_PAIR_PTR).

type CSSM_CONTEXT

type CSSM_CONTEXT = CssmContext

CSSM_CONTEXT is an alias for cssm_context (C typedef CSSM_CONTEXT).

type CSSM_CONTEXT_ATTRIBUTE

type CSSM_CONTEXT_ATTRIBUTE = CssmContextAttribute

CSSM_CONTEXT_ATTRIBUTE is an alias for cssm_context_attribute (C typedef CSSM_CONTEXT_ATTRIBUTE).

type CSSM_CONTEXT_ATTRIBUTE_PTR

type CSSM_CONTEXT_ATTRIBUTE_PTR = *CssmContextAttribute

CSSM_CONTEXT_ATTRIBUTE_PTR is an opaque pointer to cssm_context_attribute (C typedef CSSM_CONTEXT_ATTRIBUTE_PTR).

type CSSM_CONTEXT_PTR

type CSSM_CONTEXT_PTR = *CssmContext

CSSM_CONTEXT_PTR is an opaque pointer to cssm_context (C typedef CSSM_CONTEXT_PTR).

type CSSM_CRLGROUP

type CSSM_CRLGROUP = CssmCrlgroup

CSSM_CRLGROUP is an alias for cssm_crlgroup (C typedef CSSM_CRLGROUP).

type CSSM_CRLGROUP_PTR

type CSSM_CRLGROUP_PTR = *CssmCrlgroup

CSSM_CRLGROUP_PTR is an opaque pointer to cssm_crlgroup (C typedef CSSM_CRLGROUP_PTR).

type CSSM_CRL_PAIR

type CSSM_CRL_PAIR = CssmCrlPair

CSSM_CRL_PAIR is an alias for cssm_crl_pair (C typedef CSSM_CRL_PAIR).

type CSSM_CRL_PAIR_PTR

type CSSM_CRL_PAIR_PTR = *CssmCrlPair

CSSM_CRL_PAIR_PTR is an opaque pointer to cssm_crl_pair (C typedef CSSM_CRL_PAIR_PTR).

type CSSM_CRYPTO_DATA

type CSSM_CRYPTO_DATA = CssmCryptoData

CSSM_CRYPTO_DATA is an alias for cssm_crypto_data (C typedef CSSM_CRYPTO_DATA).

type CSSM_CRYPTO_DATA_PTR

type CSSM_CRYPTO_DATA_PTR = *CssmCryptoData

CSSM_CRYPTO_DATA_PTR is an opaque pointer to cssm_crypto_data (C typedef CSSM_CRYPTO_DATA_PTR).

type CSSM_CSP_OPERATIONAL_STATISTICS

type CSSM_CSP_OPERATIONAL_STATISTICS = CssmCspOperationalStatistics

CSSM_CSP_OPERATIONAL_STATISTICS is an alias for cssm_csp_operational_statistics (C typedef CSSM_CSP_OPERATIONAL_STATISTICS).

type CSSM_CSP_OPERATIONAL_STATISTICS_PTR

type CSSM_CSP_OPERATIONAL_STATISTICS_PTR = *CssmCspOperationalStatistics

CSSM_CSP_OPERATIONAL_STATISTICS_PTR is an opaque pointer to cssm_csp_operational_statistics (C typedef CSSM_CSP_OPERATIONAL_STATISTICS_PTR).

type CSSM_DATE

type CSSM_DATE = CssmDate

CSSM_DATE is an alias for cssm_date (C typedef CSSM_DATE).

type CSSM_DATE_PTR

type CSSM_DATE_PTR = *CssmDate

CSSM_DATE_PTR is an opaque pointer to cssm_date (C typedef CSSM_DATE_PTR).

type CSSM_DBINFO

type CSSM_DBINFO = CssmDbinfo

CSSM_DBINFO is an alias for cssm_dbinfo (C typedef CSSM_DBINFO).

type CSSM_DBINFO_PTR

type CSSM_DBINFO_PTR = *CssmDbinfo

CSSM_DBINFO_PTR is an opaque pointer to cssm_dbinfo (C typedef CSSM_DBINFO_PTR).

type CSSM_DB_ATTRIBUTE_DATA

type CSSM_DB_ATTRIBUTE_DATA = CssmDbAttributeData

CSSM_DB_ATTRIBUTE_DATA is an alias for cssm_db_attribute_data (C typedef CSSM_DB_ATTRIBUTE_DATA).

type CSSM_DB_ATTRIBUTE_DATA_PTR

type CSSM_DB_ATTRIBUTE_DATA_PTR = *CssmDbAttributeData

CSSM_DB_ATTRIBUTE_DATA_PTR is an opaque pointer to cssm_db_attribute_data (C typedef CSSM_DB_ATTRIBUTE_DATA_PTR).

type CSSM_DB_ATTRIBUTE_INFO

type CSSM_DB_ATTRIBUTE_INFO = CssmDbAttributeInfo

CSSM_DB_ATTRIBUTE_INFO is an alias for cssm_db_attribute_info (C typedef CSSM_DB_ATTRIBUTE_INFO).

type CSSM_DB_ATTRIBUTE_INFO_PTR

type CSSM_DB_ATTRIBUTE_INFO_PTR = *CssmDbAttributeInfo

CSSM_DB_ATTRIBUTE_INFO_PTR is an opaque pointer to cssm_db_attribute_info (C typedef CSSM_DB_ATTRIBUTE_INFO_PTR).

type CSSM_DB_INDEX_INFO

type CSSM_DB_INDEX_INFO = CssmDbIndexInfo

CSSM_DB_INDEX_INFO is an alias for cssm_db_index_info (C typedef CSSM_DB_INDEX_INFO).

type CSSM_DB_INDEX_INFO_PTR

type CSSM_DB_INDEX_INFO_PTR = *CssmDbIndexInfo

CSSM_DB_INDEX_INFO_PTR is an opaque pointer to cssm_db_index_info (C typedef CSSM_DB_INDEX_INFO_PTR).

type CSSM_DB_PARSING_MODULE_INFO

type CSSM_DB_PARSING_MODULE_INFO = CssmDbParsingModuleInfo

CSSM_DB_PARSING_MODULE_INFO is an alias for cssm_db_parsing_module_info (C typedef CSSM_DB_PARSING_MODULE_INFO).

type CSSM_DB_PARSING_MODULE_INFO_PTR

type CSSM_DB_PARSING_MODULE_INFO_PTR = *CssmDbParsingModuleInfo

CSSM_DB_PARSING_MODULE_INFO_PTR is an opaque pointer to cssm_db_parsing_module_info (C typedef CSSM_DB_PARSING_MODULE_INFO_PTR).

type CSSM_DB_RECORD_ATTRIBUTE_DATA

type CSSM_DB_RECORD_ATTRIBUTE_DATA = CssmDbRecordAttributeData

CSSM_DB_RECORD_ATTRIBUTE_DATA is an alias for cssm_db_record_attribute_data (C typedef CSSM_DB_RECORD_ATTRIBUTE_DATA).

type CSSM_DB_RECORD_ATTRIBUTE_DATA_PTR

type CSSM_DB_RECORD_ATTRIBUTE_DATA_PTR = *CssmDbRecordAttributeData

CSSM_DB_RECORD_ATTRIBUTE_DATA_PTR is an opaque pointer to cssm_db_record_attribute_data (C typedef CSSM_DB_RECORD_ATTRIBUTE_DATA_PTR).

type CSSM_DB_RECORD_ATTRIBUTE_INFO

type CSSM_DB_RECORD_ATTRIBUTE_INFO = CssmDbRecordAttributeInfo

CSSM_DB_RECORD_ATTRIBUTE_INFO is an alias for cssm_db_record_attribute_info (C typedef CSSM_DB_RECORD_ATTRIBUTE_INFO).

type CSSM_DB_RECORD_ATTRIBUTE_INFO_PTR

type CSSM_DB_RECORD_ATTRIBUTE_INFO_PTR = *CssmDbRecordAttributeInfo

CSSM_DB_RECORD_ATTRIBUTE_INFO_PTR is an opaque pointer to cssm_db_record_attribute_info (C typedef CSSM_DB_RECORD_ATTRIBUTE_INFO_PTR).

type CSSM_DB_RECORD_INDEX_INFO

type CSSM_DB_RECORD_INDEX_INFO = CssmDbRecordIndexInfo

CSSM_DB_RECORD_INDEX_INFO is an alias for cssm_db_record_index_info (C typedef CSSM_DB_RECORD_INDEX_INFO).

type CSSM_DB_RECORD_INDEX_INFO_PTR

type CSSM_DB_RECORD_INDEX_INFO_PTR = *CssmDbRecordIndexInfo

CSSM_DB_RECORD_INDEX_INFO_PTR is an opaque pointer to cssm_db_record_index_info (C typedef CSSM_DB_RECORD_INDEX_INFO_PTR).

type CSSM_DB_SCHEMA_ATTRIBUTE_INFO

type CSSM_DB_SCHEMA_ATTRIBUTE_INFO = CssmDbSchemaAttributeInfo

CSSM_DB_SCHEMA_ATTRIBUTE_INFO is an alias for cssm_db_schema_attribute_info (C typedef CSSM_DB_SCHEMA_ATTRIBUTE_INFO).

type CSSM_DB_SCHEMA_ATTRIBUTE_INFO_PTR

type CSSM_DB_SCHEMA_ATTRIBUTE_INFO_PTR = *CssmDbSchemaAttributeInfo

CSSM_DB_SCHEMA_ATTRIBUTE_INFO_PTR is an opaque pointer to cssm_db_schema_attribute_info (C typedef CSSM_DB_SCHEMA_ATTRIBUTE_INFO_PTR).

type CSSM_DB_SCHEMA_INDEX_INFO

type CSSM_DB_SCHEMA_INDEX_INFO = CssmDbSchemaIndexInfo

CSSM_DB_SCHEMA_INDEX_INFO is an alias for cssm_db_schema_index_info (C typedef CSSM_DB_SCHEMA_INDEX_INFO).

type CSSM_DB_SCHEMA_INDEX_INFO_PTR

type CSSM_DB_SCHEMA_INDEX_INFO_PTR = *CssmDbSchemaIndexInfo

CSSM_DB_SCHEMA_INDEX_INFO_PTR is an opaque pointer to cssm_db_schema_index_info (C typedef CSSM_DB_SCHEMA_INDEX_INFO_PTR).

type CSSM_DB_UNIQUE_RECORD

type CSSM_DB_UNIQUE_RECORD = CssmDbUniqueRecord

CSSM_DB_UNIQUE_RECORD is an alias for cssm_db_unique_record (C typedef CSSM_DB_UNIQUE_RECORD).

type CSSM_DB_UNIQUE_RECORD_PTR

type CSSM_DB_UNIQUE_RECORD_PTR = *CssmDbUniqueRecord

CSSM_DB_UNIQUE_RECORD_PTR is an opaque pointer to cssm_db_unique_record (C typedef CSSM_DB_UNIQUE_RECORD_PTR).

type CSSM_DL_DB_HANDLE

type CSSM_DL_DB_HANDLE = CssmDlDbHandle

CSSM_DL_DB_HANDLE is an alias for cssm_dl_db_handle (C typedef CSSM_DL_DB_HANDLE).

type CSSM_DL_DB_HANDLE_PTR

type CSSM_DL_DB_HANDLE_PTR = *CssmDlDbHandle

CSSM_DL_DB_HANDLE_PTR is an opaque pointer to cssm_dl_db_handle (C typedef CSSM_DL_DB_HANDLE_PTR).

type CSSM_DL_DB_LIST

type CSSM_DL_DB_LIST = CssmDlDbList

CSSM_DL_DB_LIST is an alias for cssm_dl_db_list (C typedef CSSM_DL_DB_LIST).

type CSSM_DL_DB_LIST_PTR

type CSSM_DL_DB_LIST_PTR = *CssmDlDbList

CSSM_DL_DB_LIST_PTR is an opaque pointer to cssm_dl_db_list (C typedef CSSM_DL_DB_LIST_PTR).

type CSSM_DL_PKCS11_ATTRIBUTE

type CSSM_DL_PKCS11_ATTRIBUTE = *CssmDlPkcs11Attributes

CSSM_DL_PKCS11_ATTRIBUTE is an opaque pointer to cssm_dl_pkcs11_attributes (C typedef CSSM_DL_PKCS11_ATTRIBUTE).

type CSSM_DL_PKCS11_ATTRIBUTE_PTR

type CSSM_DL_PKCS11_ATTRIBUTE_PTR = *CssmDlPkcs11Attributes

CSSM_DL_PKCS11_ATTRIBUTE_PTR is an opaque pointer to cssm_dl_pkcs11_attributes (C typedef CSSM_DL_PKCS11_ATTRIBUTE_PTR).

type CSSM_ENCODED_CERT

type CSSM_ENCODED_CERT = CssmEncodedCert

CSSM_ENCODED_CERT is an alias for cssm_encoded_cert (C typedef CSSM_ENCODED_CERT).

type CSSM_ENCODED_CERT_PTR

type CSSM_ENCODED_CERT_PTR = *CssmEncodedCert

CSSM_ENCODED_CERT_PTR is an opaque pointer to cssm_encoded_cert (C typedef CSSM_ENCODED_CERT_PTR).

type CSSM_ENCODED_CRL

type CSSM_ENCODED_CRL = CssmEncodedCrl

CSSM_ENCODED_CRL is an alias for cssm_encoded_crl (C typedef CSSM_ENCODED_CRL).

type CSSM_ENCODED_CRL_PTR

type CSSM_ENCODED_CRL_PTR = *CssmEncodedCrl

CSSM_ENCODED_CRL_PTR is an opaque pointer to cssm_encoded_crl (C typedef CSSM_ENCODED_CRL_PTR).

type CSSM_EVIDENCE

type CSSM_EVIDENCE = CssmEvidence

CSSM_EVIDENCE is an alias for cssm_evidence (C typedef CSSM_EVIDENCE).

type CSSM_EVIDENCE_PTR

type CSSM_EVIDENCE_PTR = *CssmEvidence

CSSM_EVIDENCE_PTR is an opaque pointer to cssm_evidence (C typedef CSSM_EVIDENCE_PTR).

type CSSM_FIELD

type CSSM_FIELD = CssmField

CSSM_FIELD is an alias for cssm_field (C typedef CSSM_FIELD).

type CSSM_FIELDGROUP

type CSSM_FIELDGROUP = CssmFieldgroup

CSSM_FIELDGROUP is an alias for cssm_fieldgroup (C typedef CSSM_FIELDGROUP).

type CSSM_FIELDGROUP_PTR

type CSSM_FIELDGROUP_PTR = *CssmFieldgroup

CSSM_FIELDGROUP_PTR is an opaque pointer to cssm_fieldgroup (C typedef CSSM_FIELDGROUP_PTR).

type CSSM_FIELD_PTR

type CSSM_FIELD_PTR = *CssmField

CSSM_FIELD_PTR is an opaque pointer to cssm_field (C typedef CSSM_FIELD_PTR).

type CSSM_FUNC_NAME_ADDR

type CSSM_FUNC_NAME_ADDR = CssmFuncNameAddr

CSSM_FUNC_NAME_ADDR is an alias for cssm_func_name_addr (C typedef CSSM_FUNC_NAME_ADDR).

type CSSM_FUNC_NAME_ADDR_PTR

type CSSM_FUNC_NAME_ADDR_PTR = *CssmFuncNameAddr

CSSM_FUNC_NAME_ADDR_PTR is an opaque pointer to cssm_func_name_addr (C typedef CSSM_FUNC_NAME_ADDR_PTR).

type CSSM_GUID

type CSSM_GUID = CssmGuid

CSSM_GUID is an alias for cssm_guid (C typedef CSSM_GUID).

type CSSM_GUID_PTR

type CSSM_GUID_PTR = *CssmGuid

CSSM_GUID_PTR is an opaque pointer to cssm_guid (C typedef CSSM_GUID_PTR).

type CSSM_KEA_DERIVE_PARAMS

type CSSM_KEA_DERIVE_PARAMS = CssmKeaDeriveParams

CSSM_KEA_DERIVE_PARAMS is an alias for cssm_kea_derive_params (C typedef CSSM_KEA_DERIVE_PARAMS).

type CSSM_KEA_DERIVE_PARAMS_PTR

type CSSM_KEA_DERIVE_PARAMS_PTR = *CssmKeaDeriveParams

CSSM_KEA_DERIVE_PARAMS_PTR is an opaque pointer to cssm_kea_derive_params (C typedef CSSM_KEA_DERIVE_PARAMS_PTR).

type CSSM_KEY

type CSSM_KEY = CssmKey

CSSM_KEY is an alias for cssm_key (C typedef CSSM_KEY).

type CSSM_KEYHEADER

type CSSM_KEYHEADER = CssmKeyheader

CSSM_KEYHEADER is an alias for cssm_keyheader (C typedef CSSM_KEYHEADER).

type CSSM_KEYHEADER_PTR

type CSSM_KEYHEADER_PTR = *CssmKeyheader

CSSM_KEYHEADER_PTR is an opaque pointer to cssm_keyheader (C typedef CSSM_KEYHEADER_PTR).

type CSSM_KEY_PTR

type CSSM_KEY_PTR = *CssmKey

CSSM_KEY_PTR is an opaque pointer to cssm_key (C typedef CSSM_KEY_PTR).

type CSSM_KEY_SIZE

type CSSM_KEY_SIZE = CssmKeySize

CSSM_KEY_SIZE is an alias for cssm_key_size (C typedef CSSM_KEY_SIZE).

type CSSM_KEY_SIZE_PTR

type CSSM_KEY_SIZE_PTR = *CssmKeySize

CSSM_KEY_SIZE_PTR is an opaque pointer to cssm_key_size (C typedef CSSM_KEY_SIZE_PTR).

type CSSM_KRSUBSERVICE

type CSSM_KRSUBSERVICE = CssmKrsubservice

CSSM_KRSUBSERVICE is an alias for cssm_krsubservice (C typedef CSSM_KRSUBSERVICE).

type CSSM_KRSUBSERVICE_PTR

type CSSM_KRSUBSERVICE_PTR = *CssmKrsubservice

CSSM_KRSUBSERVICE_PTR is an opaque pointer to cssm_krsubservice (C typedef CSSM_KRSUBSERVICE_PTR).

type CSSM_KR_NAME

type CSSM_KR_NAME = CssmKrName

CSSM_KR_NAME is an alias for cssm_kr_name (C typedef CSSM_KR_NAME).

type CSSM_KR_POLICY_INFO

type CSSM_KR_POLICY_INFO = CssmKrPolicyInfo

CSSM_KR_POLICY_INFO is an alias for cssm_kr_policy_info (C typedef CSSM_KR_POLICY_INFO).

type CSSM_KR_POLICY_INFO_PTR

type CSSM_KR_POLICY_INFO_PTR = *CssmKrPolicyInfo

CSSM_KR_POLICY_INFO_PTR is an opaque pointer to cssm_kr_policy_info (C typedef CSSM_KR_POLICY_INFO_PTR).

type CSSM_KR_POLICY_LIST_ITEM

type CSSM_KR_POLICY_LIST_ITEM = CssmKrPolicyListItem

CSSM_KR_POLICY_LIST_ITEM is an alias for cssm_kr_policy_list_item (C typedef CSSM_KR_POLICY_LIST_ITEM).

type CSSM_KR_POLICY_LIST_ITEM_PTR

type CSSM_KR_POLICY_LIST_ITEM_PTR = *CssmKrPolicyListItem

CSSM_KR_POLICY_LIST_ITEM_PTR is an opaque pointer to cssm_kr_policy_list_item (C typedef CSSM_KR_POLICY_LIST_ITEM_PTR).

type CSSM_KR_PROFILE

type CSSM_KR_PROFILE = CssmKrProfile

CSSM_KR_PROFILE is an alias for cssm_kr_profile (C typedef CSSM_KR_PROFILE).

type CSSM_KR_PROFILE_PTR

type CSSM_KR_PROFILE_PTR = *CssmKrProfile

CSSM_KR_PROFILE_PTR is an opaque pointer to cssm_kr_profile (C typedef CSSM_KR_PROFILE_PTR).

type CSSM_KR_WRAPPEDPRODUCT_INFO

type CSSM_KR_WRAPPEDPRODUCT_INFO = CssmKrWrappedproductinfo

CSSM_KR_WRAPPEDPRODUCT_INFO is an alias for cssm_kr_wrappedproductinfo (C typedef CSSM_KR_WRAPPEDPRODUCT_INFO).

type CSSM_KR_WRAPPEDPRODUCT_INFO_PTR

type CSSM_KR_WRAPPEDPRODUCT_INFO_PTR = *CssmKrWrappedproductinfo

CSSM_KR_WRAPPEDPRODUCT_INFO_PTR is an opaque pointer to cssm_kr_wrappedproductinfo (C typedef CSSM_KR_WRAPPEDPRODUCT_INFO_PTR).

type CSSM_LIST

type CSSM_LIST = CssmList

CSSM_LIST is an alias for cssm_list (C typedef CSSM_LIST).

type CSSM_LIST_ELEMENT

type CSSM_LIST_ELEMENT = CssmListElement

CSSM_LIST_ELEMENT is an alias for cssm_list_element (C typedef CSSM_LIST_ELEMENT).

type CSSM_LIST_ELEMENT_PTR

type CSSM_LIST_ELEMENT_PTR = *CssmListElement

CSSM_LIST_ELEMENT_PTR is an opaque pointer to cssm_list_element (C typedef CSSM_LIST_ELEMENT_PTR).

type CSSM_LIST_PTR

type CSSM_LIST_PTR = *CssmList

CSSM_LIST_PTR is an opaque pointer to cssm_list (C typedef CSSM_LIST_PTR).

type CSSM_MANAGER_EVENT_NOTIFICATION

type CSSM_MANAGER_EVENT_NOTIFICATION = CssmManagerEventNotification

CSSM_MANAGER_EVENT_NOTIFICATION is an alias for cssm_manager_event_notification (C typedef CSSM_MANAGER_EVENT_NOTIFICATION).

type CSSM_MANAGER_EVENT_NOTIFICATION_PTR

type CSSM_MANAGER_EVENT_NOTIFICATION_PTR = *CssmManagerEventNotification

CSSM_MANAGER_EVENT_NOTIFICATION_PTR is an opaque pointer to cssm_manager_event_notification (C typedef CSSM_MANAGER_EVENT_NOTIFICATION_PTR).

type CSSM_MANAGER_REGISTRATION_INFO

type CSSM_MANAGER_REGISTRATION_INFO = CssmManagerRegistrationInfo

CSSM_MANAGER_REGISTRATION_INFO is an alias for cssm_manager_registration_info (C typedef CSSM_MANAGER_REGISTRATION_INFO).

type CSSM_MANAGER_REGISTRATION_INFO_PTR

type CSSM_MANAGER_REGISTRATION_INFO_PTR = *CssmManagerRegistrationInfo

CSSM_MANAGER_REGISTRATION_INFO_PTR is an opaque pointer to cssm_manager_registration_info (C typedef CSSM_MANAGER_REGISTRATION_INFO_PTR).

type CSSM_MEMORY_FUNCS

type CSSM_MEMORY_FUNCS = CssmMemoryFuncs

CSSM_MEMORY_FUNCS is an alias for cssm_memory_funcs (C typedef CSSM_MEMORY_FUNCS).

type CSSM_MEMORY_FUNCS_PTR

type CSSM_MEMORY_FUNCS_PTR = *CssmMemoryFuncs

CSSM_MEMORY_FUNCS_PTR is an opaque pointer to cssm_memory_funcs (C typedef CSSM_MEMORY_FUNCS_PTR).

type CSSM_MODULE_FUNCS

type CSSM_MODULE_FUNCS = CssmModuleFuncs

CSSM_MODULE_FUNCS is an alias for cssm_module_funcs (C typedef CSSM_MODULE_FUNCS).

type CSSM_MODULE_FUNCS_PTR

type CSSM_MODULE_FUNCS_PTR = *CssmModuleFuncs

CSSM_MODULE_FUNCS_PTR is an opaque pointer to cssm_module_funcs (C typedef CSSM_MODULE_FUNCS_PTR).

type CSSM_NAME_LIST

type CSSM_NAME_LIST = CssmNameList

CSSM_NAME_LIST is an alias for cssm_name_list (C typedef CSSM_NAME_LIST).

type CSSM_NAME_LIST_PTR

type CSSM_NAME_LIST_PTR = *CssmNameList

CSSM_NAME_LIST_PTR is an opaque pointer to cssm_name_list (C typedef CSSM_NAME_LIST_PTR).

type CSSM_NET_ADDRESS

type CSSM_NET_ADDRESS = CssmNetAddress

CSSM_NET_ADDRESS is an alias for cssm_net_address (C typedef CSSM_NET_ADDRESS).

type CSSM_NET_ADDRESS_PTR

type CSSM_NET_ADDRESS_PTR = *CssmNetAddress

CSSM_NET_ADDRESS_PTR is an opaque pointer to cssm_net_address (C typedef CSSM_NET_ADDRESS_PTR).

type CSSM_PARSED_CERT

type CSSM_PARSED_CERT = CssmParsedCert

CSSM_PARSED_CERT is an alias for cssm_parsed_cert (C typedef CSSM_PARSED_CERT).

type CSSM_PARSED_CERT_PTR

type CSSM_PARSED_CERT_PTR = *CssmParsedCert

CSSM_PARSED_CERT_PTR is an opaque pointer to cssm_parsed_cert (C typedef CSSM_PARSED_CERT_PTR).

type CSSM_PARSED_CRL

type CSSM_PARSED_CRL = CssmParsedCrl

CSSM_PARSED_CRL is an alias for cssm_parsed_crl (C typedef CSSM_PARSED_CRL).

type CSSM_PARSED_CRL_PTR

type CSSM_PARSED_CRL_PTR = *CssmParsedCrl

CSSM_PARSED_CRL_PTR is an opaque pointer to cssm_parsed_crl (C typedef CSSM_PARSED_CRL_PTR).

type CSSM_PKCS1_OAEP_PARAMS

type CSSM_PKCS1_OAEP_PARAMS = CssmPkcs1OaepParams

CSSM_PKCS1_OAEP_PARAMS is an alias for cssm_pkcs1_oaep_params (C typedef CSSM_PKCS1_OAEP_PARAMS).

type CSSM_PKCS1_OAEP_PARAMS_PTR

type CSSM_PKCS1_OAEP_PARAMS_PTR = *CssmPkcs1OaepParams

CSSM_PKCS1_OAEP_PARAMS_PTR is an opaque pointer to cssm_pkcs1_oaep_params (C typedef CSSM_PKCS1_OAEP_PARAMS_PTR).

type CSSM_PKCS5_PBKDF1_PARAMS

type CSSM_PKCS5_PBKDF1_PARAMS = CssmPkcs5Pbkdf1Params

CSSM_PKCS5_PBKDF1_PARAMS is an alias for cssm_pkcs5_pbkdf1_params (C typedef CSSM_PKCS5_PBKDF1_PARAMS).

type CSSM_PKCS5_PBKDF1_PARAMS_PTR

type CSSM_PKCS5_PBKDF1_PARAMS_PTR = *CssmPkcs5Pbkdf1Params

CSSM_PKCS5_PBKDF1_PARAMS_PTR is an opaque pointer to cssm_pkcs5_pbkdf1_params (C typedef CSSM_PKCS5_PBKDF1_PARAMS_PTR).

type CSSM_PKCS5_PBKDF2_PARAMS

type CSSM_PKCS5_PBKDF2_PARAMS = CssmPkcs5Pbkdf2Params

CSSM_PKCS5_PBKDF2_PARAMS is an alias for cssm_pkcs5_pbkdf2_params (C typedef CSSM_PKCS5_PBKDF2_PARAMS).

type CSSM_PKCS5_PBKDF2_PARAMS_PTR

type CSSM_PKCS5_PBKDF2_PARAMS_PTR = *CssmPkcs5Pbkdf2Params

CSSM_PKCS5_PBKDF2_PARAMS_PTR is an opaque pointer to cssm_pkcs5_pbkdf2_params (C typedef CSSM_PKCS5_PBKDF2_PARAMS_PTR).

type CSSM_QUERY

type CSSM_QUERY = CssmQuery

CSSM_QUERY is an alias for cssm_query (C typedef CSSM_QUERY).

type CSSM_QUERY_LIMITS

type CSSM_QUERY_LIMITS = CssmQueryLimits

CSSM_QUERY_LIMITS is an alias for cssm_query_limits (C typedef CSSM_QUERY_LIMITS).

type CSSM_QUERY_LIMITS_PTR

type CSSM_QUERY_LIMITS_PTR = *CssmQueryLimits

CSSM_QUERY_LIMITS_PTR is an opaque pointer to cssm_query_limits (C typedef CSSM_QUERY_LIMITS_PTR).

type CSSM_QUERY_PTR

type CSSM_QUERY_PTR = *CssmQuery

CSSM_QUERY_PTR is an opaque pointer to cssm_query (C typedef CSSM_QUERY_PTR).

type CSSM_QUERY_SIZE_DATA

type CSSM_QUERY_SIZE_DATA = CssmQuerySizeData

CSSM_QUERY_SIZE_DATA is an alias for cssm_query_size_data (C typedef CSSM_QUERY_SIZE_DATA).

type CSSM_QUERY_SIZE_DATA_PTR

type CSSM_QUERY_SIZE_DATA_PTR = *CssmQuerySizeData

CSSM_QUERY_SIZE_DATA_PTR is an opaque pointer to cssm_query_size_data (C typedef CSSM_QUERY_SIZE_DATA_PTR).

type CSSM_RANGE

type CSSM_RANGE = CssmRange

CSSM_RANGE is an alias for cssm_range (C typedef CSSM_RANGE).

type CSSM_RANGE_PTR

type CSSM_RANGE_PTR = *CssmRange

CSSM_RANGE_PTR is an opaque pointer to cssm_range (C typedef CSSM_RANGE_PTR).

type CSSM_RESOURCE_CONTROL_CONTEXT

type CSSM_RESOURCE_CONTROL_CONTEXT = CssmResourceControlContext

CSSM_RESOURCE_CONTROL_CONTEXT is an alias for cssm_resource_control_context (C typedef CSSM_RESOURCE_CONTROL_CONTEXT).

type CSSM_RESOURCE_CONTROL_CONTEXT_PTR

type CSSM_RESOURCE_CONTROL_CONTEXT_PTR = *CssmResourceControlContext

CSSM_RESOURCE_CONTROL_CONTEXT_PTR is an opaque pointer to cssm_resource_control_context (C typedef CSSM_RESOURCE_CONTROL_CONTEXT_PTR).

type CSSM_SAMPLE

type CSSM_SAMPLE = CssmSample

CSSM_SAMPLE is an alias for cssm_sample (C typedef CSSM_SAMPLE).

type CSSM_SAMPLEGROUP

type CSSM_SAMPLEGROUP = CssmSamplegroup

CSSM_SAMPLEGROUP is an alias for cssm_samplegroup (C typedef CSSM_SAMPLEGROUP).

type CSSM_SAMPLEGROUP_PTR

type CSSM_SAMPLEGROUP_PTR = *CssmSamplegroup

CSSM_SAMPLEGROUP_PTR is an opaque pointer to cssm_samplegroup (C typedef CSSM_SAMPLEGROUP_PTR).

type CSSM_SAMPLE_PTR

type CSSM_SAMPLE_PTR = *CssmSample

CSSM_SAMPLE_PTR is an opaque pointer to cssm_sample (C typedef CSSM_SAMPLE_PTR).

type CSSM_SELECTION_PREDICATE

type CSSM_SELECTION_PREDICATE = CssmSelectionPredicate

CSSM_SELECTION_PREDICATE is an alias for cssm_selection_predicate (C typedef CSSM_SELECTION_PREDICATE).

type CSSM_SELECTION_PREDICATE_PTR

type CSSM_SELECTION_PREDICATE_PTR = *CssmSelectionPredicate

CSSM_SELECTION_PREDICATE_PTR is an opaque pointer to cssm_selection_predicate (C typedef CSSM_SELECTION_PREDICATE_PTR).

type CSSM_SPI_AC_FUNCS

type CSSM_SPI_AC_FUNCS = CssmSpiAcFuncs

CSSM_SPI_AC_FUNCS is an alias for cssm_spi_ac_funcs (C typedef CSSM_SPI_AC_FUNCS).

type CSSM_SPI_AC_FUNCS_PTR

type CSSM_SPI_AC_FUNCS_PTR = *CssmSpiAcFuncs

CSSM_SPI_AC_FUNCS_PTR is an opaque pointer to cssm_spi_ac_funcs (C typedef CSSM_SPI_AC_FUNCS_PTR).

type CSSM_SPI_CL_FUNCS

type CSSM_SPI_CL_FUNCS = CssmSpiClFuncs

CSSM_SPI_CL_FUNCS is an alias for cssm_spi_cl_funcs (C typedef CSSM_SPI_CL_FUNCS).

type CSSM_SPI_CL_FUNCS_PTR

type CSSM_SPI_CL_FUNCS_PTR = *CssmSpiClFuncs

CSSM_SPI_CL_FUNCS_PTR is an opaque pointer to cssm_spi_cl_funcs (C typedef CSSM_SPI_CL_FUNCS_PTR).

type CSSM_SPI_CSP_FUNCS

type CSSM_SPI_CSP_FUNCS = CssmSpiCspFuncs

CSSM_SPI_CSP_FUNCS is an alias for cssm_spi_csp_funcs (C typedef CSSM_SPI_CSP_FUNCS).

type CSSM_SPI_CSP_FUNCS_PTR

type CSSM_SPI_CSP_FUNCS_PTR = *CssmSpiCspFuncs

CSSM_SPI_CSP_FUNCS_PTR is an opaque pointer to cssm_spi_csp_funcs (C typedef CSSM_SPI_CSP_FUNCS_PTR).

type CSSM_SPI_DL_FUNCS

type CSSM_SPI_DL_FUNCS = CssmSpiDlFuncs

CSSM_SPI_DL_FUNCS is an alias for cssm_spi_dl_funcs (C typedef CSSM_SPI_DL_FUNCS).

type CSSM_SPI_DL_FUNCS_PTR

type CSSM_SPI_DL_FUNCS_PTR = *CssmSpiDlFuncs

CSSM_SPI_DL_FUNCS_PTR is an opaque pointer to cssm_spi_dl_funcs (C typedef CSSM_SPI_DL_FUNCS_PTR).

type CSSM_SPI_KR_FUNCS

type CSSM_SPI_KR_FUNCS = CssmSpiKrFuncs

CSSM_SPI_KR_FUNCS is an alias for cssm_spi_kr_funcs (C typedef CSSM_SPI_KR_FUNCS).

type CSSM_SPI_KR_FUNCS_PTR

type CSSM_SPI_KR_FUNCS_PTR = *CssmSpiKrFuncs

CSSM_SPI_KR_FUNCS_PTR is an opaque pointer to cssm_spi_kr_funcs (C typedef CSSM_SPI_KR_FUNCS_PTR).

type CSSM_SPI_TP_FUNCS

type CSSM_SPI_TP_FUNCS = CssmSpiTpFuncs

CSSM_SPI_TP_FUNCS is an alias for cssm_spi_tp_funcs (C typedef CSSM_SPI_TP_FUNCS).

type CSSM_SPI_TP_FUNCS_PTR

type CSSM_SPI_TP_FUNCS_PTR = *CssmSpiTpFuncs

CSSM_SPI_TP_FUNCS_PTR is an opaque pointer to cssm_spi_tp_funcs (C typedef CSSM_SPI_TP_FUNCS_PTR).

type CSSM_STATE_FUNCS

type CSSM_STATE_FUNCS = CssmStateFuncs

CSSM_STATE_FUNCS is an alias for cssm_state_funcs (C typedef CSSM_STATE_FUNCS).

type CSSM_STATE_FUNCS_PTR

type CSSM_STATE_FUNCS_PTR = *CssmStateFuncs

CSSM_STATE_FUNCS_PTR is an opaque pointer to cssm_state_funcs (C typedef CSSM_STATE_FUNCS_PTR).

type CSSM_SUBSERVICE_UID

type CSSM_SUBSERVICE_UID = CssmSubserviceUid

CSSM_SUBSERVICE_UID is an alias for cssm_subservice_uid (C typedef CSSM_SUBSERVICE_UID).

type CSSM_SUBSERVICE_UID_PTR

type CSSM_SUBSERVICE_UID_PTR = *CssmSubserviceUid

CSSM_SUBSERVICE_UID_PTR is an opaque pointer to cssm_subservice_uid (C typedef CSSM_SUBSERVICE_UID_PTR).

type CSSM_TP_APPLE_EVIDENCE_HEADER

type CSSM_TP_APPLE_EVIDENCE_HEADER struct {
	Version uint32
}

type CSSM_TP_APPLE_EVIDENCE_INFO

type CSSM_TP_APPLE_EVIDENCE_INFO struct {
	StatusBits     uint32
	NumStatusCodes uint32
	StatusCodes    *int32
	Index          uint32
	DlDbHandle     CssmDlDbHandle
	UniqueRecord   *CssmDbUniqueRecord
}

type CSSM_TP_AUTHORITY_ID

type CSSM_TP_AUTHORITY_ID = CssmTpAuthorityId

CSSM_TP_AUTHORITY_ID is an alias for cssm_tp_authority_id (C typedef CSSM_TP_AUTHORITY_ID).

type CSSM_TP_AUTHORITY_ID_PTR

type CSSM_TP_AUTHORITY_ID_PTR = *CssmTpAuthorityId

CSSM_TP_AUTHORITY_ID_PTR is an opaque pointer to cssm_tp_authority_id (C typedef CSSM_TP_AUTHORITY_ID_PTR).

type CSSM_TP_CALLERAUTH_CONTEXT

type CSSM_TP_CALLERAUTH_CONTEXT = CssmTpCallerauthContext

CSSM_TP_CALLERAUTH_CONTEXT is an alias for cssm_tp_callerauth_context (C typedef CSSM_TP_CALLERAUTH_CONTEXT).

type CSSM_TP_CALLERAUTH_CONTEXT_PTR

type CSSM_TP_CALLERAUTH_CONTEXT_PTR = *CssmTpCallerauthContext

CSSM_TP_CALLERAUTH_CONTEXT_PTR is an opaque pointer to cssm_tp_callerauth_context (C typedef CSSM_TP_CALLERAUTH_CONTEXT_PTR).

type CSSM_TP_CERTCHANGE_INPUT

type CSSM_TP_CERTCHANGE_INPUT = CssmTpCertchangeInput

CSSM_TP_CERTCHANGE_INPUT is an alias for cssm_tp_certchange_input (C typedef CSSM_TP_CERTCHANGE_INPUT).

type CSSM_TP_CERTCHANGE_INPUT_PTR

type CSSM_TP_CERTCHANGE_INPUT_PTR = *CssmTpCertchangeInput

CSSM_TP_CERTCHANGE_INPUT_PTR is an opaque pointer to cssm_tp_certchange_input (C typedef CSSM_TP_CERTCHANGE_INPUT_PTR).

type CSSM_TP_CERTCHANGE_OUTPUT

type CSSM_TP_CERTCHANGE_OUTPUT = CssmTpCertchangeOutput

CSSM_TP_CERTCHANGE_OUTPUT is an alias for cssm_tp_certchange_output (C typedef CSSM_TP_CERTCHANGE_OUTPUT).

type CSSM_TP_CERTCHANGE_OUTPUT_PTR

type CSSM_TP_CERTCHANGE_OUTPUT_PTR = *CssmTpCertchangeOutput

CSSM_TP_CERTCHANGE_OUTPUT_PTR is an opaque pointer to cssm_tp_certchange_output (C typedef CSSM_TP_CERTCHANGE_OUTPUT_PTR).

type CSSM_TP_CERTISSUE_INPUT

type CSSM_TP_CERTISSUE_INPUT = CssmTpCertissueInput

CSSM_TP_CERTISSUE_INPUT is an alias for cssm_tp_certissue_input (C typedef CSSM_TP_CERTISSUE_INPUT).

type CSSM_TP_CERTISSUE_INPUT_PTR

type CSSM_TP_CERTISSUE_INPUT_PTR = *CssmTpCertissueInput

CSSM_TP_CERTISSUE_INPUT_PTR is an opaque pointer to cssm_tp_certissue_input (C typedef CSSM_TP_CERTISSUE_INPUT_PTR).

type CSSM_TP_CERTISSUE_OUTPUT

type CSSM_TP_CERTISSUE_OUTPUT = CssmTpCertissueOutput

CSSM_TP_CERTISSUE_OUTPUT is an alias for cssm_tp_certissue_output (C typedef CSSM_TP_CERTISSUE_OUTPUT).

type CSSM_TP_CERTISSUE_OUTPUT_PTR

type CSSM_TP_CERTISSUE_OUTPUT_PTR = *CssmTpCertissueOutput

CSSM_TP_CERTISSUE_OUTPUT_PTR is an opaque pointer to cssm_tp_certissue_output (C typedef CSSM_TP_CERTISSUE_OUTPUT_PTR).

type CSSM_TP_CERTNOTARIZE_INPUT

type CSSM_TP_CERTNOTARIZE_INPUT = CssmTpCertnotarizeInput

CSSM_TP_CERTNOTARIZE_INPUT is an alias for cssm_tp_certnotarize_input (C typedef CSSM_TP_CERTNOTARIZE_INPUT).

type CSSM_TP_CERTNOTARIZE_INPUT_PTR

type CSSM_TP_CERTNOTARIZE_INPUT_PTR = *CssmTpCertnotarizeInput

CSSM_TP_CERTNOTARIZE_INPUT_PTR is an opaque pointer to cssm_tp_certnotarize_input (C typedef CSSM_TP_CERTNOTARIZE_INPUT_PTR).

type CSSM_TP_CERTNOTARIZE_OUTPUT

type CSSM_TP_CERTNOTARIZE_OUTPUT = CssmTpCertnotarizeOutput

CSSM_TP_CERTNOTARIZE_OUTPUT is an alias for cssm_tp_certnotarize_output (C typedef CSSM_TP_CERTNOTARIZE_OUTPUT).

type CSSM_TP_CERTNOTARIZE_OUTPUT_PTR

type CSSM_TP_CERTNOTARIZE_OUTPUT_PTR = *CssmTpCertnotarizeOutput

CSSM_TP_CERTNOTARIZE_OUTPUT_PTR is an opaque pointer to cssm_tp_certnotarize_output (C typedef CSSM_TP_CERTNOTARIZE_OUTPUT_PTR).

type CSSM_TP_CERTRECLAIM_INPUT

type CSSM_TP_CERTRECLAIM_INPUT = CssmTpCertreclaimInput

CSSM_TP_CERTRECLAIM_INPUT is an alias for cssm_tp_certreclaim_input (C typedef CSSM_TP_CERTRECLAIM_INPUT).

type CSSM_TP_CERTRECLAIM_INPUT_PTR

type CSSM_TP_CERTRECLAIM_INPUT_PTR = *CssmTpCertreclaimInput

CSSM_TP_CERTRECLAIM_INPUT_PTR is an opaque pointer to cssm_tp_certreclaim_input (C typedef CSSM_TP_CERTRECLAIM_INPUT_PTR).

type CSSM_TP_CERTRECLAIM_OUTPUT

type CSSM_TP_CERTRECLAIM_OUTPUT = CssmTpCertreclaimOutput

CSSM_TP_CERTRECLAIM_OUTPUT is an alias for cssm_tp_certreclaim_output (C typedef CSSM_TP_CERTRECLAIM_OUTPUT).

type CSSM_TP_CERTRECLAIM_OUTPUT_PTR

type CSSM_TP_CERTRECLAIM_OUTPUT_PTR = *CssmTpCertreclaimOutput

CSSM_TP_CERTRECLAIM_OUTPUT_PTR is an opaque pointer to cssm_tp_certreclaim_output (C typedef CSSM_TP_CERTRECLAIM_OUTPUT_PTR).

type CSSM_TP_CERTVERIFY_INPUT

type CSSM_TP_CERTVERIFY_INPUT = CssmTpCertverifyInput

CSSM_TP_CERTVERIFY_INPUT is an alias for cssm_tp_certverify_input (C typedef CSSM_TP_CERTVERIFY_INPUT).

type CSSM_TP_CERTVERIFY_INPUT_PTR

type CSSM_TP_CERTVERIFY_INPUT_PTR = *CssmTpCertverifyInput

CSSM_TP_CERTVERIFY_INPUT_PTR is an opaque pointer to cssm_tp_certverify_input (C typedef CSSM_TP_CERTVERIFY_INPUT_PTR).

type CSSM_TP_CERTVERIFY_OUTPUT

type CSSM_TP_CERTVERIFY_OUTPUT = CssmTpCertverifyOutput

CSSM_TP_CERTVERIFY_OUTPUT is an alias for cssm_tp_certverify_output (C typedef CSSM_TP_CERTVERIFY_OUTPUT).

type CSSM_TP_CERTVERIFY_OUTPUT_PTR

type CSSM_TP_CERTVERIFY_OUTPUT_PTR = *CssmTpCertverifyOutput

CSSM_TP_CERTVERIFY_OUTPUT_PTR is an opaque pointer to cssm_tp_certverify_output (C typedef CSSM_TP_CERTVERIFY_OUTPUT_PTR).

type CSSM_TP_CONFIRM_RESPONSE

type CSSM_TP_CONFIRM_RESPONSE = CssmTpConfirmResponse

CSSM_TP_CONFIRM_RESPONSE is an alias for cssm_tp_confirm_response (C typedef CSSM_TP_CONFIRM_RESPONSE).

type CSSM_TP_CONFIRM_RESPONSE_PTR

type CSSM_TP_CONFIRM_RESPONSE_PTR = *CssmTpConfirmResponse

CSSM_TP_CONFIRM_RESPONSE_PTR is an opaque pointer to cssm_tp_confirm_response (C typedef CSSM_TP_CONFIRM_RESPONSE_PTR).

type CSSM_TP_CRLISSUE_INPUT

type CSSM_TP_CRLISSUE_INPUT = CssmTpCrlissueInput

CSSM_TP_CRLISSUE_INPUT is an alias for cssm_tp_crlissue_input (C typedef CSSM_TP_CRLISSUE_INPUT).

type CSSM_TP_CRLISSUE_INPUT_PTR

type CSSM_TP_CRLISSUE_INPUT_PTR = *CssmTpCrlissueInput

CSSM_TP_CRLISSUE_INPUT_PTR is an opaque pointer to cssm_tp_crlissue_input (C typedef CSSM_TP_CRLISSUE_INPUT_PTR).

type CSSM_TP_CRLISSUE_OUTPUT

type CSSM_TP_CRLISSUE_OUTPUT = CssmTpCrlissueOutput

CSSM_TP_CRLISSUE_OUTPUT is an alias for cssm_tp_crlissue_output (C typedef CSSM_TP_CRLISSUE_OUTPUT).

type CSSM_TP_CRLISSUE_OUTPUT_PTR

type CSSM_TP_CRLISSUE_OUTPUT_PTR = *CssmTpCrlissueOutput

CSSM_TP_CRLISSUE_OUTPUT_PTR is an opaque pointer to cssm_tp_crlissue_output (C typedef CSSM_TP_CRLISSUE_OUTPUT_PTR).

type CSSM_TP_POLICYINFO

type CSSM_TP_POLICYINFO = CssmTpPolicyinfo

CSSM_TP_POLICYINFO is an alias for cssm_tp_policyinfo (C typedef CSSM_TP_POLICYINFO).

type CSSM_TP_POLICYINFO_PTR

type CSSM_TP_POLICYINFO_PTR = *CssmTpPolicyinfo

CSSM_TP_POLICYINFO_PTR is an opaque pointer to cssm_tp_policyinfo (C typedef CSSM_TP_POLICYINFO_PTR).

type CSSM_TP_REQUEST_SET

type CSSM_TP_REQUEST_SET = CssmTpRequestSet

CSSM_TP_REQUEST_SET is an alias for cssm_tp_request_set (C typedef CSSM_TP_REQUEST_SET).

type CSSM_TP_REQUEST_SET_PTR

type CSSM_TP_REQUEST_SET_PTR = *CssmTpRequestSet

CSSM_TP_REQUEST_SET_PTR is an opaque pointer to cssm_tp_request_set (C typedef CSSM_TP_REQUEST_SET_PTR).

type CSSM_TP_RESULT_SET

type CSSM_TP_RESULT_SET = CssmTpResultSet

CSSM_TP_RESULT_SET is an alias for cssm_tp_result_set (C typedef CSSM_TP_RESULT_SET).

type CSSM_TP_RESULT_SET_PTR

type CSSM_TP_RESULT_SET_PTR = *CssmTpResultSet

CSSM_TP_RESULT_SET_PTR is an opaque pointer to cssm_tp_result_set (C typedef CSSM_TP_RESULT_SET_PTR).

type CSSM_TP_VERIFY_CONTEXT

type CSSM_TP_VERIFY_CONTEXT = CssmTpVerifyContext

CSSM_TP_VERIFY_CONTEXT is an alias for cssm_tp_verify_context (C typedef CSSM_TP_VERIFY_CONTEXT).

type CSSM_TP_VERIFY_CONTEXT_PTR

type CSSM_TP_VERIFY_CONTEXT_PTR = *CssmTpVerifyContext

CSSM_TP_VERIFY_CONTEXT_PTR is an opaque pointer to cssm_tp_verify_context (C typedef CSSM_TP_VERIFY_CONTEXT_PTR).

type CSSM_TP_VERIFY_CONTEXT_RESULT

type CSSM_TP_VERIFY_CONTEXT_RESULT = CssmTpVerifyContextResult

CSSM_TP_VERIFY_CONTEXT_RESULT is an alias for cssm_tp_verify_context_result (C typedef CSSM_TP_VERIFY_CONTEXT_RESULT).

type CSSM_TP_VERIFY_CONTEXT_RESULT_PTR

type CSSM_TP_VERIFY_CONTEXT_RESULT_PTR = *CssmTpVerifyContextResult

CSSM_TP_VERIFY_CONTEXT_RESULT_PTR is an opaque pointer to cssm_tp_verify_context_result (C typedef CSSM_TP_VERIFY_CONTEXT_RESULT_PTR).

type CSSM_TUPLE

type CSSM_TUPLE struct {
	Issuer           CssmList
	Subject          CssmList
	Delegate         int32
	AuthorizationTag CssmList
	ValidityPeriod   CssmList
}

type CSSM_TUPLEGROUP

type CSSM_TUPLEGROUP = CssmTuplegroup

CSSM_TUPLEGROUP is an alias for cssm_tuplegroup (C typedef CSSM_TUPLEGROUP).

type CSSM_TUPLEGROUP_PTR

type CSSM_TUPLEGROUP_PTR = *CssmTuplegroup

CSSM_TUPLEGROUP_PTR is an opaque pointer to cssm_tuplegroup (C typedef CSSM_TUPLEGROUP_PTR).

type CSSM_TUPLE_PTR

type CSSM_TUPLE_PTR = *CSSM_TUPLE

CSSM_TUPLE_PTR is an opaque pointer to CSSM_TUPLE (C typedef CSSM_TUPLE_PTR).

type CSSM_UPCALLS

type CSSM_UPCALLS = CssmUpcalls

CSSM_UPCALLS is an alias for cssm_upcalls (C typedef CSSM_UPCALLS).

type CSSM_UPCALLS_PTR

type CSSM_UPCALLS_PTR = *CssmUpcalls

CSSM_UPCALLS_PTR is an opaque pointer to cssm_upcalls (C typedef CSSM_UPCALLS_PTR).

type CSSM_VERSION

type CSSM_VERSION = CssmVersion

CSSM_VERSION is an alias for cssm_version (C typedef CSSM_VERSION).

type CSSM_VERSION_PTR

type CSSM_VERSION_PTR = *CssmVersion

CSSM_VERSION_PTR is an opaque pointer to cssm_version (C typedef CSSM_VERSION_PTR).

type CSSM_X509EXT_BASICCONSTRAINTS

type CSSM_X509EXT_BASICCONSTRAINTS = CssmX509extBasicConstraints

CSSM_X509EXT_BASICCONSTRAINTS is an alias for cssm_x509ext_basicConstraints (C typedef CSSM_X509EXT_BASICCONSTRAINTS).

type CSSM_X509EXT_BASICCONSTRAINTS_PTR

type CSSM_X509EXT_BASICCONSTRAINTS_PTR = *CssmX509extBasicConstraints

CSSM_X509EXT_BASICCONSTRAINTS_PTR is an opaque pointer to cssm_x509ext_basicConstraints (C typedef CSSM_X509EXT_BASICCONSTRAINTS_PTR).

type CSSM_X509EXT_PAIR

type CSSM_X509EXT_PAIR = CssmX509extPair

CSSM_X509EXT_PAIR is an alias for cssm_x509ext_pair (C typedef CSSM_X509EXT_PAIR).

type CSSM_X509EXT_PAIR_PTR

type CSSM_X509EXT_PAIR_PTR = *CssmX509extPair

CSSM_X509EXT_PAIR_PTR is an opaque pointer to cssm_x509ext_pair (C typedef CSSM_X509EXT_PAIR_PTR).

type CSSM_X509EXT_POLICYINFO

type CSSM_X509EXT_POLICYINFO = CssmX509extPolicyInfo

CSSM_X509EXT_POLICYINFO is an alias for cssm_x509ext_policyInfo (C typedef CSSM_X509EXT_POLICYINFO).

type CSSM_X509EXT_POLICYINFO_PTR

type CSSM_X509EXT_POLICYINFO_PTR = *CssmX509extPolicyInfo

CSSM_X509EXT_POLICYINFO_PTR is an opaque pointer to cssm_x509ext_policyInfo (C typedef CSSM_X509EXT_POLICYINFO_PTR).

type CSSM_X509EXT_POLICYQUALIFIERINFO

type CSSM_X509EXT_POLICYQUALIFIERINFO = CssmX509extPolicyQualifierInfo

CSSM_X509EXT_POLICYQUALIFIERINFO is an alias for cssm_x509ext_policyQualifierInfo (C typedef CSSM_X509EXT_POLICYQUALIFIERINFO).

type CSSM_X509EXT_POLICYQUALIFIERINFO_PTR

type CSSM_X509EXT_POLICYQUALIFIERINFO_PTR = *CssmX509extPolicyQualifierInfo

CSSM_X509EXT_POLICYQUALIFIERINFO_PTR is an opaque pointer to cssm_x509ext_policyQualifierInfo (C typedef CSSM_X509EXT_POLICYQUALIFIERINFO_PTR).

type CSSM_X509EXT_POLICYQUALIFIERS

type CSSM_X509EXT_POLICYQUALIFIERS = CssmX509extPolicyQualifiers

CSSM_X509EXT_POLICYQUALIFIERS is an alias for cssm_x509ext_policyQualifiers (C typedef CSSM_X509EXT_POLICYQUALIFIERS).

type CSSM_X509EXT_POLICYQUALIFIERS_PTR

type CSSM_X509EXT_POLICYQUALIFIERS_PTR = *CssmX509extPolicyQualifiers

CSSM_X509EXT_POLICYQUALIFIERS_PTR is an opaque pointer to cssm_x509ext_policyQualifiers (C typedef CSSM_X509EXT_POLICYQUALIFIERS_PTR).

type CSSM_X509EXT_TAGandVALUE

type CSSM_X509EXT_TAGandVALUE = CssmX509ExtensionTagAndValue

CSSM_X509EXT_TAGandVALUE is an alias for cssm_x509_extensionTagAndValue (C typedef CSSM_X509EXT_TAGandVALUE).

type CSSM_X509EXT_TAGandVALUE_PTR

type CSSM_X509EXT_TAGandVALUE_PTR = *CssmX509ExtensionTagAndValue

CSSM_X509EXT_TAGandVALUE_PTR is an opaque pointer to cssm_x509_extensionTagAndValue (C typedef CSSM_X509EXT_TAGandVALUE_PTR).

type CSSM_X509_EXTENSION

type CSSM_X509_EXTENSION = CssmX509Extension

CSSM_X509_EXTENSION is an alias for cssm_x509_extension (C typedef CSSM_X509_EXTENSION).

type CSSM_X509_EXTENSIONS

type CSSM_X509_EXTENSIONS = CssmX509Extensions

CSSM_X509_EXTENSIONS is an alias for cssm_x509_extensions (C typedef CSSM_X509_EXTENSIONS).

type CSSM_X509_EXTENSIONS_PTR

type CSSM_X509_EXTENSIONS_PTR = *CssmX509Extensions

CSSM_X509_EXTENSIONS_PTR is an opaque pointer to cssm_x509_extensions (C typedef CSSM_X509_EXTENSIONS_PTR).

type CSSM_X509_EXTENSION_PTR

type CSSM_X509_EXTENSION_PTR = *CssmX509Extension

CSSM_X509_EXTENSION_PTR is an opaque pointer to cssm_x509_extension (C typedef CSSM_X509_EXTENSION_PTR).

type CSSM_X509_NAME

type CSSM_X509_NAME = CssmX509Name

CSSM_X509_NAME is an alias for cssm_x509_name (C typedef CSSM_X509_NAME).

type CSSM_X509_NAME_PTR

type CSSM_X509_NAME_PTR = *CssmX509Name

CSSM_X509_NAME_PTR is an opaque pointer to cssm_x509_name (C typedef CSSM_X509_NAME_PTR).

type CSSM_X509_RDN

type CSSM_X509_RDN = CssmX509Rdn

CSSM_X509_RDN is an alias for cssm_x509_rdn (C typedef CSSM_X509_RDN).

type CSSM_X509_RDN_PTR

type CSSM_X509_RDN_PTR = *CssmX509Rdn

CSSM_X509_RDN_PTR is an opaque pointer to cssm_x509_rdn (C typedef CSSM_X509_RDN_PTR).

type CSSM_X509_REVOKED_CERT_ENTRY

type CSSM_X509_REVOKED_CERT_ENTRY = CssmX509RevokedCertEntry

CSSM_X509_REVOKED_CERT_ENTRY is an alias for cssm_x509_revoked_cert_entry (C typedef CSSM_X509_REVOKED_CERT_ENTRY).

type CSSM_X509_REVOKED_CERT_ENTRY_PTR

type CSSM_X509_REVOKED_CERT_ENTRY_PTR = *CssmX509RevokedCertEntry

CSSM_X509_REVOKED_CERT_ENTRY_PTR is an opaque pointer to cssm_x509_revoked_cert_entry (C typedef CSSM_X509_REVOKED_CERT_ENTRY_PTR).

type CSSM_X509_REVOKED_CERT_LIST

type CSSM_X509_REVOKED_CERT_LIST = CssmX509RevokedCertList

CSSM_X509_REVOKED_CERT_LIST is an alias for cssm_x509_revoked_cert_list (C typedef CSSM_X509_REVOKED_CERT_LIST).

type CSSM_X509_REVOKED_CERT_LIST_PTR

type CSSM_X509_REVOKED_CERT_LIST_PTR = *CssmX509RevokedCertList

CSSM_X509_REVOKED_CERT_LIST_PTR is an opaque pointer to cssm_x509_revoked_cert_list (C typedef CSSM_X509_REVOKED_CERT_LIST_PTR).

type CSSM_X509_SIGNATURE

type CSSM_X509_SIGNATURE = CssmX509Signature

CSSM_X509_SIGNATURE is an alias for cssm_x509_signature (C typedef CSSM_X509_SIGNATURE).

type CSSM_X509_SIGNATURE_PTR

type CSSM_X509_SIGNATURE_PTR = *CssmX509Signature

CSSM_X509_SIGNATURE_PTR is an opaque pointer to cssm_x509_signature (C typedef CSSM_X509_SIGNATURE_PTR).

type CSSM_X509_SIGNED_CERTIFICATE

type CSSM_X509_SIGNED_CERTIFICATE = CssmX509SignedCertificate

CSSM_X509_SIGNED_CERTIFICATE is an alias for cssm_x509_signed_certificate (C typedef CSSM_X509_SIGNED_CERTIFICATE).

type CSSM_X509_SIGNED_CERTIFICATE_PTR

type CSSM_X509_SIGNED_CERTIFICATE_PTR = *CssmX509SignedCertificate

CSSM_X509_SIGNED_CERTIFICATE_PTR is an opaque pointer to cssm_x509_signed_certificate (C typedef CSSM_X509_SIGNED_CERTIFICATE_PTR).

type CSSM_X509_SIGNED_CRL

type CSSM_X509_SIGNED_CRL = CssmX509SignedCrl

CSSM_X509_SIGNED_CRL is an alias for cssm_x509_signed_crl (C typedef CSSM_X509_SIGNED_CRL).

type CSSM_X509_SIGNED_CRL_PTR

type CSSM_X509_SIGNED_CRL_PTR = *CssmX509SignedCrl

CSSM_X509_SIGNED_CRL_PTR is an opaque pointer to cssm_x509_signed_crl (C typedef CSSM_X509_SIGNED_CRL_PTR).

type CSSM_X509_TBS_CERTIFICATE

type CSSM_X509_TBS_CERTIFICATE = CssmX509TbsCertificate

CSSM_X509_TBS_CERTIFICATE is an alias for cssm_x509_tbs_certificate (C typedef CSSM_X509_TBS_CERTIFICATE).

type CSSM_X509_TBS_CERTIFICATE_PTR

type CSSM_X509_TBS_CERTIFICATE_PTR = *CssmX509TbsCertificate

CSSM_X509_TBS_CERTIFICATE_PTR is an opaque pointer to cssm_x509_tbs_certificate (C typedef CSSM_X509_TBS_CERTIFICATE_PTR).

type CSSM_X509_TBS_CERTLIST

type CSSM_X509_TBS_CERTLIST = CssmX509TbsCertlist

CSSM_X509_TBS_CERTLIST is an alias for cssm_x509_tbs_certlist (C typedef CSSM_X509_TBS_CERTLIST).

type CSSM_X509_TBS_CERTLIST_PTR

type CSSM_X509_TBS_CERTLIST_PTR = *CssmX509TbsCertlist

CSSM_X509_TBS_CERTLIST_PTR is an opaque pointer to cssm_x509_tbs_certlist (C typedef CSSM_X509_TBS_CERTLIST_PTR).

type CSSM_X509_TIME

type CSSM_X509_TIME = CssmX509Time

CSSM_X509_TIME is an alias for cssm_x509_time (C typedef CSSM_X509_TIME).

type CSSM_X509_TIME_PTR

type CSSM_X509_TIME_PTR = *CssmX509Time

CSSM_X509_TIME_PTR is an opaque pointer to cssm_x509_time (C typedef CSSM_X509_TIME_PTR).

type CSSM_X509_TYPE_VALUE_PAIR

type CSSM_X509_TYPE_VALUE_PAIR = CssmX509TypeValuePair

CSSM_X509_TYPE_VALUE_PAIR is an alias for cssm_x509_type_value_pair (C typedef CSSM_X509_TYPE_VALUE_PAIR).

type CSSM_X509_TYPE_VALUE_PAIR_PTR

type CSSM_X509_TYPE_VALUE_PAIR_PTR = *CssmX509TypeValuePair

CSSM_X509_TYPE_VALUE_PAIR_PTR is an opaque pointer to cssm_x509_type_value_pair (C typedef CSSM_X509_TYPE_VALUE_PAIR_PTR).

type CSSM_X509_VALIDITY

type CSSM_X509_VALIDITY = X509Validity

CSSM_X509_VALIDITY is an alias for x509_validity (C typedef CSSM_X509_VALIDITY).

type CSSM_X509_VALIDITY_PTR

type CSSM_X509_VALIDITY_PTR = *X509Validity

CSSM_X509_VALIDITY_PTR is an opaque pointer to x509_validity (C typedef CSSM_X509_VALIDITY_PTR).

type Clockid_t

type Clockid_t int64

func (Clockid_t) String

func (e Clockid_t) String() string

type CssmAccessCredentials

type CssmAccessCredentials struct {
	EntryTag  [68]int8
	BaseCerts CssmBaseCerts
	Samples   CssmSamplegroup
	Callback  unsafe.Pointer
	CallerCtx unsafe.Pointer
}

C struct: cssm_access_credentials

type CssmAclEdit

type CssmAclEdit struct {
	EditMode       uint32
	OldEntryHandle int
	NewEntry       *CssmAclEntryInput
}

C struct: cssm_acl_edit

type CssmAclEntryInfo

type CssmAclEntryInfo struct {
	EntryPublicInfo CssmAclEntryPrototype
	EntryHandle     int
}

C struct: cssm_acl_entry_info

type CssmAclEntryInput

type CssmAclEntryInput struct {
	Prototype     CssmAclEntryPrototype
	Callback      unsafe.Pointer
	CallerContext unsafe.Pointer
}

C struct: cssm_acl_entry_input

type CssmAclEntryPrototype

type CssmAclEntryPrototype struct {
	TypedSubject  CssmList
	Delegate      int32
	Authorization CssmAuthorizationgroup
	TimeRange     CssmAclValidityPeriod
	EntryTag      [68]int8
}

C struct: cssm_acl_entry_prototype

type CssmAclKeychainPromptSelector

type CssmAclKeychainPromptSelector struct {
	Version uint16
	Flags   uint16
}

C struct: cssm_acl_keychain_prompt_selector

type CssmAclOwnerPrototype

type CssmAclOwnerPrototype struct {
	TypedSubject CssmList
	Delegate     int32
}

C struct: cssm_acl_owner_prototype

type CssmAclProcessSubjectSelector

type CssmAclProcessSubjectSelector struct {
	Version uint16
	Mask    uint16
	Uid     uint32
	Gid     uint32
}

C struct: cssm_acl_process_subject_selector

type CssmAclValidityPeriod

type CssmAclValidityPeriod struct {
	StartDate CssmData
	EndDate   CssmData
}

C struct: cssm_acl_validity_period

type CssmApplecspdlDbChangePasswordParameters

type CssmApplecspdlDbChangePasswordParameters struct {
	AccessCredentials *CssmAccessCredentials
}

C struct: cssm_applecspdl_db_change_password_parameters

type CssmApplecspdlDbIsLockedParameters

type CssmApplecspdlDbIsLockedParameters struct {
	IsLocked uint8
}

C struct: cssm_applecspdl_db_is_locked_parameters

type CssmApplecspdlDbSettingsParameters

type CssmApplecspdlDbSettingsParameters struct {
	IdleTimeout uint32
	LockOnSleep uint8
}

C struct: cssm_applecspdl_db_settings_parameters

type CssmAppledlOpenParameters

type CssmAppledlOpenParameters struct {
	Length     uint32
	Version    uint32
	AutoCommit int32
	Mask       uint32
	Mode       uint16
}

C struct: cssm_appledl_open_parameters

type CssmAuthorizationgroup

type CssmAuthorizationgroup struct {
	NumberOfAuthTags uint32
	AuthTags         *int32
}

C struct: cssm_authorizationgroup

type CssmBaseCerts

type CssmBaseCerts struct {
	TPHandle int
	CLHandle int
	Certs    CssmCertgroup
}

C struct: cssm_base_certs

type CssmCertBundle

type CssmCertBundle struct {
	BundleHeader CssmCertBundleHeader
	Bundle       CssmData
}

C struct: cssm_cert_bundle

type CssmCertBundleHeader

type CssmCertBundleHeader struct {
	BundleType     uint32
	BundleEncoding uint32
}

C struct: cssm_cert_bundle_header

type CssmCertPair

type CssmCertPair struct {
	EncodedCert CssmEncodedCert
	ParsedCert  CssmParsedCert
}

C struct: cssm_cert_pair

type CssmCertgroup

type CssmCertgroup struct {
	CertType      uint32
	CertEncoding  uint32
	NumCerts      uint32
	GroupList     unsafe.Pointer
	CertGroupType uint32
	Reserved      unsafe.Pointer
}

C struct: cssm_certgroup

type CssmContext

type CssmContext struct {
	ContextType          uint32
	AlgorithmType        uint32
	NumberOfAttributes   uint32
	ContextAttributes    *CssmContextAttribute
	CSPHandle            int
	Privileged           int32
	EncryptionProhibited uint32
	WorkFactor           uint32
	Reserved             uint32
}

C struct: cssm_context

type CssmContextAttribute

type CssmContextAttribute struct {
	AttributeType   uint32
	AttributeLength uint32
	Attribute       unsafe.Pointer
}

C struct: cssm_context_attribute

type CssmCrlPair

type CssmCrlPair struct {
	EncodedCrl CssmEncodedCrl
	ParsedCrl  CssmParsedCrl
}

C struct: cssm_crl_pair

type CssmCrlgroup

type CssmCrlgroup struct {
	CrlType      uint32
	CrlEncoding  uint32
	NumberOfCrls uint32
	GroupCrlList unsafe.Pointer
	CrlGroupType uint32
}

C struct: cssm_crlgroup

type CssmCryptoData

type CssmCryptoData struct {
	Param     CssmData
	Callback  unsafe.Pointer
	CallerCtx unsafe.Pointer
}

C struct: cssm_crypto_data

type CssmCspOperationalStatistics

type CssmCspOperationalStatistics struct {
	UserAuthenticated         int32
	DeviceFlags               uint32
	TokenMaxSessionCount      uint32
	TokenOpenedSessionCount   uint32
	TokenMaxRWSessionCount    uint32
	TokenOpenedRWSessionCount uint32
	TokenTotalPublicMem       uint32
	TokenFreePublicMem        uint32
	TokenTotalPrivateMem      uint32
	TokenFreePrivateMem       uint32
}

C struct: cssm_csp_operational_statistics

type CssmData deprecated

type CssmData struct {
	Length uint
	Data   *uint8
}

Deprecated: SecAsn1 is not supported C struct: cssm_data

func CSSMOID_ADC_CERT_POLICY

func CSSMOID_ADC_CERT_POLICY() CssmData

func CSSMOID_AD_CA_ISSUERS

func CSSMOID_AD_CA_ISSUERS() CssmData

func CSSMOID_AD_CA_REPOSITORY

func CSSMOID_AD_CA_REPOSITORY() CssmData

func CSSMOID_AD_OCSP

func CSSMOID_AD_OCSP() CssmData

func CSSMOID_AD_TIME_STAMPING

func CSSMOID_AD_TIME_STAMPING() CssmData

func CSSMOID_ANSI_DH_EPHEM

func CSSMOID_ANSI_DH_EPHEM() CssmData

func CSSMOID_ANSI_DH_EPHEM_SHA1

func CSSMOID_ANSI_DH_EPHEM_SHA1() CssmData

func CSSMOID_ANSI_DH_HYBRID1

func CSSMOID_ANSI_DH_HYBRID1() CssmData

func CSSMOID_ANSI_DH_HYBRID1_SHA1

func CSSMOID_ANSI_DH_HYBRID1_SHA1() CssmData

func CSSMOID_ANSI_DH_HYBRID2

func CSSMOID_ANSI_DH_HYBRID2() CssmData

func CSSMOID_ANSI_DH_HYBRID2_SHA1

func CSSMOID_ANSI_DH_HYBRID2_SHA1() CssmData

func CSSMOID_ANSI_DH_HYBRID_ONEFLOW

func CSSMOID_ANSI_DH_HYBRID_ONEFLOW() CssmData

func CSSMOID_ANSI_DH_ONE_FLOW

func CSSMOID_ANSI_DH_ONE_FLOW() CssmData

func CSSMOID_ANSI_DH_ONE_FLOW_SHA1

func CSSMOID_ANSI_DH_ONE_FLOW_SHA1() CssmData

func CSSMOID_ANSI_DH_PUB_NUMBER

func CSSMOID_ANSI_DH_PUB_NUMBER() CssmData

func CSSMOID_ANSI_DH_STATIC

func CSSMOID_ANSI_DH_STATIC() CssmData

func CSSMOID_ANSI_DH_STATIC_SHA1

func CSSMOID_ANSI_DH_STATIC_SHA1() CssmData

func CSSMOID_ANSI_MQV1

func CSSMOID_ANSI_MQV1() CssmData

func CSSMOID_ANSI_MQV1_SHA1

func CSSMOID_ANSI_MQV1_SHA1() CssmData

func CSSMOID_ANSI_MQV2

func CSSMOID_ANSI_MQV2() CssmData

func CSSMOID_ANSI_MQV2_SHA1

func CSSMOID_ANSI_MQV2_SHA1() CssmData

func CSSMOID_APPLEID_CERT_POLICY

func CSSMOID_APPLEID_CERT_POLICY() CssmData

func CSSMOID_APPLEID_SHARING_CERT_POLICY

func CSSMOID_APPLEID_SHARING_CERT_POLICY() CssmData

func CSSMOID_APPLE_ASC

func CSSMOID_APPLE_ASC() CssmData

func CSSMOID_APPLE_CERT_POLICY

func CSSMOID_APPLE_CERT_POLICY() CssmData

func CSSMOID_APPLE_ECDSA

func CSSMOID_APPLE_ECDSA() CssmData

func CSSMOID_APPLE_EKU_CODE_SIGNING

func CSSMOID_APPLE_EKU_CODE_SIGNING() CssmData

func CSSMOID_APPLE_EKU_CODE_SIGNING_DEV

func CSSMOID_APPLE_EKU_CODE_SIGNING_DEV() CssmData

func CSSMOID_APPLE_EKU_ICHAT_ENCRYPTION

func CSSMOID_APPLE_EKU_ICHAT_ENCRYPTION() CssmData

func CSSMOID_APPLE_EKU_ICHAT_SIGNING

func CSSMOID_APPLE_EKU_ICHAT_SIGNING() CssmData

func CSSMOID_APPLE_EKU_PASSBOOK_SIGNING

func CSSMOID_APPLE_EKU_PASSBOOK_SIGNING() CssmData

func CSSMOID_APPLE_EKU_PROFILE_SIGNING

func CSSMOID_APPLE_EKU_PROFILE_SIGNING() CssmData

func CSSMOID_APPLE_EKU_QA_PROFILE_SIGNING

func CSSMOID_APPLE_EKU_QA_PROFILE_SIGNING() CssmData

func CSSMOID_APPLE_EKU_RESOURCE_SIGNING

func CSSMOID_APPLE_EKU_RESOURCE_SIGNING() CssmData

func CSSMOID_APPLE_EKU_SYSTEM_IDENTITY

func CSSMOID_APPLE_EKU_SYSTEM_IDENTITY() CssmData

func CSSMOID_APPLE_EXTENSION

func CSSMOID_APPLE_EXTENSION() CssmData

func CSSMOID_APPLE_EXTENSION_AAI_INTERMEDIATE

func CSSMOID_APPLE_EXTENSION_AAI_INTERMEDIATE() CssmData

func CSSMOID_APPLE_EXTENSION_ADC_APPLE_SIGNING

func CSSMOID_APPLE_EXTENSION_ADC_APPLE_SIGNING() CssmData

func CSSMOID_APPLE_EXTENSION_ADC_DEV_SIGNING

func CSSMOID_APPLE_EXTENSION_ADC_DEV_SIGNING() CssmData

func CSSMOID_APPLE_EXTENSION_APPLEID_INTERMEDIATE

func CSSMOID_APPLE_EXTENSION_APPLEID_INTERMEDIATE() CssmData

func CSSMOID_APPLE_EXTENSION_APPLEID_SHARING

func CSSMOID_APPLE_EXTENSION_APPLEID_SHARING() CssmData

func CSSMOID_APPLE_EXTENSION_APPLE_SIGNING

func CSSMOID_APPLE_EXTENSION_APPLE_SIGNING() CssmData

func CSSMOID_APPLE_EXTENSION_CODE_SIGNING

func CSSMOID_APPLE_EXTENSION_CODE_SIGNING() CssmData

func CSSMOID_APPLE_EXTENSION_DEVELOPER_AUTHENTICATION

func CSSMOID_APPLE_EXTENSION_DEVELOPER_AUTHENTICATION() CssmData

func CSSMOID_APPLE_EXTENSION_ESCROW_SERVICE

func CSSMOID_APPLE_EXTENSION_ESCROW_SERVICE() CssmData

func CSSMOID_APPLE_EXTENSION_INTERMEDIATE_MARKER

func CSSMOID_APPLE_EXTENSION_INTERMEDIATE_MARKER() CssmData

func CSSMOID_APPLE_EXTENSION_ITMS_INTERMEDIATE

func CSSMOID_APPLE_EXTENSION_ITMS_INTERMEDIATE() CssmData

func CSSMOID_APPLE_EXTENSION_MACAPPSTORE_RECEIPT

func CSSMOID_APPLE_EXTENSION_MACAPPSTORE_RECEIPT() CssmData

func CSSMOID_APPLE_EXTENSION_PASSBOOK_SIGNING

func CSSMOID_APPLE_EXTENSION_PASSBOOK_SIGNING() CssmData

func CSSMOID_APPLE_EXTENSION_PROVISIONING_PROFILE_SIGNING

func CSSMOID_APPLE_EXTENSION_PROVISIONING_PROFILE_SIGNING() CssmData

func CSSMOID_APPLE_EXTENSION_SERVER_AUTHENTICATION

func CSSMOID_APPLE_EXTENSION_SERVER_AUTHENTICATION() CssmData

func CSSMOID_APPLE_EXTENSION_SYSINT2_INTERMEDIATE

func CSSMOID_APPLE_EXTENSION_SYSINT2_INTERMEDIATE() CssmData

func CSSMOID_APPLE_EXTENSION_WWDR_INTERMEDIATE

func CSSMOID_APPLE_EXTENSION_WWDR_INTERMEDIATE() CssmData

func CSSMOID_APPLE_FEE

func CSSMOID_APPLE_FEE() CssmData

func CSSMOID_APPLE_FEED

func CSSMOID_APPLE_FEED() CssmData

func CSSMOID_APPLE_FEEDEXP

func CSSMOID_APPLE_FEEDEXP() CssmData

func CSSMOID_APPLE_FEE_MD5

func CSSMOID_APPLE_FEE_MD5() CssmData

func CSSMOID_APPLE_FEE_SHA1

func CSSMOID_APPLE_FEE_SHA1() CssmData

func CSSMOID_APPLE_ISIGN

func CSSMOID_APPLE_ISIGN() CssmData

func CSSMOID_APPLE_TP_APPLEID_SHARING

func CSSMOID_APPLE_TP_APPLEID_SHARING() CssmData

func CSSMOID_APPLE_TP_CODE_SIGN

func CSSMOID_APPLE_TP_CODE_SIGN() CssmData

func CSSMOID_APPLE_TP_CODE_SIGNING

func CSSMOID_APPLE_TP_CODE_SIGNING() CssmData

func CSSMOID_APPLE_TP_CSR_GEN

func CSSMOID_APPLE_TP_CSR_GEN() CssmData

func CSSMOID_APPLE_TP_EAP

func CSSMOID_APPLE_TP_EAP() CssmData

func CSSMOID_APPLE_TP_ESCROW_SERVICE

func CSSMOID_APPLE_TP_ESCROW_SERVICE() CssmData

func CSSMOID_APPLE_TP_ICHAT

func CSSMOID_APPLE_TP_ICHAT() CssmData

func CSSMOID_APPLE_TP_IP_SEC

func CSSMOID_APPLE_TP_IP_SEC() CssmData

func CSSMOID_APPLE_TP_LOCAL_CERT_GEN

func CSSMOID_APPLE_TP_LOCAL_CERT_GEN() CssmData

func CSSMOID_APPLE_TP_MACAPPSTORE_RECEIPT

func CSSMOID_APPLE_TP_MACAPPSTORE_RECEIPT() CssmData

func CSSMOID_APPLE_TP_MOBILE_STORE

func CSSMOID_APPLE_TP_MOBILE_STORE() CssmData

func CSSMOID_APPLE_TP_PACKAGE_SIGNING

func CSSMOID_APPLE_TP_PACKAGE_SIGNING() CssmData

func CSSMOID_APPLE_TP_PASSBOOK_SIGNING

func CSSMOID_APPLE_TP_PASSBOOK_SIGNING() CssmData

func CSSMOID_APPLE_TP_PCS_ESCROW_SERVICE

func CSSMOID_APPLE_TP_PCS_ESCROW_SERVICE() CssmData

func CSSMOID_APPLE_TP_PKINIT_CLIENT

func CSSMOID_APPLE_TP_PKINIT_CLIENT() CssmData

func CSSMOID_APPLE_TP_PKINIT_SERVER

func CSSMOID_APPLE_TP_PKINIT_SERVER() CssmData

func CSSMOID_APPLE_TP_PROFILE_SIGNING

func CSSMOID_APPLE_TP_PROFILE_SIGNING() CssmData

func CSSMOID_APPLE_TP_PROVISIONING_PROFILE_SIGNING

func CSSMOID_APPLE_TP_PROVISIONING_PROFILE_SIGNING() CssmData

func CSSMOID_APPLE_TP_QA_PROFILE_SIGNING

func CSSMOID_APPLE_TP_QA_PROFILE_SIGNING() CssmData

func CSSMOID_APPLE_TP_RESOURCE_SIGN

func CSSMOID_APPLE_TP_RESOURCE_SIGN() CssmData

func CSSMOID_APPLE_TP_REVOCATION

func CSSMOID_APPLE_TP_REVOCATION() CssmData

func CSSMOID_APPLE_TP_REVOCATION_CRL

func CSSMOID_APPLE_TP_REVOCATION_CRL() CssmData

func CSSMOID_APPLE_TP_REVOCATION_OCSP

func CSSMOID_APPLE_TP_REVOCATION_OCSP() CssmData

func CSSMOID_APPLE_TP_SMIME

func CSSMOID_APPLE_TP_SMIME() CssmData

func CSSMOID_APPLE_TP_SSL

func CSSMOID_APPLE_TP_SSL() CssmData

func CSSMOID_APPLE_TP_SW_UPDATE_SIGNING

func CSSMOID_APPLE_TP_SW_UPDATE_SIGNING() CssmData

func CSSMOID_APPLE_TP_TEST_MOBILE_STORE

func CSSMOID_APPLE_TP_TEST_MOBILE_STORE() CssmData

func CSSMOID_APPLE_TP_TIMESTAMPING

func CSSMOID_APPLE_TP_TIMESTAMPING() CssmData

func CSSMOID_APPLE_X509_BASIC

func CSSMOID_APPLE_X509_BASIC() CssmData

func CSSMOID_AliasedEntryName

func CSSMOID_AliasedEntryName() CssmData

func CSSMOID_AuthorityInfoAccess

func CSSMOID_AuthorityInfoAccess() CssmData

func CSSMOID_AuthorityKeyIdentifier

func CSSMOID_AuthorityKeyIdentifier() CssmData

func CSSMOID_AuthorityRevocationList

func CSSMOID_AuthorityRevocationList() CssmData

func CSSMOID_BasicConstraints

func CSSMOID_BasicConstraints() CssmData

func CSSMOID_BiometricInfo

func CSSMOID_BiometricInfo() CssmData

func CSSMOID_BusinessCategory

func CSSMOID_BusinessCategory() CssmData

func CSSMOID_CACertificate

func CSSMOID_CACertificate() CssmData

func CSSMOID_CSSMKeyStruct

func CSSMOID_CSSMKeyStruct() CssmData

func CSSMOID_CertIssuer

func CSSMOID_CertIssuer() CssmData

func CSSMOID_Certicom

func CSSMOID_Certicom() CssmData

func CSSMOID_CerticomEllCurve

func CSSMOID_CerticomEllCurve() CssmData

func CSSMOID_CertificatePolicies

func CSSMOID_CertificatePolicies() CssmData

func CSSMOID_CertificateRevocationList

func CSSMOID_CertificateRevocationList() CssmData

func CSSMOID_ChallengePassword

func CSSMOID_ChallengePassword() CssmData

func CSSMOID_ClientAuth

func CSSMOID_ClientAuth() CssmData

func CSSMOID_CollectiveFacsimileTelephoneNumber

func CSSMOID_CollectiveFacsimileTelephoneNumber() CssmData

func CSSMOID_CollectiveInternationalISDNNumber

func CSSMOID_CollectiveInternationalISDNNumber() CssmData

func CSSMOID_CollectiveOrganizationName

func CSSMOID_CollectiveOrganizationName() CssmData

func CSSMOID_CollectiveOrganizationalUnitName

func CSSMOID_CollectiveOrganizationalUnitName() CssmData

func CSSMOID_CollectivePhysicalDeliveryOfficeName

func CSSMOID_CollectivePhysicalDeliveryOfficeName() CssmData

func CSSMOID_CollectivePostOfficeBox

func CSSMOID_CollectivePostOfficeBox() CssmData

func CSSMOID_CollectivePostalAddress

func CSSMOID_CollectivePostalAddress() CssmData

func CSSMOID_CollectivePostalCode

func CSSMOID_CollectivePostalCode() CssmData

func CSSMOID_CollectiveStateProvinceName

func CSSMOID_CollectiveStateProvinceName() CssmData

func CSSMOID_CollectiveStreetAddress

func CSSMOID_CollectiveStreetAddress() CssmData

func CSSMOID_CollectiveTelephoneNumber

func CSSMOID_CollectiveTelephoneNumber() CssmData

func CSSMOID_CollectiveTelexNumber

func CSSMOID_CollectiveTelexNumber() CssmData

func CSSMOID_CollectiveTelexTerminalIdentifier

func CSSMOID_CollectiveTelexTerminalIdentifier() CssmData

func CSSMOID_CommonName

func CSSMOID_CommonName() CssmData

func CSSMOID_ContentType

func CSSMOID_ContentType() CssmData

func CSSMOID_CounterSignature

func CSSMOID_CounterSignature() CssmData

func CSSMOID_CountryName

func CSSMOID_CountryName() CssmData

func CSSMOID_CrlDistributionPoints

func CSSMOID_CrlDistributionPoints() CssmData

func CSSMOID_CrlNumber

func CSSMOID_CrlNumber() CssmData

func CSSMOID_CrlReason

func CSSMOID_CrlReason() CssmData

func CSSMOID_CrossCertificatePair

func CSSMOID_CrossCertificatePair() CssmData

func CSSMOID_DES_CBC

func CSSMOID_DES_CBC() CssmData

func CSSMOID_DH

func CSSMOID_DH() CssmData

func CSSMOID_DNQualifier

func CSSMOID_DNQualifier() CssmData

func CSSMOID_DOTMAC_CERT

func CSSMOID_DOTMAC_CERT() CssmData

func CSSMOID_DOTMAC_CERT_EMAIL_ENCRYPT

func CSSMOID_DOTMAC_CERT_EMAIL_ENCRYPT() CssmData

func CSSMOID_DOTMAC_CERT_EMAIL_SIGN

func CSSMOID_DOTMAC_CERT_EMAIL_SIGN() CssmData

func CSSMOID_DOTMAC_CERT_EXTENSION

func CSSMOID_DOTMAC_CERT_EXTENSION() CssmData

func CSSMOID_DOTMAC_CERT_IDENTITY

func CSSMOID_DOTMAC_CERT_IDENTITY() CssmData

func CSSMOID_DOTMAC_CERT_POLICY

func CSSMOID_DOTMAC_CERT_POLICY() CssmData

func CSSMOID_DOTMAC_CERT_REQ

func CSSMOID_DOTMAC_CERT_REQ() CssmData

func CSSMOID_DOTMAC_CERT_REQ_ARCHIVE_FETCH

func CSSMOID_DOTMAC_CERT_REQ_ARCHIVE_FETCH() CssmData

func CSSMOID_DOTMAC_CERT_REQ_ARCHIVE_LIST

func CSSMOID_DOTMAC_CERT_REQ_ARCHIVE_LIST() CssmData

func CSSMOID_DOTMAC_CERT_REQ_ARCHIVE_REMOVE

func CSSMOID_DOTMAC_CERT_REQ_ARCHIVE_REMOVE() CssmData

func CSSMOID_DOTMAC_CERT_REQ_ARCHIVE_STORE

func CSSMOID_DOTMAC_CERT_REQ_ARCHIVE_STORE() CssmData

func CSSMOID_DOTMAC_CERT_REQ_EMAIL_ENCRYPT

func CSSMOID_DOTMAC_CERT_REQ_EMAIL_ENCRYPT() CssmData

func CSSMOID_DOTMAC_CERT_REQ_EMAIL_SIGN

func CSSMOID_DOTMAC_CERT_REQ_EMAIL_SIGN() CssmData

func CSSMOID_DOTMAC_CERT_REQ_IDENTITY

func CSSMOID_DOTMAC_CERT_REQ_IDENTITY() CssmData

func CSSMOID_DOTMAC_CERT_REQ_SHARED_SERVICES

func CSSMOID_DOTMAC_CERT_REQ_SHARED_SERVICES() CssmData

func CSSMOID_DOTMAC_CERT_REQ_VALUE_ASYNC

func CSSMOID_DOTMAC_CERT_REQ_VALUE_ASYNC() CssmData

func CSSMOID_DOTMAC_CERT_REQ_VALUE_HOSTNAME

func CSSMOID_DOTMAC_CERT_REQ_VALUE_HOSTNAME() CssmData

func CSSMOID_DOTMAC_CERT_REQ_VALUE_IS_PENDING

func CSSMOID_DOTMAC_CERT_REQ_VALUE_IS_PENDING() CssmData

func CSSMOID_DOTMAC_CERT_REQ_VALUE_PASSWORD

func CSSMOID_DOTMAC_CERT_REQ_VALUE_PASSWORD() CssmData

func CSSMOID_DOTMAC_CERT_REQ_VALUE_RENEW

func CSSMOID_DOTMAC_CERT_REQ_VALUE_RENEW() CssmData

func CSSMOID_DOTMAC_CERT_REQ_VALUE_USERNAME

func CSSMOID_DOTMAC_CERT_REQ_VALUE_USERNAME() CssmData

func CSSMOID_DSA

func CSSMOID_DSA() CssmData

func CSSMOID_DSA_CMS

func CSSMOID_DSA_CMS() CssmData

func CSSMOID_DSA_JDK

func CSSMOID_DSA_JDK() CssmData

func CSSMOID_DeltaCrlIndicator

func CSSMOID_DeltaCrlIndicator() CssmData

func CSSMOID_Description

func CSSMOID_Description() CssmData

func CSSMOID_DestinationIndicator

func CSSMOID_DestinationIndicator() CssmData

func CSSMOID_DistinguishedName

func CSSMOID_DistinguishedName() CssmData

func CSSMOID_DomainComponent

func CSSMOID_DomainComponent() CssmData

func CSSMOID_ECDSA_WithSHA1

func CSSMOID_ECDSA_WithSHA1() CssmData

func CSSMOID_ECDSA_WithSHA224

func CSSMOID_ECDSA_WithSHA224() CssmData

func CSSMOID_ECDSA_WithSHA256

func CSSMOID_ECDSA_WithSHA256() CssmData

func CSSMOID_ECDSA_WithSHA384

func CSSMOID_ECDSA_WithSHA384() CssmData

func CSSMOID_ECDSA_WithSHA512

func CSSMOID_ECDSA_WithSHA512() CssmData

func CSSMOID_ECDSA_WithSpecified

func CSSMOID_ECDSA_WithSpecified() CssmData

func CSSMOID_EKU_IPSec

func CSSMOID_EKU_IPSec() CssmData

func CSSMOID_ETSI_QCS_QC_COMPLIANCE

func CSSMOID_ETSI_QCS_QC_COMPLIANCE() CssmData

func CSSMOID_ETSI_QCS_QC_LIMIT_VALUE

func CSSMOID_ETSI_QCS_QC_LIMIT_VALUE() CssmData

func CSSMOID_ETSI_QCS_QC_RETENTION

func CSSMOID_ETSI_QCS_QC_RETENTION() CssmData

func CSSMOID_ETSI_QCS_QC_SSCD

func CSSMOID_ETSI_QCS_QC_SSCD() CssmData

func CSSMOID_EmailAddress

func CSSMOID_EmailAddress() CssmData

func CSSMOID_EmailProtection

func CSSMOID_EmailProtection() CssmData

func CSSMOID_EnhancedSearchGuide

func CSSMOID_EnhancedSearchGuide() CssmData

func CSSMOID_ExtendedCertificateAttributes

func CSSMOID_ExtendedCertificateAttributes() CssmData

func CSSMOID_ExtendedKeyUsage

func CSSMOID_ExtendedKeyUsage() CssmData

func CSSMOID_ExtendedKeyUsageAny

func CSSMOID_ExtendedKeyUsageAny() CssmData

func CSSMOID_ExtendedUseCodeSigning

func CSSMOID_ExtendedUseCodeSigning() CssmData

func CSSMOID_FacsimileTelephoneNumber

func CSSMOID_FacsimileTelephoneNumber() CssmData

func CSSMOID_GenerationQualifier

func CSSMOID_GenerationQualifier() CssmData

func CSSMOID_GivenName

func CSSMOID_GivenName() CssmData

func CSSMOID_HoldInstructionCode

func CSSMOID_HoldInstructionCode() CssmData

func CSSMOID_HouseIdentifier

func CSSMOID_HouseIdentifier() CssmData

func CSSMOID_InhibitAnyPolicy

func CSSMOID_InhibitAnyPolicy() CssmData

func CSSMOID_Initials

func CSSMOID_Initials() CssmData

func CSSMOID_InternationalISDNNumber

func CSSMOID_InternationalISDNNumber() CssmData

func CSSMOID_InvalidityDate

func CSSMOID_InvalidityDate() CssmData

func CSSMOID_IssuerAltName

func CSSMOID_IssuerAltName() CssmData

func CSSMOID_IssuingDistributionPoint

func CSSMOID_IssuingDistributionPoint() CssmData

func CSSMOID_IssuingDistributionPoints

func CSSMOID_IssuingDistributionPoints() CssmData

func CSSMOID_KERBv5_PKINIT_AUTH_DATA

func CSSMOID_KERBv5_PKINIT_AUTH_DATA() CssmData

func CSSMOID_KERBv5_PKINIT_DH_KEY_DATA

func CSSMOID_KERBv5_PKINIT_DH_KEY_DATA() CssmData

func CSSMOID_KERBv5_PKINIT_KP_CLIENT_AUTH

func CSSMOID_KERBv5_PKINIT_KP_CLIENT_AUTH() CssmData

func CSSMOID_KERBv5_PKINIT_KP_KDC

func CSSMOID_KERBv5_PKINIT_KP_KDC() CssmData

func CSSMOID_KERBv5_PKINIT_RKEY_DATA

func CSSMOID_KERBv5_PKINIT_RKEY_DATA() CssmData

func CSSMOID_KeyUsage

func CSSMOID_KeyUsage() CssmData

func CSSMOID_KnowledgeInformation

func CSSMOID_KnowledgeInformation() CssmData

func CSSMOID_LocalityName

func CSSMOID_LocalityName() CssmData

func CSSMOID_MACAPPSTORE_CERT_POLICY

func CSSMOID_MACAPPSTORE_CERT_POLICY() CssmData

func CSSMOID_MACAPPSTORE_RECEIPT_CERT_POLICY

func CSSMOID_MACAPPSTORE_RECEIPT_CERT_POLICY() CssmData

func CSSMOID_MD2

func CSSMOID_MD2() CssmData

func CSSMOID_MD2WithRSA

func CSSMOID_MD2WithRSA() CssmData

func CSSMOID_MD4

func CSSMOID_MD4() CssmData

func CSSMOID_MD4WithRSA

func CSSMOID_MD4WithRSA() CssmData

func CSSMOID_MD5

func CSSMOID_MD5() CssmData

func CSSMOID_MD5WithRSA

func CSSMOID_MD5WithRSA() CssmData

func CSSMOID_MOBILE_STORE_SIGNING_POLICY

func CSSMOID_MOBILE_STORE_SIGNING_POLICY() CssmData

func CSSMOID_Member

func CSSMOID_Member() CssmData

func CSSMOID_MessageDigest

func CSSMOID_MessageDigest() CssmData

func CSSMOID_MicrosoftSGC

func CSSMOID_MicrosoftSGC() CssmData

func CSSMOID_Name

func CSSMOID_Name() CssmData

func CSSMOID_NameConstraints

func CSSMOID_NameConstraints() CssmData

func CSSMOID_NetscapeCertSequence

func CSSMOID_NetscapeCertSequence() CssmData

func CSSMOID_NetscapeCertType

func CSSMOID_NetscapeCertType() CssmData

func CSSMOID_NetscapeSGC

func CSSMOID_NetscapeSGC() CssmData

func CSSMOID_OAEP_ID_PSPECIFIED

func CSSMOID_OAEP_ID_PSPECIFIED() CssmData

func CSSMOID_OAEP_MGF1

func CSSMOID_OAEP_MGF1() CssmData

func CSSMOID_OCSPSigning

func CSSMOID_OCSPSigning() CssmData

func CSSMOID_OID_QCS_SYNTAX_V1

func CSSMOID_OID_QCS_SYNTAX_V1() CssmData

func CSSMOID_OID_QCS_SYNTAX_V2

func CSSMOID_OID_QCS_SYNTAX_V2() CssmData

func CSSMOID_ObjectClass

func CSSMOID_ObjectClass() CssmData

func CSSMOID_OrganizationName

func CSSMOID_OrganizationName() CssmData

func CSSMOID_OrganizationalUnitName

func CSSMOID_OrganizationalUnitName() CssmData

func CSSMOID_Owner

func CSSMOID_Owner() CssmData

func CSSMOID_PDA_COUNTRY_CITIZEN

func CSSMOID_PDA_COUNTRY_CITIZEN() CssmData

func CSSMOID_PDA_COUNTRY_RESIDENCE

func CSSMOID_PDA_COUNTRY_RESIDENCE() CssmData

func CSSMOID_PDA_DATE_OF_BIRTH

func CSSMOID_PDA_DATE_OF_BIRTH() CssmData

func CSSMOID_PDA_GENDER

func CSSMOID_PDA_GENDER() CssmData

func CSSMOID_PDA_PLACE_OF_BIRTH

func CSSMOID_PDA_PLACE_OF_BIRTH() CssmData

func CSSMOID_PKCS3

func CSSMOID_PKCS3() CssmData

func CSSMOID_PKCS5_DES_EDE3_CBC

func CSSMOID_PKCS5_DES_EDE3_CBC() CssmData

func CSSMOID_PKCS5_DIGEST_ALG

func CSSMOID_PKCS5_DIGEST_ALG() CssmData

func CSSMOID_PKCS5_ENCRYPT_ALG

func CSSMOID_PKCS5_ENCRYPT_ALG() CssmData

func CSSMOID_PKCS5_HMAC_SHA1

func CSSMOID_PKCS5_HMAC_SHA1() CssmData

func CSSMOID_PKCS5_PBES2

func CSSMOID_PKCS5_PBES2() CssmData

func CSSMOID_PKCS5_PBKDF2

func CSSMOID_PKCS5_PBKDF2() CssmData

func CSSMOID_PKCS5_PBMAC1

func CSSMOID_PKCS5_PBMAC1() CssmData

func CSSMOID_PKCS5_RC2_CBC

func CSSMOID_PKCS5_RC2_CBC() CssmData

func CSSMOID_PKCS5_RC5_CBC

func CSSMOID_PKCS5_RC5_CBC() CssmData

func CSSMOID_PKCS5_pbeWithMD2AndDES

func CSSMOID_PKCS5_pbeWithMD2AndDES() CssmData

func CSSMOID_PKCS5_pbeWithMD2AndRC2

func CSSMOID_PKCS5_pbeWithMD2AndRC2() CssmData

func CSSMOID_PKCS5_pbeWithMD5AndDES

func CSSMOID_PKCS5_pbeWithMD5AndDES() CssmData

func CSSMOID_PKCS5_pbeWithMD5AndRC2

func CSSMOID_PKCS5_pbeWithMD5AndRC2() CssmData

func CSSMOID_PKCS5_pbeWithSHA1AndDES

func CSSMOID_PKCS5_pbeWithSHA1AndDES() CssmData

func CSSMOID_PKCS5_pbeWithSHA1AndRC2

func CSSMOID_PKCS5_pbeWithSHA1AndRC2() CssmData

func CSSMOID_PKCS7_Data

func CSSMOID_PKCS7_Data() CssmData

func CSSMOID_PKCS7_DataWithAttributes

func CSSMOID_PKCS7_DataWithAttributes() CssmData

func CSSMOID_PKCS7_DigestedData

func CSSMOID_PKCS7_DigestedData() CssmData

func CSSMOID_PKCS7_EncryptedData

func CSSMOID_PKCS7_EncryptedData() CssmData

func CSSMOID_PKCS7_EncryptedPrivateKeyInfo

func CSSMOID_PKCS7_EncryptedPrivateKeyInfo() CssmData

func CSSMOID_PKCS7_EnvelopedData

func CSSMOID_PKCS7_EnvelopedData() CssmData

func CSSMOID_PKCS7_SignedAndEnvelopedData

func CSSMOID_PKCS7_SignedAndEnvelopedData() CssmData

func CSSMOID_PKCS7_SignedData

func CSSMOID_PKCS7_SignedData() CssmData

func CSSMOID_PKCS9_CertTypes

func CSSMOID_PKCS9_CertTypes() CssmData

func CSSMOID_PKCS9_CrlTypes

func CSSMOID_PKCS9_CrlTypes() CssmData

func CSSMOID_PKCS9_FriendlyName

func CSSMOID_PKCS9_FriendlyName() CssmData

func CSSMOID_PKCS9_Id_Ct_TSTInfo

func CSSMOID_PKCS9_Id_Ct_TSTInfo() CssmData

func CSSMOID_PKCS9_LocalKeyId

func CSSMOID_PKCS9_LocalKeyId() CssmData

func CSSMOID_PKCS9_SdsiCertificate

func CSSMOID_PKCS9_SdsiCertificate() CssmData

func CSSMOID_PKCS9_TimeStampToken

func CSSMOID_PKCS9_TimeStampToken() CssmData

func CSSMOID_PKCS9_X509Certificate

func CSSMOID_PKCS9_X509Certificate() CssmData

func CSSMOID_PKCS9_X509Crl

func CSSMOID_PKCS9_X509Crl() CssmData

func CSSMOID_PKCS12_certBag

func CSSMOID_PKCS12_certBag() CssmData

func CSSMOID_PKCS12_crlBag

func CSSMOID_PKCS12_crlBag() CssmData

func CSSMOID_PKCS12_keyBag

func CSSMOID_PKCS12_keyBag() CssmData

func CSSMOID_PKCS12_pbeWithSHAAnd2Key3DESCBC

func CSSMOID_PKCS12_pbeWithSHAAnd2Key3DESCBC() CssmData

func CSSMOID_PKCS12_pbeWithSHAAnd3Key3DESCBC

func CSSMOID_PKCS12_pbeWithSHAAnd3Key3DESCBC() CssmData

func CSSMOID_PKCS12_pbeWithSHAAnd40BitRC4

func CSSMOID_PKCS12_pbeWithSHAAnd40BitRC4() CssmData

func CSSMOID_PKCS12_pbeWithSHAAnd128BitRC2CBC

func CSSMOID_PKCS12_pbeWithSHAAnd128BitRC2CBC() CssmData

func CSSMOID_PKCS12_pbeWithSHAAnd128BitRC4

func CSSMOID_PKCS12_pbeWithSHAAnd128BitRC4() CssmData

func CSSMOID_PKCS12_pbewithSHAAnd40BitRC2CBC

func CSSMOID_PKCS12_pbewithSHAAnd40BitRC2CBC() CssmData

func CSSMOID_PKCS12_safeContentsBag

func CSSMOID_PKCS12_safeContentsBag() CssmData

func CSSMOID_PKCS12_secretBag

func CSSMOID_PKCS12_secretBag() CssmData

func CSSMOID_PKCS12_shroudedKeyBag

func CSSMOID_PKCS12_shroudedKeyBag() CssmData

func CSSMOID_PKIX_OCSP

func CSSMOID_PKIX_OCSP() CssmData

func CSSMOID_PKIX_OCSP_ARCHIVE_CUTOFF

func CSSMOID_PKIX_OCSP_ARCHIVE_CUTOFF() CssmData

func CSSMOID_PKIX_OCSP_BASIC

func CSSMOID_PKIX_OCSP_BASIC() CssmData

func CSSMOID_PKIX_OCSP_CRL

func CSSMOID_PKIX_OCSP_CRL() CssmData

func CSSMOID_PKIX_OCSP_NOCHECK

func CSSMOID_PKIX_OCSP_NOCHECK() CssmData

func CSSMOID_PKIX_OCSP_NONCE

func CSSMOID_PKIX_OCSP_NONCE() CssmData

func CSSMOID_PKIX_OCSP_RESPONSE

func CSSMOID_PKIX_OCSP_RESPONSE() CssmData

func CSSMOID_PKIX_OCSP_SERVICE_LOCATOR

func CSSMOID_PKIX_OCSP_SERVICE_LOCATOR() CssmData

func CSSMOID_PhysicalDeliveryOfficeName

func CSSMOID_PhysicalDeliveryOfficeName() CssmData

func CSSMOID_PolicyConstraints

func CSSMOID_PolicyConstraints() CssmData

func CSSMOID_PolicyMappings

func CSSMOID_PolicyMappings() CssmData

func CSSMOID_PostOfficeBox

func CSSMOID_PostOfficeBox() CssmData

func CSSMOID_PostalAddress

func CSSMOID_PostalAddress() CssmData

func CSSMOID_PostalCode

func CSSMOID_PostalCode() CssmData

func CSSMOID_PreferredDeliveryMethod

func CSSMOID_PreferredDeliveryMethod() CssmData

func CSSMOID_PresentationAddress

func CSSMOID_PresentationAddress() CssmData

func CSSMOID_PrivateKeyUsagePeriod

func CSSMOID_PrivateKeyUsagePeriod() CssmData

func CSSMOID_ProtocolInformation

func CSSMOID_ProtocolInformation() CssmData

func CSSMOID_QC_Statements

func CSSMOID_QC_Statements() CssmData

func CSSMOID_QT_CPS

func CSSMOID_QT_CPS() CssmData

func CSSMOID_QT_UNOTICE

func CSSMOID_QT_UNOTICE() CssmData

func CSSMOID_RSA

func CSSMOID_RSA() CssmData

func CSSMOID_RSAWithOAEP

func CSSMOID_RSAWithOAEP() CssmData

func CSSMOID_RegisteredAddress

func CSSMOID_RegisteredAddress() CssmData

func CSSMOID_RoleOccupant

func CSSMOID_RoleOccupant() CssmData

func CSSMOID_SHA1

func CSSMOID_SHA1() CssmData

func CSSMOID_SHA1WithDSA

func CSSMOID_SHA1WithDSA() CssmData

func CSSMOID_SHA1WithDSA_CMS

func CSSMOID_SHA1WithDSA_CMS() CssmData

func CSSMOID_SHA1WithDSA_JDK

func CSSMOID_SHA1WithDSA_JDK() CssmData

func CSSMOID_SHA1WithRSA

func CSSMOID_SHA1WithRSA() CssmData

func CSSMOID_SHA1WithRSA_OIW

func CSSMOID_SHA1WithRSA_OIW() CssmData

func CSSMOID_SHA224

func CSSMOID_SHA224() CssmData

func CSSMOID_SHA224WithRSA

func CSSMOID_SHA224WithRSA() CssmData

func CSSMOID_SHA256

func CSSMOID_SHA256() CssmData

func CSSMOID_SHA256WithRSA

func CSSMOID_SHA256WithRSA() CssmData

func CSSMOID_SHA384

func CSSMOID_SHA384() CssmData

func CSSMOID_SHA384WithRSA

func CSSMOID_SHA384WithRSA() CssmData

func CSSMOID_SHA512

func CSSMOID_SHA512() CssmData

func CSSMOID_SHA512WithRSA

func CSSMOID_SHA512WithRSA() CssmData

func CSSMOID_SearchGuide

func CSSMOID_SearchGuide() CssmData

func CSSMOID_SeeAlso

func CSSMOID_SeeAlso() CssmData

func CSSMOID_SerialNumber

func CSSMOID_SerialNumber() CssmData

func CSSMOID_ServerAuth

func CSSMOID_ServerAuth() CssmData

func CSSMOID_SigningTime

func CSSMOID_SigningTime() CssmData

func CSSMOID_StateProvinceName

func CSSMOID_StateProvinceName() CssmData

func CSSMOID_StreetAddress

func CSSMOID_StreetAddress() CssmData

func CSSMOID_SubjectAltName

func CSSMOID_SubjectAltName() CssmData

func CSSMOID_SubjectDirectoryAttributes

func CSSMOID_SubjectDirectoryAttributes() CssmData

func CSSMOID_SubjectEmailAddress

func CSSMOID_SubjectEmailAddress() CssmData

func CSSMOID_SubjectInfoAccess

func CSSMOID_SubjectInfoAccess() CssmData

func CSSMOID_SubjectKeyIdentifier

func CSSMOID_SubjectKeyIdentifier() CssmData

func CSSMOID_SubjectPicture

func CSSMOID_SubjectPicture() CssmData

func CSSMOID_SubjectSignatureBitmap

func CSSMOID_SubjectSignatureBitmap() CssmData

func CSSMOID_SupportedApplicationContext

func CSSMOID_SupportedApplicationContext() CssmData

func CSSMOID_Surname

func CSSMOID_Surname() CssmData

func CSSMOID_TEST_MOBILE_STORE_SIGNING_POLICY

func CSSMOID_TEST_MOBILE_STORE_SIGNING_POLICY() CssmData

func CSSMOID_TelephoneNumber

func CSSMOID_TelephoneNumber() CssmData

func CSSMOID_TelexNumber

func CSSMOID_TelexNumber() CssmData

func CSSMOID_TelexTerminalIdentifier

func CSSMOID_TelexTerminalIdentifier() CssmData

func CSSMOID_TimeStamping

func CSSMOID_TimeStamping() CssmData

func CSSMOID_Title

func CSSMOID_Title() CssmData

func CSSMOID_UniqueIdentifier

func CSSMOID_UniqueIdentifier() CssmData

func CSSMOID_UniqueMember

func CSSMOID_UniqueMember() CssmData

func CSSMOID_UnstructuredAddress

func CSSMOID_UnstructuredAddress() CssmData

func CSSMOID_UnstructuredName

func CSSMOID_UnstructuredName() CssmData

func CSSMOID_UseExemptions

func CSSMOID_UseExemptions() CssmData

func CSSMOID_UserCertificate

func CSSMOID_UserCertificate() CssmData

func CSSMOID_UserID

func CSSMOID_UserID() CssmData

func CSSMOID_UserPassword

func CSSMOID_UserPassword() CssmData

func CSSMOID_X9_62

func CSSMOID_X9_62() CssmData

func CSSMOID_X9_62_C_TwoCurve

func CSSMOID_X9_62_C_TwoCurve() CssmData

func CSSMOID_X9_62_EllCurve

func CSSMOID_X9_62_EllCurve() CssmData

func CSSMOID_X9_62_FieldType

func CSSMOID_X9_62_FieldType() CssmData

func CSSMOID_X9_62_PrimeCurve

func CSSMOID_X9_62_PrimeCurve() CssmData

func CSSMOID_X9_62_PubKeyType

func CSSMOID_X9_62_PubKeyType() CssmData

func CSSMOID_X9_62_SigType

func CSSMOID_X9_62_SigType() CssmData

func CSSMOID_X509V1CRLIssuerNameCStruct

func CSSMOID_X509V1CRLIssuerNameCStruct() CssmData

func CSSMOID_X509V1CRLIssuerNameLDAP

func CSSMOID_X509V1CRLIssuerNameLDAP() CssmData

func CSSMOID_X509V1CRLIssuerStruct

func CSSMOID_X509V1CRLIssuerStruct() CssmData

func CSSMOID_X509V1CRLNextUpdate

func CSSMOID_X509V1CRLNextUpdate() CssmData

func CSSMOID_X509V1CRLNumberOfRevokedCertEntries

func CSSMOID_X509V1CRLNumberOfRevokedCertEntries() CssmData

func CSSMOID_X509V1CRLRevokedCertificatesCStruct

func CSSMOID_X509V1CRLRevokedCertificatesCStruct() CssmData

func CSSMOID_X509V1CRLRevokedCertificatesStruct

func CSSMOID_X509V1CRLRevokedCertificatesStruct() CssmData

func CSSMOID_X509V1CRLRevokedEntryCStruct

func CSSMOID_X509V1CRLRevokedEntryCStruct() CssmData

func CSSMOID_X509V1CRLRevokedEntryRevocationDate

func CSSMOID_X509V1CRLRevokedEntryRevocationDate() CssmData

func CSSMOID_X509V1CRLRevokedEntrySerialNumber

func CSSMOID_X509V1CRLRevokedEntrySerialNumber() CssmData

func CSSMOID_X509V1CRLRevokedEntryStruct

func CSSMOID_X509V1CRLRevokedEntryStruct() CssmData

func CSSMOID_X509V1CRLThisUpdate

func CSSMOID_X509V1CRLThisUpdate() CssmData

func CSSMOID_X509V1CertificateIssuerUniqueId

func CSSMOID_X509V1CertificateIssuerUniqueId() CssmData

func CSSMOID_X509V1CertificateSubjectUniqueId

func CSSMOID_X509V1CertificateSubjectUniqueId() CssmData

func CSSMOID_X509V1IssuerName

func CSSMOID_X509V1IssuerName() CssmData

func CSSMOID_X509V1IssuerNameCStruct

func CSSMOID_X509V1IssuerNameCStruct() CssmData

func CSSMOID_X509V1IssuerNameLDAP

func CSSMOID_X509V1IssuerNameLDAP() CssmData

func CSSMOID_X509V1IssuerNameStd

func CSSMOID_X509V1IssuerNameStd() CssmData

func CSSMOID_X509V1SerialNumber

func CSSMOID_X509V1SerialNumber() CssmData

func CSSMOID_X509V1Signature

func CSSMOID_X509V1Signature() CssmData

func CSSMOID_X509V1SignatureAlgorithm

func CSSMOID_X509V1SignatureAlgorithm() CssmData

func CSSMOID_X509V1SignatureAlgorithmParameters

func CSSMOID_X509V1SignatureAlgorithmParameters() CssmData

func CSSMOID_X509V1SignatureAlgorithmTBS

func CSSMOID_X509V1SignatureAlgorithmTBS() CssmData

func CSSMOID_X509V1SignatureCStruct

func CSSMOID_X509V1SignatureCStruct() CssmData

func CSSMOID_X509V1SignatureStruct

func CSSMOID_X509V1SignatureStruct() CssmData

func CSSMOID_X509V1SubjectName

func CSSMOID_X509V1SubjectName() CssmData

func CSSMOID_X509V1SubjectNameCStruct

func CSSMOID_X509V1SubjectNameCStruct() CssmData

func CSSMOID_X509V1SubjectNameLDAP

func CSSMOID_X509V1SubjectNameLDAP() CssmData

func CSSMOID_X509V1SubjectNameStd

func CSSMOID_X509V1SubjectNameStd() CssmData

func CSSMOID_X509V1SubjectPublicKey

func CSSMOID_X509V1SubjectPublicKey() CssmData

func CSSMOID_X509V1SubjectPublicKeyAlgorithm

func CSSMOID_X509V1SubjectPublicKeyAlgorithm() CssmData

func CSSMOID_X509V1SubjectPublicKeyAlgorithmParameters

func CSSMOID_X509V1SubjectPublicKeyAlgorithmParameters() CssmData

func CSSMOID_X509V1SubjectPublicKeyCStruct

func CSSMOID_X509V1SubjectPublicKeyCStruct() CssmData

func CSSMOID_X509V1ValidityNotAfter

func CSSMOID_X509V1ValidityNotAfter() CssmData

func CSSMOID_X509V1ValidityNotBefore

func CSSMOID_X509V1ValidityNotBefore() CssmData

func CSSMOID_X509V1Version

func CSSMOID_X509V1Version() CssmData

func CSSMOID_X509V2CRLAllExtensionsCStruct

func CSSMOID_X509V2CRLAllExtensionsCStruct() CssmData

func CSSMOID_X509V2CRLAllExtensionsStruct

func CSSMOID_X509V2CRLAllExtensionsStruct() CssmData

func CSSMOID_X509V2CRLExtensionCritical

func CSSMOID_X509V2CRLExtensionCritical() CssmData

func CSSMOID_X509V2CRLExtensionId

func CSSMOID_X509V2CRLExtensionId() CssmData

func CSSMOID_X509V2CRLExtensionType

func CSSMOID_X509V2CRLExtensionType() CssmData

func CSSMOID_X509V2CRLNumberOfExtensions

func CSSMOID_X509V2CRLNumberOfExtensions() CssmData

func CSSMOID_X509V2CRLRevokedEntryAllExtensionsCStruct

func CSSMOID_X509V2CRLRevokedEntryAllExtensionsCStruct() CssmData

func CSSMOID_X509V2CRLRevokedEntryAllExtensionsStruct

func CSSMOID_X509V2CRLRevokedEntryAllExtensionsStruct() CssmData

func CSSMOID_X509V2CRLRevokedEntryExtensionCritical

func CSSMOID_X509V2CRLRevokedEntryExtensionCritical() CssmData

func CSSMOID_X509V2CRLRevokedEntryExtensionId

func CSSMOID_X509V2CRLRevokedEntryExtensionId() CssmData

func CSSMOID_X509V2CRLRevokedEntryExtensionType

func CSSMOID_X509V2CRLRevokedEntryExtensionType() CssmData

func CSSMOID_X509V2CRLRevokedEntryExtensionValue

func CSSMOID_X509V2CRLRevokedEntryExtensionValue() CssmData

func CSSMOID_X509V2CRLRevokedEntryNumberOfExtensions

func CSSMOID_X509V2CRLRevokedEntryNumberOfExtensions() CssmData

func CSSMOID_X509V2CRLRevokedEntrySingleExtensionCStruct

func CSSMOID_X509V2CRLRevokedEntrySingleExtensionCStruct() CssmData

func CSSMOID_X509V2CRLRevokedEntrySingleExtensionStruct

func CSSMOID_X509V2CRLRevokedEntrySingleExtensionStruct() CssmData

func CSSMOID_X509V2CRLSignedCrlCStruct

func CSSMOID_X509V2CRLSignedCrlCStruct() CssmData

func CSSMOID_X509V2CRLSignedCrlStruct

func CSSMOID_X509V2CRLSignedCrlStruct() CssmData

func CSSMOID_X509V2CRLSingleExtensionCStruct

func CSSMOID_X509V2CRLSingleExtensionCStruct() CssmData

func CSSMOID_X509V2CRLSingleExtensionStruct

func CSSMOID_X509V2CRLSingleExtensionStruct() CssmData

func CSSMOID_X509V2CRLTbsCertListCStruct

func CSSMOID_X509V2CRLTbsCertListCStruct() CssmData

func CSSMOID_X509V2CRLTbsCertListStruct

func CSSMOID_X509V2CRLTbsCertListStruct() CssmData

func CSSMOID_X509V2CRLVersion

func CSSMOID_X509V2CRLVersion() CssmData

func CSSMOID_X509V3Certificate

func CSSMOID_X509V3Certificate() CssmData

func CSSMOID_X509V3CertificateCStruct

func CSSMOID_X509V3CertificateCStruct() CssmData

func CSSMOID_X509V3CertificateExtensionCStruct

func CSSMOID_X509V3CertificateExtensionCStruct() CssmData

func CSSMOID_X509V3CertificateExtensionCritical

func CSSMOID_X509V3CertificateExtensionCritical() CssmData

func CSSMOID_X509V3CertificateExtensionId

func CSSMOID_X509V3CertificateExtensionId() CssmData

func CSSMOID_X509V3CertificateExtensionStruct

func CSSMOID_X509V3CertificateExtensionStruct() CssmData

func CSSMOID_X509V3CertificateExtensionType

func CSSMOID_X509V3CertificateExtensionType() CssmData

func CSSMOID_X509V3CertificateExtensionValue

func CSSMOID_X509V3CertificateExtensionValue() CssmData

func CSSMOID_X509V3CertificateExtensionsCStruct

func CSSMOID_X509V3CertificateExtensionsCStruct() CssmData

func CSSMOID_X509V3CertificateExtensionsStruct

func CSSMOID_X509V3CertificateExtensionsStruct() CssmData

func CSSMOID_X509V3CertificateNumberOfExtensions

func CSSMOID_X509V3CertificateNumberOfExtensions() CssmData

func CSSMOID_X509V3SignedCertificate

func CSSMOID_X509V3SignedCertificate() CssmData

func CSSMOID_X509V3SignedCertificateCStruct

func CSSMOID_X509V3SignedCertificateCStruct() CssmData

func CSSMOID_X_121Address

func CSSMOID_X_121Address() CssmData

func CSSMOID_ecPublicKey

func CSSMOID_ecPublicKey() CssmData

func CSSMOID_secp112r1

func CSSMOID_secp112r1() CssmData

func CSSMOID_secp112r2

func CSSMOID_secp112r2() CssmData

func CSSMOID_secp128r1

func CSSMOID_secp128r1() CssmData

func CSSMOID_secp128r2

func CSSMOID_secp128r2() CssmData

func CSSMOID_secp160k1

func CSSMOID_secp160k1() CssmData

func CSSMOID_secp160r1

func CSSMOID_secp160r1() CssmData

func CSSMOID_secp160r2

func CSSMOID_secp160r2() CssmData

func CSSMOID_secp192k1

func CSSMOID_secp192k1() CssmData

func CSSMOID_secp192r1

func CSSMOID_secp192r1() CssmData

func CSSMOID_secp224k1

func CSSMOID_secp224k1() CssmData

func CSSMOID_secp224r1

func CSSMOID_secp224r1() CssmData

func CSSMOID_secp256k1

func CSSMOID_secp256k1() CssmData

func CSSMOID_secp256r1

func CSSMOID_secp256r1() CssmData

func CSSMOID_secp384r1

func CSSMOID_secp384r1() CssmData

func CSSMOID_secp521r1

func CSSMOID_secp521r1() CssmData

func CSSMOID_sect113r1

func CSSMOID_sect113r1() CssmData

func CSSMOID_sect113r2

func CSSMOID_sect113r2() CssmData

func CSSMOID_sect131r1

func CSSMOID_sect131r1() CssmData

func CSSMOID_sect131r2

func CSSMOID_sect131r2() CssmData

func CSSMOID_sect163k1

func CSSMOID_sect163k1() CssmData

func CSSMOID_sect163r1

func CSSMOID_sect163r1() CssmData

func CSSMOID_sect163r2

func CSSMOID_sect163r2() CssmData

func CSSMOID_sect193r1

func CSSMOID_sect193r1() CssmData

func CSSMOID_sect193r2

func CSSMOID_sect193r2() CssmData

func CSSMOID_sect233k1

func CSSMOID_sect233k1() CssmData

func CSSMOID_sect233r1

func CSSMOID_sect233r1() CssmData

func CSSMOID_sect239k1

func CSSMOID_sect239k1() CssmData

func CSSMOID_sect283k1

func CSSMOID_sect283k1() CssmData

func CSSMOID_sect283r1

func CSSMOID_sect283r1() CssmData

func CSSMOID_sect409k1

func CSSMOID_sect409k1() CssmData

func CSSMOID_sect409r1

func CSSMOID_sect409r1() CssmData

func CSSMOID_sect571k1

func CSSMOID_sect571k1() CssmData

func CSSMOID_sect571r1

func CSSMOID_sect571r1() CssmData

func CssmAlgToOid

func CssmAlgToOid(algId uint32) *CssmData

C function: cssmAlgToOid

type CssmDate

type CssmDate struct {
	Year  [4]uint8
	Month [2]uint8
	Day   [2]uint8
}

C struct: cssm_date

type CssmDbAttributeData

type CssmDbAttributeData struct {
	Info           CssmDbAttributeInfo
	NumberOfValues uint32
	Value          *CssmData
}

C struct: cssm_db_attribute_data

type CssmDbAttributeInfo

type CssmDbAttributeInfo struct {
	AttributeNameFormat uint32
	Label               unsafe.Pointer
	AttributeFormat     uint32
}

C struct: cssm_db_attribute_info

type CssmDbIndexInfo

type CssmDbIndexInfo struct {
	IndexType           uint32
	IndexedDataLocation uint32
	Info                CssmDbAttributeInfo
}

C struct: cssm_db_index_info

type CssmDbParsingModuleInfo

type CssmDbParsingModuleInfo struct {
	RecordType          uint32
	ModuleSubserviceUid CssmSubserviceUid
}

C struct: cssm_db_parsing_module_info

type CssmDbRecordAttributeData

type CssmDbRecordAttributeData struct {
	DataRecordType      uint32
	SemanticInformation uint32
	NumberOfAttributes  uint32
	AttributeData       *CssmDbAttributeData
}

C struct: cssm_db_record_attribute_data

type CssmDbRecordAttributeInfo

type CssmDbRecordAttributeInfo struct {
	DataRecordType     uint32
	NumberOfAttributes uint32
	AttributeInfo      *CssmDbAttributeInfo
}

C struct: cssm_db_record_attribute_info

type CssmDbRecordIndexInfo

type CssmDbRecordIndexInfo struct {
	DataRecordType  uint32
	NumberOfIndexes uint32
	IndexInfo       *CssmDbIndexInfo
}

C struct: cssm_db_record_index_info

type CssmDbSchemaAttributeInfo

type CssmDbSchemaAttributeInfo struct {
	AttributeId     uint32
	AttributeName   string
	AttributeNameID CssmData
	DataType        uint32
}

C struct: cssm_db_schema_attribute_info

type CssmDbSchemaIndexInfo

type CssmDbSchemaIndexInfo struct {
	AttributeId         uint32
	IndexId             uint32
	IndexType           uint32
	IndexedDataLocation uint32
}

C struct: cssm_db_schema_index_info

type CssmDbUniqueRecord

type CssmDbUniqueRecord struct {
	RecordLocator    CssmDbIndexInfo
	RecordIdentifier CssmData
}

C struct: cssm_db_unique_record

type CssmDbinfo

type CssmDbinfo struct {
	NumberOfRecordTypes   uint32
	DefaultParsingModules *CssmDbParsingModuleInfo
	RecordAttributeNames  *CssmDbRecordAttributeInfo
	RecordIndexes         *CssmDbRecordIndexInfo
	IsLocal               int32
	AccessPath            string
	Reserved              unsafe.Pointer
}

C struct: cssm_dbinfo

type CssmDlDbHandle

type CssmDlDbHandle struct {
	DLHandle int
	DBHandle int
}

C struct: cssm_dl_db_handle

type CssmDlDbList

type CssmDlDbList struct {
	NumHandles uint32
	DLDBHandle *CssmDlDbHandle
}

C struct: cssm_dl_db_list

type CssmDlPkcs11Attributes

type CssmDlPkcs11Attributes struct {
	DeviceAccessFlags uint32
}

C struct: cssm_dl_pkcs11_attributes

type CssmEncodedCert

type CssmEncodedCert struct {
	CertType     uint32
	CertEncoding uint32
	CertBlob     CssmData
}

C struct: cssm_encoded_cert

type CssmEncodedCrl

type CssmEncodedCrl struct {
	CrlType     uint32
	CrlEncoding uint32
	CrlBlob     CssmData
}

C struct: cssm_encoded_crl

type CssmEvidence

type CssmEvidence struct {
	EvidenceForm uint32
	Evidence     unsafe.Pointer
}

C struct: cssm_evidence

type CssmField

type CssmField struct {
	FieldOid   CssmData
	FieldValue CssmData
}

C struct: cssm_field

type CssmFieldgroup

type CssmFieldgroup struct {
	NumberOfFields int
	Fields         *CssmField
}

C struct: cssm_fieldgroup

type CssmFuncNameAddr

type CssmFuncNameAddr struct {
	Name    [68]int8
	Address unsafe.Pointer
}

C struct: cssm_func_name_addr

type CssmGuid

type CssmGuid struct {
	Data1 uint32
	Data2 uint16
	Data3 uint16
	Data4 [8]uint8
}

C struct: cssm_guid

func GGuidAppleCSP

func GGuidAppleCSP() CssmGuid

func GGuidAppleCSPDL

func GGuidAppleCSPDL() CssmGuid

func GGuidAppleDotMacDL

func GGuidAppleDotMacDL() CssmGuid

func GGuidAppleDotMacTP

func GGuidAppleDotMacTP() CssmGuid

func GGuidAppleFileDL

func GGuidAppleFileDL() CssmGuid

func GGuidAppleLDAPDL

func GGuidAppleLDAPDL() CssmGuid

func GGuidAppleSdCSPDL

func GGuidAppleSdCSPDL() CssmGuid

func GGuidAppleX509CL

func GGuidAppleX509CL() CssmGuid

func GGuidAppleX509TP

func GGuidAppleX509TP() CssmGuid

func GGuidCssm

func GGuidCssm() CssmGuid

type CssmKeaDeriveParams

type CssmKeaDeriveParams struct {
	Rb CssmData
	Yb CssmData
}

C struct: cssm_kea_derive_params

type CssmKey

type CssmKey struct {
	KeyHeader CssmKeyheader
	KeyData   CssmData
}

C struct: cssm_key

type CssmKeySize

type CssmKeySize struct {
	LogicalKeySizeInBits   uint32
	EffectiveKeySizeInBits uint32
}

C struct: cssm_key_size

type CssmKeyheader

type CssmKeyheader struct {
	HeaderVersion        uint32
	CspId                CssmGuid
	BlobType             uint32
	Format               uint32
	AlgorithmId          uint32
	KeyClass             uint32
	LogicalKeySizeInBits uint32
	KeyAttr              uint32
	KeyUsage             uint32
	StartDate            CssmDate
	EndDate              CssmDate
	WrapAlgorithmId      uint32
	WrapMode             uint32
	Reserved             uint32
}

C struct: cssm_keyheader

type CssmKrName

type CssmKrName struct {
	Type   uint8
	Length uint8
	Name   string
}

C struct: cssm_kr_name

type CssmKrPolicyInfo

type CssmKrPolicyInfo struct {
	KrbNotAllowed   int32
	NumberOfEntries uint32
	PolicyEntry     *CssmKrPolicyListItem
}

C struct: cssm_kr_policy_info

type CssmKrPolicyListItem

type CssmKrPolicyListItem struct {
	Next         unsafe.Pointer
	AlgorithmId  uint32
	Mode         uint32
	MaxKeyLength uint32
	MaxRounds    uint32
	WorkFactor   uint8
	PolicyFlags  uint32
	AlgClass     uint32
}

C struct: cssm_kr_policy_list_item

type CssmKrProfile

type CssmKrProfile struct {
	UserName                 CssmKrName
	UserCertificate          *CssmCertgroup
	KRSCertChain             *CssmCertgroup
	LE_KRANum                uint8
	LE_KRACertChainList      *CssmCertgroup
	ENT_KRANum               uint8
	ENT_KRACertChainList     *CssmCertgroup
	INDIV_KRANum             uint8
	INDIV_KRACertChainList   *CssmCertgroup
	INDIV_AuthenticationInfo *CssmData
	KRSPFlags                uint32
	KRSPExtensions           *CssmData
}

C struct: cssm_kr_profile

type CssmKrWrappedproductinfo

type CssmKrWrappedproductinfo struct {
	StandardVersion     CssmVersion
	StandardDescription [68]int8
	ProductVersion      CssmVersion
	ProductDescription  [68]int8
	ProductVendor       [68]int8
	ProductFlags        uint32
}

C struct: cssm_kr_wrappedproductinfo

type CssmKrsubservice

type CssmKrsubservice struct {
	SubServiceId   uint32
	Description    string
	WrappedProduct CssmKrWrappedproductinfo
}

C struct: cssm_krsubservice

type CssmList

type CssmList struct {
	ListType uint32
	Head     *CssmListElement
	Tail     *CssmListElement
}

C struct: cssm_list

type CssmListElement

type CssmListElement struct {
	NextElement *CssmListElement
	WordID      int32
	ElementType uint32
	Element     unsafe.Pointer
}

C struct: cssm_list_element

type CssmManagerEventNotification

type CssmManagerEventNotification struct {
	DestinationModuleManagerType uint32
	SourceModuleManagerType      uint32
	Event                        uint32
	EventId                      uint32
	EventData                    CssmData
}

C struct: cssm_manager_event_notification

type CssmManagerRegistrationInfo

type CssmManagerRegistrationInfo struct {
	Initialize              unsafe.Pointer
	Terminate               unsafe.Pointer
	RegisterDispatchTable   unsafe.Pointer
	DeregisterDispatchTable unsafe.Pointer
	EventNotifyManager      unsafe.Pointer
	RefreshFunctionTable    unsafe.Pointer
}

C struct: cssm_manager_registration_info

type CssmMemoryFuncs

type CssmMemoryFuncs struct {
	Malloc_func  unsafe.Pointer
	Free_func    unsafe.Pointer
	Realloc_func unsafe.Pointer
	Calloc_func  unsafe.Pointer
	AllocRef     unsafe.Pointer
}

C struct: cssm_memory_funcs

type CssmModuleFuncs

type CssmModuleFuncs struct {
	ServiceType          uint32
	NumberOfServiceFuncs uint32
	ServiceFuncs         unsafe.Pointer
}

C struct: cssm_module_funcs

type CssmNameList

type CssmNameList struct {
	NumStrings uint32
	String     string
}

C struct: cssm_name_list

type CssmNetAddress

type CssmNetAddress struct {
	AddressType uint32
	Address     CssmData
}

C struct: cssm_net_address

type CssmParsedCert

type CssmParsedCert struct {
	CertType         uint32
	ParsedCertFormat uint32
	ParsedCert       unsafe.Pointer
}

C struct: cssm_parsed_cert

type CssmParsedCrl

type CssmParsedCrl struct {
	CrlType         uint32
	ParsedCrlFormat uint32
	ParsedCrl       unsafe.Pointer
}

C struct: cssm_parsed_crl

type CssmPkcs1OaepParams

type CssmPkcs1OaepParams struct {
	HashAlgorithm uint32
	HashParams    CssmData
	MGF           uint32
	MGFParams     CssmData
	PSource       uint32
	PSourceParams CssmData
}

C struct: cssm_pkcs1_oaep_params

type CssmPkcs5Pbkdf1Params

type CssmPkcs5Pbkdf1Params struct {
	Passphrase CssmData
	InitVector CssmData
}

C struct: cssm_pkcs5_pbkdf1_params

type CssmPkcs5Pbkdf2Params

type CssmPkcs5Pbkdf2Params struct {
	Passphrase           CssmData
	PseudoRandomFunction uint32
}

C struct: cssm_pkcs5_pbkdf2_params

type CssmQuery

type CssmQuery struct {
	RecordType             uint32
	Conjunctive            uint32
	NumSelectionPredicates uint32
	SelectionPredicate     *CssmSelectionPredicate
	QueryLimits            CssmQueryLimits
	QueryFlags             uint32
}

C struct: cssm_query

type CssmQueryLimits

type CssmQueryLimits struct {
	TimeLimit uint32
	SizeLimit uint32
}

C struct: cssm_query_limits

type CssmQuerySizeData

type CssmQuerySizeData struct {
	SizeInputBlock  uint32
	SizeOutputBlock uint32
}

C struct: cssm_query_size_data

type CssmRange

type CssmRange struct {
	Min uint32
	Max uint32
}

C struct: cssm_range

type CssmResourceControlContext

type CssmResourceControlContext struct {
	AccessCred      *CssmAccessCredentials
	InitialAclEntry CssmAclEntryInput
}

C struct: cssm_resource_control_context

type CssmSample

type CssmSample struct {
	TypedSample CssmList
	Verifier    *CssmSubserviceUid
}

C struct: cssm_sample

type CssmSamplegroup

type CssmSamplegroup struct {
	NumberOfSamples uint32
	Samples         *CssmSample
}

C struct: cssm_samplegroup

type CssmSelectionPredicate

type CssmSelectionPredicate struct {
	DbOperator uint32
	Attribute  CssmDbAttributeData
}

C struct: cssm_selection_predicate

type CssmSpiAcFuncs

type CssmSpiAcFuncs struct {
	AuthCompute unsafe.Pointer
	PassThrough unsafe.Pointer
}

C struct: cssm_spi_ac_funcs

type CssmSpiClFuncs

type CssmSpiClFuncs struct {
	CertCreateTemplate           unsafe.Pointer
	CertGetAllTemplateFields     unsafe.Pointer
	CertSign                     unsafe.Pointer
	CertVerify                   unsafe.Pointer
	CertVerifyWithKey            unsafe.Pointer
	CertGetFirstFieldValue       unsafe.Pointer
	CertGetNextFieldValue        unsafe.Pointer
	CertAbortQuery               unsafe.Pointer
	CertGetKeyInfo               unsafe.Pointer
	CertGetAllFields             unsafe.Pointer
	FreeFields                   unsafe.Pointer
	FreeFieldValue               unsafe.Pointer
	CertCache                    unsafe.Pointer
	CertGetFirstCachedFieldValue unsafe.Pointer
	CertGetNextCachedFieldValue  unsafe.Pointer
	CertAbortCache               unsafe.Pointer
	CertGroupToSignedBundle      unsafe.Pointer
	CertGroupFromVerifiedBundle  unsafe.Pointer
	CertDescribeFormat           unsafe.Pointer
	CrlCreateTemplate            unsafe.Pointer
	CrlSetFields                 unsafe.Pointer
	CrlAddCert                   unsafe.Pointer
	CrlRemoveCert                unsafe.Pointer
	CrlSign                      unsafe.Pointer
	CrlVerify                    unsafe.Pointer
	CrlVerifyWithKey             unsafe.Pointer
	IsCertInCrl                  unsafe.Pointer
	CrlGetFirstFieldValue        unsafe.Pointer
	CrlGetNextFieldValue         unsafe.Pointer
	CrlAbortQuery                unsafe.Pointer
	CrlGetAllFields              unsafe.Pointer
	CrlCache                     unsafe.Pointer
	IsCertInCachedCrl            unsafe.Pointer
	CrlGetFirstCachedFieldValue  unsafe.Pointer
	CrlGetNextCachedFieldValue   unsafe.Pointer
	CrlGetAllCachedRecordFields  unsafe.Pointer
	CrlAbortCache                unsafe.Pointer
	CrlDescribeFormat            unsafe.Pointer
	PassThrough                  unsafe.Pointer
}

C struct: cssm_spi_cl_funcs

type CssmSpiCspFuncs

type CssmSpiCspFuncs struct {
	EventNotify                   unsafe.Pointer
	QuerySize                     unsafe.Pointer
	SignData                      unsafe.Pointer
	SignDataInit                  unsafe.Pointer
	SignDataUpdate                unsafe.Pointer
	SignDataFinal                 unsafe.Pointer
	VerifyData                    unsafe.Pointer
	VerifyDataInit                unsafe.Pointer
	VerifyDataUpdate              unsafe.Pointer
	VerifyDataFinal               unsafe.Pointer
	DigestData                    unsafe.Pointer
	DigestDataInit                unsafe.Pointer
	DigestDataUpdate              unsafe.Pointer
	DigestDataClone               unsafe.Pointer
	DigestDataFinal               unsafe.Pointer
	GenerateMac                   unsafe.Pointer
	GenerateMacInit               unsafe.Pointer
	GenerateMacUpdate             unsafe.Pointer
	GenerateMacFinal              unsafe.Pointer
	VerifyMac                     unsafe.Pointer
	VerifyMacInit                 unsafe.Pointer
	VerifyMacUpdate               unsafe.Pointer
	VerifyMacFinal                unsafe.Pointer
	EncryptData                   unsafe.Pointer
	EncryptDataInit               unsafe.Pointer
	EncryptDataUpdate             unsafe.Pointer
	EncryptDataFinal              unsafe.Pointer
	DecryptData                   unsafe.Pointer
	DecryptDataInit               unsafe.Pointer
	DecryptDataUpdate             unsafe.Pointer
	DecryptDataFinal              unsafe.Pointer
	QueryKeySizeInBits            unsafe.Pointer
	GenerateKey                   unsafe.Pointer
	GenerateKeyPair               unsafe.Pointer
	GenerateRandom                unsafe.Pointer
	GenerateAlgorithmParams       unsafe.Pointer
	WrapKey                       unsafe.Pointer
	UnwrapKey                     unsafe.Pointer
	DeriveKey                     unsafe.Pointer
	FreeKey                       unsafe.Pointer
	PassThrough                   unsafe.Pointer
	Login                         unsafe.Pointer
	Logout                        unsafe.Pointer
	ChangeLoginAcl                unsafe.Pointer
	ObtainPrivateKeyFromPublicKey unsafe.Pointer
	RetrieveUniqueId              unsafe.Pointer
	RetrieveCounter               unsafe.Pointer
	VerifyDevice                  unsafe.Pointer
	GetTimeValue                  unsafe.Pointer
	GetOperationalStatistics      unsafe.Pointer
	GetLoginAcl                   unsafe.Pointer
	GetKeyAcl                     unsafe.Pointer
	ChangeKeyAcl                  unsafe.Pointer
	GetKeyOwner                   unsafe.Pointer
	ChangeKeyOwner                unsafe.Pointer
	GetLoginOwner                 unsafe.Pointer
	ChangeLoginOwner              unsafe.Pointer
}

C struct: cssm_spi_csp_funcs

type CssmSpiDlFuncs

type CssmSpiDlFuncs struct {
	DbOpen                    unsafe.Pointer
	DbClose                   unsafe.Pointer
	DbCreate                  unsafe.Pointer
	DbDelete                  unsafe.Pointer
	CreateRelation            unsafe.Pointer
	DestroyRelation           unsafe.Pointer
	Authenticate              unsafe.Pointer
	GetDbAcl                  unsafe.Pointer
	ChangeDbAcl               unsafe.Pointer
	GetDbOwner                unsafe.Pointer
	ChangeDbOwner             unsafe.Pointer
	GetDbNames                unsafe.Pointer
	GetDbNameFromHandle       unsafe.Pointer
	FreeNameList              unsafe.Pointer
	DataInsert                unsafe.Pointer
	DataDelete                unsafe.Pointer
	DataModify                unsafe.Pointer
	DataGetFirst              unsafe.Pointer
	DataGetNext               unsafe.Pointer
	DataAbortQuery            unsafe.Pointer
	DataGetFromUniqueRecordId unsafe.Pointer
	FreeUniqueRecord          unsafe.Pointer
	PassThrough               unsafe.Pointer
}

C struct: cssm_spi_dl_funcs

type CssmSpiKrFuncs

type CssmSpiKrFuncs struct {
	RegistrationRequest    unsafe.Pointer
	RegistrationRetrieve   unsafe.Pointer
	GenerateRecoveryFields unsafe.Pointer
	ProcessRecoveryFields  unsafe.Pointer
	RecoveryRequest        unsafe.Pointer
	RecoveryRetrieve       unsafe.Pointer
	GetRecoveredObject     unsafe.Pointer
	RecoveryRequestAbort   unsafe.Pointer
	PassThrough            unsafe.Pointer
}

C struct: cssm_spi_kr_funcs

type CssmSpiTpFuncs

type CssmSpiTpFuncs struct {
	SubmitCredRequest         unsafe.Pointer
	RetrieveCredResult        unsafe.Pointer
	ConfirmCredResult         unsafe.Pointer
	ReceiveConfirmation       unsafe.Pointer
	CertReclaimKey            unsafe.Pointer
	CertReclaimAbort          unsafe.Pointer
	FormRequest               unsafe.Pointer
	FormSubmit                unsafe.Pointer
	CertGroupVerify           unsafe.Pointer
	CertCreateTemplate        unsafe.Pointer
	CertGetAllTemplateFields  unsafe.Pointer
	CertSign                  unsafe.Pointer
	CrlVerify                 unsafe.Pointer
	CrlCreateTemplate         unsafe.Pointer
	CertRevoke                unsafe.Pointer
	CertRemoveFromCrlTemplate unsafe.Pointer
	CrlSign                   unsafe.Pointer
	ApplyCrlToDb              unsafe.Pointer
	CertGroupConstruct        unsafe.Pointer
	CertGroupPrune            unsafe.Pointer
	CertGroupToTupleGroup     unsafe.Pointer
	TupleGroupToCertGroup     unsafe.Pointer
	PassThrough               unsafe.Pointer
}

C struct: cssm_spi_tp_funcs

type CssmStateFuncs

type CssmStateFuncs struct {
	Cssm_GetAttachFunctions        unsafe.Pointer
	Cssm_ReleaseAttachFunctions    unsafe.Pointer
	Cssm_GetAppMemoryFunctions     unsafe.Pointer
	Cssm_IsFuncCallValid           unsafe.Pointer
	Cssm_DeregisterManagerServices unsafe.Pointer
	Cssm_DeliverModuleManagerEvent unsafe.Pointer
}

C struct: cssm_state_funcs

type CssmSubserviceUid

type CssmSubserviceUid struct {
	Guid           CssmGuid
	Version        CssmVersion
	SubserviceId   uint32
	SubserviceType uint32
}

C struct: cssm_subservice_uid

type CssmTpAuthorityId

type CssmTpAuthorityId struct {
	AuthorityCert     *CssmData
	AuthorityLocation *CssmNetAddress
}

C struct: cssm_tp_authority_id

type CssmTpCallerauthContext

type CssmTpCallerauthContext struct {
	Policy                   CssmTpPolicyinfo
	VerifyTime               string
	VerificationAbortOn      uint32
	CallbackWithVerifiedCert unsafe.Pointer
	NumberOfAnchorCerts      uint32
	AnchorCerts              *CssmData
	DBList                   *CssmDlDbList
	CallerCredentials        *CssmAccessCredentials
}

C struct: cssm_tp_callerauth_context

type CssmTpCertchangeInput

type CssmTpCertchangeInput struct {
	Action            uint32
	Reason            uint32
	CLHandle          int
	Cert              *CssmData
	ChangeInfo        *CssmField
	StartTime         string
	CallerCredentials *CssmAccessCredentials
}

C struct: cssm_tp_certchange_input

type CssmTpCertchangeOutput

type CssmTpCertchangeOutput struct {
	ActionStatus uint32
	RevokeInfo   CssmField
}

C struct: cssm_tp_certchange_output

type CssmTpCertissueInput

type CssmTpCertissueInput struct {
	CSPSubserviceUid        CssmSubserviceUid
	CLHandle                int
	NumberOfTemplateFields  uint32
	SubjectCertFields       *CssmField
	MoreServiceRequests     uint32
	NumberOfServiceControls uint32
	ServiceControls         *CssmField
	UserCredentials         *CssmAccessCredentials
}

C struct: cssm_tp_certissue_input

type CssmTpCertissueOutput

type CssmTpCertissueOutput struct {
	IssueStatus              uint32
	CertGroup                *CssmCertgroup
	PerformedServiceRequests uint32
}

C struct: cssm_tp_certissue_output

type CssmTpCertnotarizeInput

type CssmTpCertnotarizeInput struct {
	CLHandle                int
	NumberOfFields          uint32
	MoreFields              *CssmField
	SignScope               *CssmField
	ScopeSize               uint32
	MoreServiceRequests     uint32
	NumberOfServiceControls uint32
	ServiceControls         *CssmField
	UserCredentials         *CssmAccessCredentials
}

C struct: cssm_tp_certnotarize_input

type CssmTpCertnotarizeOutput

type CssmTpCertnotarizeOutput struct {
	NotarizeStatus           uint32
	NotarizedCertGroup       *CssmCertgroup
	PerformedServiceRequests uint32
}

C struct: cssm_tp_certnotarize_output

type CssmTpCertreclaimInput

type CssmTpCertreclaimInput struct {
	CLHandle                int
	NumberOfSelectionFields uint32
	SelectionFields         *CssmField
	UserCredentials         *CssmAccessCredentials
}

C struct: cssm_tp_certreclaim_input

type CssmTpCertreclaimOutput

type CssmTpCertreclaimOutput struct {
	ReclaimStatus      uint32
	ReclaimedCertGroup *CssmCertgroup
	KeyCacheHandle     uint64
}

C struct: cssm_tp_certreclaim_output

type CssmTpCertverifyInput

type CssmTpCertverifyInput struct {
	CLHandle      int
	Cert          *CssmData
	VerifyContext *CssmTpVerifyContext
}

C struct: cssm_tp_certverify_input

type CssmTpCertverifyOutput

type CssmTpCertverifyOutput struct {
	VerifyStatus     uint32
	NumberOfEvidence uint32
	Evidence         *CssmEvidence
}

C struct: cssm_tp_certverify_output

type CssmTpConfirmResponse

type CssmTpConfirmResponse struct {
	NumberOfResponses uint32
	Responses         *uint32
}

C struct: cssm_tp_confirm_response

type CssmTpCrlissueInput

type CssmTpCrlissueInput struct {
	CLHandle          int
	CrlIdentifier     uint32
	CrlThisTime       string
	PolicyIdentifier  *CssmField
	CallerCredentials *CssmAccessCredentials
}

C struct: cssm_tp_crlissue_input

type CssmTpCrlissueOutput

type CssmTpCrlissueOutput struct {
	IssueStatus uint32
	Crl         *CssmEncodedCrl
	CrlNextTime string
}

C struct: cssm_tp_crlissue_output

type CssmTpPolicyinfo

type CssmTpPolicyinfo struct {
	NumberOfPolicyIds uint32
	PolicyIds         *CssmField
	PolicyControl     unsafe.Pointer
}

C struct: cssm_tp_policyinfo

type CssmTpRequestSet

type CssmTpRequestSet struct {
	NumberOfRequests uint32
	Requests         unsafe.Pointer
}

C struct: cssm_tp_request_set

type CssmTpResultSet

type CssmTpResultSet struct {
	NumberOfResults uint32
	Results         unsafe.Pointer
}

C struct: cssm_tp_result_set

type CssmTpVerifyContext

type CssmTpVerifyContext struct {
	Action     uint32
	ActionData CssmData
	Crls       CssmCrlgroup
	Cred       *CssmTpCallerauthContext
}

C struct: cssm_tp_verify_context

type CssmTpVerifyContextResult

type CssmTpVerifyContextResult struct {
	NumberOfEvidences uint32
	Evidence          *CssmEvidence
}

C struct: cssm_tp_verify_context_result

type CssmTuplegroup

type CssmTuplegroup struct {
	NumberOfTuples uint32
	Tuples         *CSSM_TUPLE
}

C struct: cssm_tuplegroup

type CssmUpcalls

type CssmUpcalls struct {
	Malloc_func        unsafe.Pointer
	Free_func          unsafe.Pointer
	Realloc_func       unsafe.Pointer
	Calloc_func        unsafe.Pointer
	CcToHandle_func    unsafe.Pointer
	GetModuleInfo_func unsafe.Pointer
}

C struct: cssm_upcalls

type CssmVersion

type CssmVersion struct {
	Major uint32
	Minor uint32
}

C struct: cssm_version

type CssmX509Extension

type CssmX509Extension struct {
	ExtnId   CssmData
	Critical int32
	Format   Extension_data_format
	Value    unsafe.Pointer
	BERvalue CssmData
}

C struct: cssm_x509_extension

type CssmX509ExtensionTagAndValue

type CssmX509ExtensionTagAndValue struct {
	Type  uint8
	Value CssmData
}

C struct: cssm_x509_extensionTagAndValue

type CssmX509Extensions

type CssmX509Extensions struct {
	NumberOfExtensions uint32
	Extensions         *CssmX509Extension
}

C struct: cssm_x509_extensions

type CssmX509Name

type CssmX509Name struct {
	NumberOfRDNs              uint32
	RelativeDistinguishedName *CssmX509Rdn
}

C struct: cssm_x509_name

type CssmX509Rdn

type CssmX509Rdn struct {
	NumberOfPairs         uint32
	AttributeTypeAndValue *CssmX509TypeValuePair
}

C struct: cssm_x509_rdn

type CssmX509RevokedCertEntry

type CssmX509RevokedCertEntry struct {
	CertificateSerialNumber CssmData
	RevocationDate          CssmX509Time
	Extensions              CssmX509Extensions
}

C struct: cssm_x509_revoked_cert_entry

type CssmX509RevokedCertList

type CssmX509RevokedCertList struct {
	NumberOfRevokedCertEntries uint32
	RevokedCertEntry           *CssmX509RevokedCertEntry
}

C struct: cssm_x509_revoked_cert_list

type CssmX509Signature

type CssmX509Signature struct {
	AlgorithmIdentifier SecAsn1AlgId
	Encrypted           CssmData
}

C struct: cssm_x509_signature

type CssmX509SignedCertificate

type CssmX509SignedCertificate struct {
	Certificate CssmX509TbsCertificate
	Signature   CssmX509Signature
}

C struct: cssm_x509_signed_certificate

type CssmX509SignedCrl

type CssmX509SignedCrl struct {
	TbsCertList CssmX509TbsCertlist
	Signature   CssmX509Signature
}

C struct: cssm_x509_signed_crl

type CssmX509TbsCertificate

type CssmX509TbsCertificate struct {
	Version                 CssmData
	SerialNumber            CssmData
	Signature               SecAsn1AlgId
	Issuer                  CssmX509Name
	Validity                X509Validity
	Subject                 CssmX509Name
	SubjectPublicKeyInfo    SecAsn1PubKeyInfo
	IssuerUniqueIdentifier  CssmData
	SubjectUniqueIdentifier CssmData
	Extensions              CssmX509Extensions
}

C struct: cssm_x509_tbs_certificate

type CssmX509TbsCertlist

type CssmX509TbsCertlist struct {
	Version             CssmData
	Signature           SecAsn1AlgId
	Issuer              CssmX509Name
	ThisUpdate          CssmX509Time
	NextUpdate          CssmX509Time
	RevokedCertificates *CssmX509RevokedCertList
	Extensions          CssmX509Extensions
}

C struct: cssm_x509_tbs_certlist

type CssmX509Time

type CssmX509Time struct {
	TimeType uint8
	Time     CssmData
}

C struct: cssm_x509_time

type CssmX509TypeValuePair

type CssmX509TypeValuePair struct {
	Type      CssmData
	ValueType uint8
	Value     CssmData
}

C struct: cssm_x509_type_value_pair

type CssmX509extBasicConstraints

type CssmX509extBasicConstraints struct {
	CA                       int32
	PathLenConstraintPresent int32
	PathLenConstraint        uint32
}

C struct: cssm_x509ext_basicConstraints

type CssmX509extPair

type CssmX509extPair struct {
	TagAndValue CssmX509ExtensionTagAndValue
	ParsedValue unsafe.Pointer
}

C struct: cssm_x509ext_pair

type CssmX509extPolicyInfo

type CssmX509extPolicyInfo struct {
	PolicyIdentifier CssmData
	PolicyQualifiers CssmX509extPolicyQualifiers
}

C struct: cssm_x509ext_policyInfo

type CssmX509extPolicyQualifierInfo

type CssmX509extPolicyQualifierInfo struct {
	PolicyQualifierId CssmData
	Value             CssmData
}

C struct: cssm_x509ext_policyQualifierInfo

type CssmX509extPolicyQualifiers

type CssmX509extPolicyQualifiers struct {
	NumberOfPolicyQualifiers uint32
	PolicyQualifier          *CssmX509extPolicyQualifierInfo
}

C struct: cssm_x509ext_policyQualifiers

type Cssm_appledl_open_parameters_mask

type Cssm_appledl_open_parameters_mask int64
const (
	KCSSM_APPLEDL_MASK_MODE Cssm_appledl_open_parameters_mask = 1
)

func (Cssm_appledl_open_parameters_mask) String

type Dispatch_autorelease_frequency_t

type Dispatch_autorelease_frequency_t uint64
const (
	DISPATCH_AUTORELEASE_FREQUENCY_INHERIT   Dispatch_autorelease_frequency_t = 0
	DISPATCH_AUTORELEASE_FREQUENCY_WORK_ITEM Dispatch_autorelease_frequency_t = 1
	DISPATCH_AUTORELEASE_FREQUENCY_NEVER     Dispatch_autorelease_frequency_t = 2
)

func (Dispatch_autorelease_frequency_t) String

type Dispatch_block_flags_t

type Dispatch_block_flags_t uint64
const (
	DISPATCH_BLOCK_BARRIER           Dispatch_block_flags_t = 1
	DISPATCH_BLOCK_DETACHED          Dispatch_block_flags_t = 2
	DISPATCH_BLOCK_ASSIGN_CURRENT    Dispatch_block_flags_t = 4
	DISPATCH_BLOCK_NO_QOS_CLASS      Dispatch_block_flags_t = 8
	DISPATCH_BLOCK_INHERIT_QOS_CLASS Dispatch_block_flags_t = 16
	DISPATCH_BLOCK_ENFORCE_QOS_CLASS Dispatch_block_flags_t = 32
)

func (Dispatch_block_flags_t) String

func (e Dispatch_block_flags_t) String() string

type Extension_data_format

type Extension_data_format int64
const (
	CSSM_X509_DATAFORMAT_ENCODED Extension_data_format = 0
	CSSM_X509_DATAFORMAT_PARSED  Extension_data_format = 1
	CSSM_X509_DATAFORMAT_PAIR    Extension_data_format = 2
)

func (Extension_data_format) String

func (e Extension_data_format) String() string

type Filesec_property_t

type Filesec_property_t int64
const (
	FILESEC_OWNER         Filesec_property_t = 1
	FILESEC_GROUP         Filesec_property_t = 2
	FILESEC_UUID          Filesec_property_t = 3
	FILESEC_MODE          Filesec_property_t = 4
	FILESEC_ACL           Filesec_property_t = 5
	FILESEC_GRPUUID       Filesec_property_t = 6
	FILESEC_ACL_RAW       Filesec_property_t = 100
	FILESEC_ACL_ALLOCSIZE Filesec_property_t = 101
)

func (Filesec_property_t) String

func (e Filesec_property_t) String() string

type Idtype_t

type Idtype_t int64
const (
	P_ALL  Idtype_t = 0
	P_PID  Idtype_t = 1
	P_PGID Idtype_t = 2
)

func (Idtype_t) String

func (e Idtype_t) String() string

type Ipc_info_object_type_t

type Ipc_info_object_type_t int64
const (
	IPC_OTYPE_NONE                 Ipc_info_object_type_t = 0
	IPC_OTYPE_THREAD_CONTROL       Ipc_info_object_type_t = 1
	IPC_OTYPE_TASK_CONTROL         Ipc_info_object_type_t = 2
	IPC_OTYPE_HOST                 Ipc_info_object_type_t = 3
	IPC_OTYPE_HOST_PRIV            Ipc_info_object_type_t = 4
	IPC_OTYPE_PROCESSOR            Ipc_info_object_type_t = 5
	IPC_OTYPE_PROCESSOR_SET        Ipc_info_object_type_t = 6
	IPC_OTYPE_PROCESSOR_SET_NAME   Ipc_info_object_type_t = 7
	IPC_OTYPE_TIMER                Ipc_info_object_type_t = 8
	IPC_OTYPE_PORT_SUBST_ONCE      Ipc_info_object_type_t = 9
	IPC_OTYPE_MIG                  Ipc_info_object_type_t = 10
	IPC_OTYPE_MEMORY_OBJECT        Ipc_info_object_type_t = 11
	IPC_OTYPE_XMM_PAGER            Ipc_info_object_type_t = 12
	IPC_OTYPE_XMM_KERNEL           Ipc_info_object_type_t = 13
	IPC_OTYPE_XMM_REPLY            Ipc_info_object_type_t = 14
	IPC_OTYPE_UND_REPLY            Ipc_info_object_type_t = 15
	IPC_OTYPE_HOST_NOTIFY          Ipc_info_object_type_t = 16
	IPC_OTYPE_HOST_SECURITY        Ipc_info_object_type_t = 17
	IPC_OTYPE_LEDGER               Ipc_info_object_type_t = 18
	IPC_OTYPE_MAIN_DEVICE          Ipc_info_object_type_t = 19
	IPC_OTYPE_TASK_NAME            Ipc_info_object_type_t = 20
	IPC_OTYPE_SUBSYSTEM            Ipc_info_object_type_t = 21
	IPC_OTYPE_IO_DONE_QUEUE        Ipc_info_object_type_t = 22
	IPC_OTYPE_SEMAPHORE            Ipc_info_object_type_t = 23
	IPC_OTYPE_LOCK_SET             Ipc_info_object_type_t = 24
	IPC_OTYPE_CLOCK                Ipc_info_object_type_t = 25
	IPC_OTYPE_CLOCK_CTRL           Ipc_info_object_type_t = 26
	IPC_OTYPE_IOKIT_IDENT          Ipc_info_object_type_t = 27
	IPC_OTYPE_NAMED_ENTRY          Ipc_info_object_type_t = 28
	IPC_OTYPE_IOKIT_CONNECT        Ipc_info_object_type_t = 29
	IPC_OTYPE_IOKIT_OBJECT         Ipc_info_object_type_t = 30
	IPC_OTYPE_UPL                  Ipc_info_object_type_t = 31
	IPC_OTYPE_MEM_OBJ_CONTROL      Ipc_info_object_type_t = 32
	IPC_OTYPE_AU_SESSIONPORT       Ipc_info_object_type_t = 33
	IPC_OTYPE_FILEPORT             Ipc_info_object_type_t = 34
	IPC_OTYPE_LABELH               Ipc_info_object_type_t = 35
	IPC_OTYPE_TASK_RESUME          Ipc_info_object_type_t = 36
	IPC_OTYPE_VOUCHER              Ipc_info_object_type_t = 37
	IPC_OTYPE_VOUCHER_ATTR_CONTROL Ipc_info_object_type_t = 38
	IPC_OTYPE_WORK_INTERVAL        Ipc_info_object_type_t = 39
	IPC_OTYPE_UX_HANDLER           Ipc_info_object_type_t = 40
	IPC_OTYPE_UEXT_OBJECT          Ipc_info_object_type_t = 41
	IPC_OTYPE_ARCADE_REG           Ipc_info_object_type_t = 42
	IPC_OTYPE_EVENTLINK            Ipc_info_object_type_t = 43
	IPC_OTYPE_TASK_INSPECT         Ipc_info_object_type_t = 44
	IPC_OTYPE_TASK_READ            Ipc_info_object_type_t = 45
	IPC_OTYPE_THREAD_INSPECT       Ipc_info_object_type_t = 46
	IPC_OTYPE_THREAD_READ          Ipc_info_object_type_t = 47
	IPC_OTYPE_SUID_CRED            Ipc_info_object_type_t = 48
	IPC_OTYPE_HYPERVISOR           Ipc_info_object_type_t = 49
	IPC_OTYPE_TASK_ID_TOKEN        Ipc_info_object_type_t = 50
	IPC_OTYPE_TASK_FATAL           Ipc_info_object_type_t = 51
	IPC_OTYPE_KCDATA               Ipc_info_object_type_t = 52
	IPC_OTYPE_EXCLAVES_RESOURCE    Ipc_info_object_type_t = 53
	IPC_OTYPE_THREAD_RESUME        Ipc_info_object_type_t = 54
	IPC_OTYPE_UNKNOWN              Ipc_info_object_type_t = 4294967295
)

func (Ipc_info_object_type_t) String

func (e Ipc_info_object_type_t) String() string

type Launch_data_type_t

type Launch_data_type_t int64
const (
	LAUNCH_DATA_DICTIONARY Launch_data_type_t = 1
	LAUNCH_DATA_ARRAY      Launch_data_type_t = 2
	LAUNCH_DATA_FD         Launch_data_type_t = 3
	LAUNCH_DATA_INTEGER    Launch_data_type_t = 4
	LAUNCH_DATA_REAL       Launch_data_type_t = 5
	LAUNCH_DATA_BOOL       Launch_data_type_t = 6
	LAUNCH_DATA_STRING     Launch_data_type_t = 7
	LAUNCH_DATA_OPAQUE     Launch_data_type_t = 8
	LAUNCH_DATA_ERRNO      Launch_data_type_t = 9
	LAUNCH_DATA_MACHPORT   Launch_data_type_t = 10
)

func (Launch_data_type_t) String

func (e Launch_data_type_t) String() string

type MDS_FUNCS

type MDS_FUNCS = MdsFuncs

MDS_FUNCS is an alias for mds_funcs (C typedef MDS_FUNCS).

type MDS_FUNCS_PTR

type MDS_FUNCS_PTR = *MdsFuncs

MDS_FUNCS_PTR is an opaque pointer to mds_funcs (C typedef MDS_FUNCS_PTR).

type Mach_vm_range_flags_t

type Mach_vm_range_flags_t int64
const (
	MACH_VM_RANGE_NONE Mach_vm_range_flags_t = 0
)

func (Mach_vm_range_flags_t) String

func (e Mach_vm_range_flags_t) String() string

type Mach_vm_range_flavor_t

type Mach_vm_range_flavor_t int64
const (
	MACH_VM_RANGE_FLAVOR_INVALID Mach_vm_range_flavor_t = 0
	MACH_VM_RANGE_FLAVOR_V1      Mach_vm_range_flavor_t = 1
)

func (Mach_vm_range_flavor_t) String

func (e Mach_vm_range_flavor_t) String() string

type Mach_vm_range_tag_t

type Mach_vm_range_tag_t int64
const (
	MACH_VM_RANGE_DEFAULT Mach_vm_range_tag_t = 0
	MACH_VM_RANGE_DATA    Mach_vm_range_tag_t = 1
	MACH_VM_RANGE_FIXED   Mach_vm_range_tag_t = 2
)

func (Mach_vm_range_tag_t) String

func (e Mach_vm_range_tag_t) String() string

type MdsFuncs

type MdsFuncs struct {
	DbOpen                    unsafe.Pointer
	DbClose                   unsafe.Pointer
	GetDbNames                unsafe.Pointer
	GetDbNameFromHandle       unsafe.Pointer
	FreeNameList              unsafe.Pointer
	DataInsert                unsafe.Pointer
	DataDelete                unsafe.Pointer
	DataModify                unsafe.Pointer
	DataGetFirst              unsafe.Pointer
	DataGetNext               unsafe.Pointer
	DataAbortQuery            unsafe.Pointer
	DataGetFromUniqueRecordId unsafe.Pointer
	FreeUniqueRecord          unsafe.Pointer
	CreateRelation            unsafe.Pointer
	DestroyRelation           unsafe.Pointer
}

C struct: mds_funcs

type Mpo_flags_t

type Mpo_flags_t int64
const (
	MPO_PORT                            Mpo_flags_t = 0
	MPO_SERVICE_PORT                    Mpo_flags_t = 1024
	MPO_CONNECTION_PORT                 Mpo_flags_t = 2048
	MPO_REPLY_PORT                      Mpo_flags_t = 4096
	MPO_WEAK_REPLY_PORT                 Mpo_flags_t = 16384
	MPO_NOTIFICATION_PORT               Mpo_flags_t = 17408
	MPO_EXCEPTION_PORT                  Mpo_flags_t = 32768
	MPO_CONNECTION_PORT_WITH_PORT_ARRAY Mpo_flags_t = 65536
)

func (Mpo_flags_t) String

func (e Mpo_flags_t) String() string

type OS_sec_certificate

type OS_sec_certificate interface {
}

OS_sec_certificate wraps the ObjC protocol OS_sec_certificate.

type OS_sec_identity

type OS_sec_identity interface {
}

OS_sec_identity wraps the ObjC protocol OS_sec_identity.

type OS_sec_object

type OS_sec_object interface {
}

OS_sec_object wraps the ObjC protocol OS_sec_object.

type OS_sec_protocol_metadata

type OS_sec_protocol_metadata interface {
}

OS_sec_protocol_metadata wraps the ObjC protocol OS_sec_protocol_metadata.

type OS_sec_protocol_options

type OS_sec_protocol_options interface {
}

OS_sec_protocol_options wraps the ObjC protocol OS_sec_protocol_options.

type OS_sec_trust

type OS_sec_trust interface {
}

OS_sec_trust wraps the ObjC protocol OS_sec_trust.

type OpaquePolicySearchRef

type OpaquePolicySearchRef struct{}

@typedef SecPolicySearchRef @abstract A reference to an opaque policy search structure. OpaquePolicySearchRef is an opaque type.

type OpaqueSecIdentitySearchRef

type OpaqueSecIdentitySearchRef struct{}

@typedef SecIdentitySearchRef @abstract Contains information about an identity search. OpaqueSecIdentitySearchRef is an opaque type.

type OpaqueSecTransformImplementation

type OpaqueSecTransformImplementation struct{}

@typedef SecTransformImplementationRef @abstract The SecTransformImplementationRef is a pointer to a block that implements an instance of a transform. OpaqueSecTransformImplementation is an opaque type.

type Os_clockid_t

type Os_clockid_t int64
const (
	OS_CLOCK_MACH_ABSOLUTE_TIME Os_clockid_t = 32
)

func (Os_clockid_t) String

func (e Os_clockid_t) String() string

type Ptrauth_key

type Ptrauth_key int64
const (
	Ptrauth_key_none                     Ptrauth_key = -1
	Ptrauth_key_asia                     Ptrauth_key = 0
	Ptrauth_key_asib                     Ptrauth_key = 1
	Ptrauth_key_asda                     Ptrauth_key = 2
	Ptrauth_key_asdb                     Ptrauth_key = 3
	Ptrauth_key_process_independent_code Ptrauth_key = 0
	Ptrauth_key_process_dependent_code   Ptrauth_key = 1
	Ptrauth_key_process_independent_data Ptrauth_key = 2
	Ptrauth_key_process_dependent_data   Ptrauth_key = 3
	Ptrauth_key_return_address           Ptrauth_key = 1
	Ptrauth_key_frame_pointer            Ptrauth_key = 3
	Ptrauth_key_function_pointer         Ptrauth_key = 0
	Ptrauth_key_block_function           Ptrauth_key = 0
	Ptrauth_key_cxx_vtable_pointer       Ptrauth_key = 2
	Ptrauth_key_method_list_pointer      Ptrauth_key = 2
	Ptrauth_key_objc_isa_pointer         Ptrauth_key = 2
	Ptrauth_key_objc_super_pointer       Ptrauth_key = 2
	Ptrauth_key_objc_sel_pointer         Ptrauth_key = 3
	Ptrauth_key_objc_class_ro_pointer    Ptrauth_key = 2
	Ptrauth_key_block_descriptor_pointer Ptrauth_key = 2
	Ptrauth_key_init_fini_pointer        Ptrauth_key = 0
)

func (Ptrauth_key) String

func (e Ptrauth_key) String() string

type Qos_class_t

type Qos_class_t uint32
const (
	QOS_CLASS_USER_INTERACTIVE Qos_class_t = 33
	QOS_CLASS_USER_INITIATED   Qos_class_t = 25
	QOS_CLASS_DEFAULT          Qos_class_t = 21
	QOS_CLASS_UTILITY          Qos_class_t = 17
	QOS_CLASS_BACKGROUND       Qos_class_t = 9
	QOS_CLASS_UNSPECIFIED      Qos_class_t = 0
)

func (Qos_class_t) String

func (e Qos_class_t) String() string

type SSLAuthenticate

type SSLAuthenticate int32

The flags that represent the requirements for client-side authentication.

const (
	// Indicates that client-side authentication is not required. (Default.)
	KNeverAuthenticate SSLAuthenticate = 0
	// Indicates that client-side authentication is required.
	KAlwaysAuthenticate SSLAuthenticate = 1
	// Indicates that client-side authentication should be attempted. There is no error if the client doesn’t have a certificate.
	KTryAuthenticate SSLAuthenticate = 2
)

func (SSLAuthenticate) String

func (e SSLAuthenticate) String() string

type SSLCiphersuiteGroup

type SSLCiphersuiteGroup int32

A mechanism for grouping related cipher suites.

const (
	KSSLCiphersuiteGroupDefault          SSLCiphersuiteGroup = 0
	KSSLCiphersuiteGroupCompatibility    SSLCiphersuiteGroup = 1
	KSSLCiphersuiteGroupLegacy           SSLCiphersuiteGroup = 2
	KSSLCiphersuiteGroupATS              SSLCiphersuiteGroup = 3
	KSSLCiphersuiteGroupATSCompatibility SSLCiphersuiteGroup = 4
	KSSLCiphersuiteGroupATSFCP_v2_1      SSLCiphersuiteGroup = 5
)

func (SSLCiphersuiteGroup) String

func (e SSLCiphersuiteGroup) String() string

type SSLClientCertificateState

type SSLClientCertificateState int32

An enumeration of the states of client certificate exchange.

const (
	// Indicates that the server hasn’t asked for a certificate and that the client hasn’t sent one.
	KSSLClientCertNone SSLClientCertificateState = 0
	// Indicates that the server has asked for a certificate, but the client has not sent it.
	KSSLClientCertRequested SSLClientCertificateState = 1
	// Indicates that the server asked for a certificate, the client sent one, and the server validated it. The application can inspect the certificate using the function SSLGetPeerCertificates.
	KSSLClientCertSent SSLClientCertificateState = 2
	// Indicates that the client sent a certificate but the certificate failed validation. This value is seen only on the server side. The server application can inspect the certificate using the function SSLGetPeerCertificates.
	KSSLClientCertRejected SSLClientCertificateState = 3
)

func (SSLClientCertificateState) String

func (e SSLClientCertificateState) String() string

type SSLConnectionType

type SSLConnectionType int32

The flags that indicate whether a context is to be used for streaming or datagram-based communication.

const (
	// Stream-based communication (TCP).
	KSSLStreamType SSLConnectionType = 0
	// Datagram-based communication (UDP).
	KSSLDatagramType SSLConnectionType = 1
)

func (SSLConnectionType) String

func (e SSLConnectionType) String() string

type SSLContext

type SSLContext struct{}

An opaque type that represents an SSL session context object. SSLContext is an opaque type.

type SSLProtocol

type SSLProtocol int32

An enumeration of valid SSL protocol versions.

const (
	// Specifies that no protocol has been or should be negotiated or specified; use default.
	KSSLProtocolUnknown SSLProtocol = 0
	// Specifies that the TLS 1.0 protocol is preferred but lower versions may be negotiated.
	KTLSProtocol1 SSLProtocol = 4
	// Specifies that the TLS 1.1 protocol is preferred but lower versions may be negotiated.
	KTLSProtocol11 SSLProtocol = 7
	// Specifies that the TLS 1.2 protocol is preferred but lower versions may be negotiated.
	KTLSProtocol12 SSLProtocol = 8
	// Specifies the DTLS 1.0 protocol.
	KDTLSProtocol1 SSLProtocol = 9
	// Specifies that the TLS 1.3 protocol is preferred but lower versions may be negotiated.
	KTLSProtocol13 SSLProtocol = 10
	// Specifies the DTLS 1.2 protocol.
	KDTLSProtocol12 SSLProtocol = 11
	// The maximum system supported version.
	KTLSProtocolMaxSupported SSLProtocol = 999
	// Specifies that only the SSL 2.0 protocol may be negotiated. Deprecated in iOS.
	KSSLProtocol2 SSLProtocol = 1
	// Specifies that the SSL 3.0 protocol is preferred; the SSL 2.0 protocol may be negotiated if the peer cannot use the SSL 3.0 protocol.
	KSSLProtocol3 SSLProtocol = 2
	// Specifies that only the SSL 3.0 protocol may be negotiated; fails if the peer tries to negotiate the SSL 2.0 protocol. Deprecated in iOS.
	KSSLProtocol3Only SSLProtocol = 3
	// Specifies that only the TLS 1.0 protocol may be negotiated. Deprecated in iOS.
	KTLSProtocol1Only SSLProtocol = 5
	// Specifies all supported versions. Deprecated in iOS.
	KSSLProtocolAll SSLProtocol = 6
)

func SecProtocolMetadataGetNegotiatedProtocolVersion

func SecProtocolMetadataGetNegotiatedProtocolVersion(metadata unsafe.Pointer) SSLProtocol

C function: sec_protocol_metadata_get_negotiated_protocol_version

func (SSLProtocol) String

func (e SSLProtocol) String() string

type SSLProtocolSide

type SSLProtocolSide int32

The flags that indicate whether a context is for the server or client side of a connection.

const (
	// Server side.
	KSSLServerSide SSLProtocolSide = 0
	// Client side.
	KSSLClientSide SSLProtocolSide = 1
)

func (SSLProtocolSide) String

func (e SSLProtocolSide) String() string

type SSLSessionOption

type SSLSessionOption int32

The options that can be set for an SSL session.

const (
	// Enables returning from SSLHandshake (with a result of errSSLServerAuthCompleted) when the server authentication portion of the handshake is complete to allow your application to perform its own certificate verification.
	KSSLSessionOptionBreakOnServerAuth SSLSessionOption = 0
	// Enables returning from SSLHandshake (with a result of errSSLClientCertRequested) when the server requests a client certificate.
	KSSLSessionOptionBreakOnCertRequested SSLSessionOption = 1
	// Enables returning from SSLHandshake (with a result of errSSLClientAuthCompleted) when the client authentication portion of the handshake is complete to allow your application to perform its own certificate verification.
	KSSLSessionOptionBreakOnClientAuth SSLSessionOption = 2
	// When enabled, TLS False Start is used if an adequate cipher-suite is negotiated.
	KSSLSessionOptionFalseStart SSLSessionOption = 3
	// Enables 1/n-1 record splitting for BEAST attack mitigation.
	KSSLSessionOptionSendOneByteRecord SSLSessionOption = 4
	// Allow server identity change on renegotiation.
	KSSLSessionOptionAllowServerIdentityChange SSLSessionOption = 5
	// Enable fallback countermeasures.
	KSSLSessionOptionFallback SSLSessionOption = 6
	// Break from a client hello in order to check for SNI.
	KSSLSessionOptionBreakOnClientHello SSLSessionOption = 7
	// Allow renegotiation.
	KSSLSessionOptionAllowRenegotiation SSLSessionOption = 8
	// Enable session tickets.
	KSSLSessionOptionEnableSessionTickets SSLSessionOption = 9
)

func (SSLSessionOption) String

func (e SSLSessionOption) String() string

type SSLSessionState

type SSLSessionState int32

The flags that represent the state of an SSL session.

const (
	// No I/O has been performed yet.
	KSSLIdle SSLSessionState = 0
	// The SSL handshake is in progress.
	KSSLHandshake SSLSessionState = 1
	// The SSL handshake is complete; the connection is ready for normal I/O.
	KSSLConnected SSLSessionState = 2
	// The connection closed normally.
	KSSLClosed SSLSessionState = 3
	// The connection aborted.
	KSSLAborted SSLSessionState = 4
)

func (SSLSessionState) String

func (e SSLSessionState) String() string

type SecACL

type SecACL struct{}

@typedef SecACLRef @abstract Contains information about an access control list (ACL) entry. C struct: __SecACL SecACL is an opaque type.

type SecAccess

type SecAccess struct{}

@typedef SecAccessRef @abstract Contains information about an access. C struct: __SecAccess SecAccess is an opaque type.

type SecAccessControl

type SecAccessControl struct{}

@typedef SecAccessControl @abstract CFType representing access control for an item. SecAccessControl.h for details. C struct: __SecAccessControl SecAccessControl is an opaque type.

type SecAccessControlCreateFlags

type SecAccessControlCreateFlags int64

Access control constants that dictate how a keychain item may be used.

const (
	// Constraint to access an item with either biometry or passcode.
	KSecAccessControlUserPresence SecAccessControlCreateFlags = 1
	// Constraint to access an item with Touch ID for any enrolled fingers, or Face ID.
	KSecAccessControlBiometryAny SecAccessControlCreateFlags = 2
	// Constraint to access an item with Touch ID for any enrolled fingers.
	KSecAccessControlTouchIDAny SecAccessControlCreateFlags = 2
	// Constraint to access an item with Touch ID for currently enrolled fingers, or from Face ID with the currently enrolled user.
	KSecAccessControlBiometryCurrentSet SecAccessControlCreateFlags = 8
	// Constraint to access an item with Touch ID for currently enrolled fingers.
	KSecAccessControlTouchIDCurrentSet SecAccessControlCreateFlags = 8
	// Constraint to access an item with a passcode.
	KSecAccessControlDevicePasscode SecAccessControlCreateFlags = 16
	// Constraint to access an item with a watch.
	KSecAccessControlWatch     SecAccessControlCreateFlags = 32
	KSecAccessControlCompanion SecAccessControlCreateFlags = 32
	// Indicates that at least one constraint must be satisfied.
	KSecAccessControlOr SecAccessControlCreateFlags = 16384
	// Indicates that all constraints must be satisfied.
	KSecAccessControlAnd SecAccessControlCreateFlags = 32768
	// Enable a private key to be used in signing a block of data or verifying a signed block.
	KSecAccessControlPrivateKeyUsage SecAccessControlCreateFlags = 1073741824
	// Option to use an application-provided password for data encryption key generation.
	KSecAccessControlApplicationPassword SecAccessControlCreateFlags = 2147483648
)

func (SecAccessControlCreateFlags) String

type SecAsn1AlgId

type SecAsn1AlgId struct {
	Algorithm  CssmData
	Parameters CssmData
}

A structure identifying an ASN.1 algorithm by its OID, and its corresponding parameters.

type SecAsn1Item

type SecAsn1Item = CssmData

SecAsn1Item is an alias for cssm_data (C typedef SecAsn1Item).

type SecAsn1Oid

type SecAsn1Oid = CssmData

SecAsn1Oid is an alias for cssm_data (C typedef SecAsn1Oid).

type SecAsn1PubKeyInfo

type SecAsn1PubKeyInfo struct {
	Algorithm        SecAsn1AlgId
	SubjectPublicKey CssmData
}

A structure containing a public key and its associated algorithm.

type SecAsn1Template

type SecAsn1Template = SecAsn1Template_struct

SecAsn1Template is an alias for SecAsn1Template_struct (C typedef SecAsn1Template).

type SecAsn1Template_struct

type SecAsn1Template_struct struct {
	Kind   uint32
	Offset uint32
	Sub    unsafe.Pointer
	Size   uint32
}

A structure that defines one element of a BER or DER encoding.

type SecAuthenticationType

type SecAuthenticationType int64

The authentication type to use for an Internet password.

const (
	// Specifies Windows NT LAN Manager authentication.
	KSecAuthenticationTypeNTLM SecAuthenticationType = 1835824238
	// Specifies Microsoft Network default authentication.
	KSecAuthenticationTypeMSN SecAuthenticationType = 1634628461
	// Specifies Distributed Password authentication.
	KSecAuthenticationTypeDPA SecAuthenticationType = 1633775716
	// Specifies Remote Password authentication.
	KSecAuthenticationTypeRPA SecAuthenticationType = 1633775730
	// Specifies HTTP Basic authentication.
	KSecAuthenticationTypeHTTPBasic SecAuthenticationType = 1886680168
	// Specifies HTTP Digest Access authentication.
	KSecAuthenticationTypeHTTPDigest SecAuthenticationType = 1685353576
	// Specifies HTML form based authentication.
	KSecAuthenticationTypeHTMLForm SecAuthenticationType = 1836216166
	// Specifies the default authentication type.
	KSecAuthenticationTypeDefault SecAuthenticationType = 1953261156
	// Specifies that any authentication type is acceptable.
	KSecAuthenticationTypeAny SecAuthenticationType = 0
)

func (SecAuthenticationType) String

func (e SecAuthenticationType) String() string

type SecCSDigestAlgorithm

type SecCSDigestAlgorithm int64

The list of digest algorithms available for code signatures.

const (
	KSecCodeSignatureNoHash              SecCSDigestAlgorithm = 0
	KSecCodeSignatureHashSHA1            SecCSDigestAlgorithm = 1
	KSecCodeSignatureHashSHA256          SecCSDigestAlgorithm = 2
	KSecCodeSignatureHashSHA256Truncated SecCSDigestAlgorithm = 3
	KSecCodeSignatureHashSHA384          SecCSDigestAlgorithm = 4
	KSecCodeSignatureHashSHA512          SecCSDigestAlgorithm = 5
)

func (SecCSDigestAlgorithm) String

func (e SecCSDigestAlgorithm) String() string

type SecCSFlags

type SecCSFlags int64

Values that can be used in the flags parameter to most code signing functions.

const (
	// No flags (use the default behavior).
	KSecCSDefaultFlags SecCSFlags = 0
	// Consider expired certificates invalid.
	KSecCSConsiderExpiration            SecCSFlags = 2147483648
	KSecCSEnforceRevocationChecks       SecCSFlags = 1073741824
	KSecCSNoNetworkAccess               SecCSFlags = 536870912
	KSecCSReportProgress                SecCSFlags = 268435456
	KSecCSCheckTrustedAnchors           SecCSFlags = 134217728
	KSecCSQuickCheck                    SecCSFlags = 67108864
	KSecCSApplyEmbeddedPolicy           SecCSFlags = 33554432
	KSecCSStripDisallowedXattrs         SecCSFlags = 16777216
	KSecCSMatchGuestRequirementInKernel SecCSFlags = 8388608
)

func (SecCSFlags) String

func (e SecCSFlags) String() string

type SecCertificate

type SecCertificate struct{}

@typedef SecCertificateRef @abstract CFType representing a X.509 certificate. See SecCertificate.h for details. C struct: __SecCertificate SecCertificate is an opaque type.

type SecCode

type SecCode struct{}

@typedef SecCodeRef This is the type of a reference to running code. In many (but not all) calls, this can be passed to a SecStaticCodeRef argument, which performs an implicit SecCodeCopyStaticCode call and operates on the result. C struct: __SecCode SecCode is an opaque type.

type SecCodeSignatureFlags

type SecCodeSignatureFlags int64

Specify option flags that can be embedded in a code signature during signing and that govern the use of the signature.

const (
	// May host guest code.
	KSecCodeSignatureHost SecCodeSignatureFlags = 1
	// Must be used without a signing identity.
	KSecCodeSignatureAdhoc SecCodeSignatureFlags = 2
	// Always set the kSecCodeStatusHard status flag on launch.
	KSecCodeSignatureForceHard SecCodeSignatureFlags = 256
	// Always set the termination status flag on launch.
	KSecCodeSignatureForceKill SecCodeSignatureFlags = 512
	// Always set the kSecCSConsiderExpiration flag when validating the code.
	KSecCodeSignatureForceExpiration SecCodeSignatureFlags = 1024
	// Restrict dyld loading.
	KSecCodeSignatureRestrict SecCodeSignatureFlags = 2048
	// Enforce code signing.
	KSecCodeSignatureEnforcement SecCodeSignatureFlags = 4096
	// Require library validation.
	KSecCodeSignatureLibraryValidation SecCodeSignatureFlags = 8192
	// Apply runtime hardening policies as required by the hardened runtime version.
	KSecCodeSignatureRuntime      SecCodeSignatureFlags = 65536
	KSecCodeSignatureLinkerSigned SecCodeSignatureFlags = 131072
)

func (SecCodeSignatureFlags) String

func (e SecCodeSignatureFlags) String() string

type SecCodeStatus

type SecCodeStatus int64

Operational flags attached by code signing services to running code.

const (
	// The code is dynamically valid.
	KSecCodeStatusValid SecCodeStatus = 1
	// The code prefers to be denied access to resources if gaining access would invalidate it.
	KSecCodeStatusHard SecCodeStatus = 256
	// The code wants to be terminated if it ever loses its validity.
	KSecCodeStatusKill SecCodeStatus = 512
	// The code has been debugged by another process that was allowed to do so.
	KSecCodeStatusDebugged SecCodeStatus = 268435456
	// The code ships with the operating system and is signed by Apple.
	KSecCodeStatusPlatform SecCodeStatus = 67108864
)

func (SecCodeStatus) String

func (e SecCodeStatus) String() string

type SecCredentialType

type SecCredentialType int64

The credential type to be returned by SecKeyGetCredentials. Deprecated: No longer supported

const (
	// The default setting for determining whether to present UI is used.
	KSecCredentialTypeDefault SecCredentialType = 0
	// Keychain operations on keys that have this credential are allowed to present UI if required.
	KSecCredentialTypeWithUI SecCredentialType = 1
	// Keychain operations on keys that have this credential are not allowed to present UI, and will fail if UI is required.
	KSecCredentialTypeNoUI SecCredentialType = 2
)

func (SecCredentialType) String

func (e SecCredentialType) String() string

type SecExternalFormat

type SecExternalFormat int64

The external format of a keychain item.

const (
	KSecFormatUnknown SecExternalFormat = 0
	// Format for asymmetric (public/private) keys. OpenSSL is an open source toolkit for Secure Sockets Layer (SSL) and Transport Layer Security (TLS). Also known as X.509 for public keys.
	KSecFormatOpenSSL SecExternalFormat = 1
	// OpenSSH 1 format for asymmetric (public/private) keys. OpenSSH is an OpenBSD implementation of the Secure Shell (SSH) protocol.
	KSecFormatSSH SecExternalFormat = 2
	// Format for asymmetric keys. BSAFE is a standard from RSA Security for encryption, digital signatures, and privacy.
	KSecFormatBSAFE SecExternalFormat = 3
	// Format for symmetric keys. Raw, unformatted key bits. This is the default for symmetric keys.
	KSecFormatRawKey SecExternalFormat = 4
	// Format for wrapped symmetric and private keys. PKCS8 is the Private-Key Information Syntax Standard from RSA Security.
	KSecFormatWrappedPKCS8 SecExternalFormat = 5
	// Format for wrapped symmetric and private keys. OpenSSL is an open-source toolkit for Secure Sockets Layer (SSL) and Transport Layer Security (TLS).
	KSecFormatWrappedOpenSSL SecExternalFormat = 6
	// OpenSSH 1 format for wrapped symmetric and private keys. OpenSSH is an OpenBSD implementation of the Secure Shell (SSH) protocol.
	KSecFormatWrappedSSH SecExternalFormat = 7
	// Not supported.
	KSecFormatWrappedLSH SecExternalFormat = 8
	// Format for certificates. DER (distinguished encoding rules) encoded. X.509 is a standard for digital certificates from the International Telecommunication Union (ITU). This is the default for certificates.
	KSecFormatX509Cert SecExternalFormat = 9
	// Sequence of certificates and keys with PEM armor. PEM armor refers to a way of expressing binary data as an ASCII string so that it can be transferred over text-only channels such as email. This is the default format for multiple items.
	KSecFormatPEMSequence SecExternalFormat = 10
	// Sequence of certificates, no PEM armor. PKCS7 is the Cryptographic Message Syntax Standard from RSA Security, Inc.
	KSecFormatPKCS7 SecExternalFormat = 11
	// Set of certificates and private keys. PKCS12 is the Personal Information Exchange Syntax from RSA Security, Inc.
	KSecFormatPKCS12 SecExternalFormat = 12
	// Set of certificates in the Netscape Certificate Sequence format.
	KSecFormatNetscapeCertSequence SecExternalFormat = 13
	// OpenSSH 2 format for public keys. OpenSSH version 2 private keys are in format kSecFormatOpenSSL or kSecFormatWrappedOpenSSL. OpenSSH is an OpenBSD implementation of the Secure Shell (SSH) protocol.
	KSecFormatSSHv2 SecExternalFormat = 14
)

func (SecExternalFormat) String

func (e SecExternalFormat) String() string

type SecExternalItemType

type SecExternalItemType int64

The import item type.

const (
	// Indicates that the caller does not know the type of information being imported or exported.
	KSecItemTypeUnknown SecExternalItemType = 0
	// Indicates a private key.
	KSecItemTypePrivateKey SecExternalItemType = 1
	// Indicates a public key.
	KSecItemTypePublicKey SecExternalItemType = 2
	// Indicates a session key.
	KSecItemTypeSessionKey SecExternalItemType = 3
	// Indicates a certificate.
	KSecItemTypeCertificate SecExternalItemType = 4
	// Indicates a set of certificates or certificates and private keys.
	KSecItemTypeAggregate SecExternalItemType = 5
)

func (SecExternalItemType) String

func (e SecExternalItemType) String() string

type SecIdentity

type SecIdentity struct{}

@typedef SecIdentityRef @abstract CFType representing an identity, which contains a SecKeyRef and an associated SecCertificateRef. See SecIdentity.h for details. C struct: __SecIdentity SecIdentity is an opaque type.

type SecItemAttr

type SecItemAttr int64

Specifies a keychain item’s attributes.

const (
	// Identifies the creation date attribute.
	KSecCreationDateItemAttr SecItemAttr = 1667522932
	// Identifies the modification date attribute.
	KSecModDateItemAttr SecItemAttr = 1835295092
	// Identifies the description attribute.
	KSecDescriptionItemAttr SecItemAttr = 1684370275
	// Identifies the comment attribute.
	KSecCommentItemAttr SecItemAttr = 1768123764
	// Identifies the creator attribute.
	KSecCreatorItemAttr SecItemAttr = 1668445298
	// Identifies the type attribute.
	KSecTypeItemAttr SecItemAttr = 1954115685
	// Identifies the script code attribute.
	KSecScriptCodeItemAttr SecItemAttr = 1935897200
	// Identifies the label attribute.
	KSecLabelItemAttr SecItemAttr = 1818321516
	// Identifies the invisible attribute.
	KSecInvisibleItemAttr SecItemAttr = 1768846953
	// Identifies the negative attribute.
	KSecNegativeItemAttr SecItemAttr = 1852139361
	// Identifies the custom icon attribute.
	KSecCustomIconItemAttr SecItemAttr = 1668641641
	// Identifies the account attribute.
	KSecAccountItemAttr SecItemAttr = 1633903476
	// Identifies the service attribute.
	KSecServiceItemAttr SecItemAttr = 1937138533
	// Identifies the generic attribute.
	KSecGenericItemAttr SecItemAttr = 1734700641
	// Identifies the security domain attribute.
	KSecSecurityDomainItemAttr SecItemAttr = 1935961454
	// Identifies the server attribute.
	KSecServerItemAttr SecItemAttr = 1936881266
	// Identifies the authentication type attribute.
	KSecAuthenticationTypeItemAttr SecItemAttr = 1635023216
	// Identifies the port attribute.
	KSecPortItemAttr SecItemAttr = 1886351988
	// Identifies the path attribute.
	KSecPathItemAttr SecItemAttr = 1885434984
	// Identifies the volume attribute.
	KSecVolumeItemAttr SecItemAttr = 1986817381
	// Identifies the address attribute.
	KSecAddressItemAttr SecItemAttr = 1633969266
	// Identifies the server signature attribute.
	KSecSignatureItemAttr SecItemAttr = 1936943463
	// Identifies the protocol attribute.
	KSecProtocolItemAttr SecItemAttr = 1886675820
	// Indicates a CSSM_CERT_TYPE type.
	KSecCertificateType SecItemAttr = 1668577648
	// Indicates a CSSM_CERT_ENCODING type.
	KSecCertificateEncoding SecItemAttr = 1667591779
	// Indicates a CSSM_CRL_TYPE type.
	KSecCrlType SecItemAttr = 1668445296
	// Indicates a CSSM_CRL_ENCODING type.
	KSecCrlEncoding SecItemAttr = 1668443747
	// Indicates an alias.
	KSecAlias SecItemAttr = 1634494835
)

func (SecItemAttr) String

func (e SecItemAttr) String() string

type SecItemClass

type SecItemClass int64

Specifies a keychain item’s class code.

const (
	// Indicates that the item is an Internet password.
	KSecInternetPasswordItemClass SecItemClass = 1768842612
	// Indicates that the item is a generic password.
	KSecGenericPasswordItemClass SecItemClass = 1734700656
	// Indicates that the item is an AppleShare password.
	KSecAppleSharePasswordItemClass SecItemClass = 1634953328
	// Indicates that the item is an X509 certificate.
	KSecCertificateItemClass SecItemClass = 2147487744
	// Indicates that the item is a public key of a public-private pair.
	KSecPublicKeyItemClass SecItemClass = 15
	// Indicates that the item is a private key of a public-private pair.
	KSecPrivateKeyItemClass SecItemClass = 16
	// Indicates that the item is a private key used for symmetric-key encryption.
	KSecSymmetricKeyItemClass SecItemClass = 17
)

func (SecItemClass) String

func (e SecItemClass) String() string

type SecItemImportExportFlags

type SecItemImportExportFlags int64

The import and export function flags.

const (
	// A flag that indicates the exported data should have PEM armor.
	KSecItemPemArmour SecItemImportExportFlags = 1
)

func (SecItemImportExportFlags) String

func (e SecItemImportExportFlags) String() string

type SecItemImportExportKeyParameters

type SecItemImportExportKeyParameters struct {
	Version       uint32
	Flags         SecKeyImportExportFlags
	Passphrase    unsafe.Pointer
	AlertTitle    unsafe.Pointer
	AlertPrompt   unsafe.Pointer
	AccessRef     unsafe.Pointer
	KeyUsage      unsafe.Pointer
	KeyAttributes unsafe.Pointer
}

The import/export parameter structure.

type SecKey

type SecKey struct{}

@typedef SecKeyRef @abstract CFType representing a cryptographic key. See SecKey.h for details. C struct: __SecKey SecKey is an opaque type.

type SecKeyImportExportFlags

type SecKeyImportExportFlags int64

The import/export parameter structure flags.

const (
	// A flag that you set to prevent importing more than one private key.
	KSecKeyImportOnlyOne SecKeyImportExportFlags = 1
	// A flag that indicates the user should be prompted for a passphrase on import or export.
	KSecKeySecurePassphrase SecKeyImportExportFlags = 2
	// A flag that indicates imported private keys have no access object attached to them.
	KSecKeyNoAccessControl SecKeyImportExportFlags = 4
)

func (SecKeyImportExportFlags) String

func (e SecKeyImportExportFlags) String() string

type SecKeyImportExportParameters

type SecKeyImportExportParameters struct {
	Version       uint32
	Flags         SecKeyImportExportFlags
	Passphrase    unsafe.Pointer
	AlertTitle    unsafe.Pointer
	AlertPrompt   unsafe.Pointer
	AccessRef     unsafe.Pointer
	KeyUsage      uint32
	KeyAttributes uint32
}

The legacy import/export parameter structure.

type SecKeyOperationType

type SecKeyOperationType int64

The types of operations that you can use a cryptographic key to perform.

const (
	KSecKeyOperationTypeSign        SecKeyOperationType = 0
	KSecKeyOperationTypeVerify      SecKeyOperationType = 1
	KSecKeyOperationTypeEncrypt     SecKeyOperationType = 2
	KSecKeyOperationTypeDecrypt     SecKeyOperationType = 3
	KSecKeyOperationTypeKeyExchange SecKeyOperationType = 4
)

func (SecKeyOperationType) String

func (e SecKeyOperationType) String() string

type SecKeySizes

type SecKeySizes int64

The supported sizes for keys of various common types. Deprecated: No longer supported

const (
	// The default key size for the specified type.
	KSecDefaultKeySize SecKeySizes = 0
	// 192-bit DES.
	KSec3DES192 SecKeySizes = 192
	// 128-bit AES.
	KSecAES128 SecKeySizes = 128
	// 192-bit AES.
	KSecAES192 SecKeySizes = 192
	// 256-bit AES.
	KSecAES256 SecKeySizes = 256
	// 192-bit ECC Keys for Suite-B from RFC 4492 section 5.1.1.
	KSecp192r1 SecKeySizes = 192
	// 256-bit ECC Keys for Suite-B from RFC 4492 section 5.1.1.
	KSecp256r1 SecKeySizes = 256
	// 384-bit ECC Keys for Suite-B from RFC 4492 section 5.1.1.
	KSecp384r1 SecKeySizes = 384
	// 521-bit ECC Keys for Suite-B from RFC 4492 section 5.1.1.
	KSecp521r1 SecKeySizes = 521
	// 1024 bits is the minimum size for an RSA key.
	KSecRSAMin SecKeySizes = 1024
	// 4096 bits is the maximum size for an RSA key.
	KSecRSAMax SecKeySizes = 4096
)

func (SecKeySizes) String

func (e SecKeySizes) String() string

type SecKeyUsage

type SecKeyUsage int64

The flags that indicate key usage in the KeyUsage extension of a certificate.

const (
	KSecKeyUsageUnspecified SecKeyUsage = 0
	// The DigitalSignature bit is set in KeyUsage extension.
	KSecKeyUsageDigitalSignature SecKeyUsage = 1
	// The NonRepudiation bit is set in KeyUsage extension.
	KSecKeyUsageNonRepudiation SecKeyUsage = 2
	// The ContentCommitment bit is set in KeyUsage extension.
	KSecKeyUsageContentCommitment SecKeyUsage = 2
	// The KeyEncipherment bit is set in KeyUsage extension.
	KSecKeyUsageKeyEncipherment SecKeyUsage = 4
	// The DataEncipherment bit is set in KeyUsage extension.
	KSecKeyUsageDataEncipherment SecKeyUsage = 8
	// The KeyAgreement bit is set in KeyUsage extension.
	KSecKeyUsageKeyAgreement SecKeyUsage = 16
	// The KeyCertSign bit is set in KeyUsage extension.
	KSecKeyUsageKeyCertSign SecKeyUsage = 32
	// The CRLSign bit is set in KeyUsage extension.
	KSecKeyUsageCRLSign SecKeyUsage = 64
	// The EncipherOnly bit is set in KeyUsage extension.
	KSecKeyUsageEncipherOnly SecKeyUsage = 128
	// The DecipherOnly bit is set in KeyUsage extension.
	KSecKeyUsageDecipherOnly SecKeyUsage = 256
	// The KeyUsage extension is marked critical.
	KSecKeyUsageCritical SecKeyUsage = 2147483648
	// All flags set.
	KSecKeyUsageAll SecKeyUsage = 2147483647
)

func (SecKeyUsage) String

func (e SecKeyUsage) String() string

type SecKeychain

type SecKeychain struct{}

@typedef SecKeychainRef @abstract Contains information about a keychain. C struct: __SecKeychain SecKeychain is an opaque type.

type SecKeychainAttribute

type SecKeychainAttribute struct {
	Tag    uint
	Length uint
	Data   unsafe.Pointer
}

A structure that holds a single keychain attribute.

type SecKeychainAttributeInfo

type SecKeychainAttributeInfo struct {
	Count  uint
	Tag    *uint
	Format *uint
}

A structure that represents an attribute.

type SecKeychainAttributeList

type SecKeychainAttributeList struct {
	Count uint
	Attr  *SecKeychainAttribute
}

A list of keychain attributes.

type SecKeychainCallbackInfo

type SecKeychainCallbackInfo struct {
	Version  uint
	Item     unsafe.Pointer
	Keychain unsafe.Pointer
	Pid      int
}

Information about a keychain event that keychain services deliver to your app via a callback function.

type SecKeychainEvent

type SecKeychainEvent int64

The list of keychain events that can trigger a callback.

const (
	// Indicates a keychain was locked.
	KSecLockEvent SecKeychainEvent = 1
	// Indicates a keychain was successfully unlocked.
	KSecUnlockEvent SecKeychainEvent = 2
	// Indicates an item was added to a keychain.
	KSecAddEvent SecKeychainEvent = 3
	// Indicates an item was deleted from a keychain.
	KSecDeleteEvent SecKeychainEvent = 4
	// Indicates a keychain item was updated.
	KSecUpdateEvent SecKeychainEvent = 5
	// Indicates the keychain password was changed.
	KSecPasswordChangedEvent SecKeychainEvent = 6
	// Indicates that a different keychain was specified as the default.
	KSecDefaultChangedEvent SecKeychainEvent = 9
	// Indicates a process has accessed a keychain item’s data.
	KSecDataAccessEvent SecKeychainEvent = 10
	// Indicates the list of keychains has changed.
	KSecKeychainListChangedEvent SecKeychainEvent = 11
	// Indicates trust settings have changed.
	KSecTrustSettingsChangedEvent SecKeychainEvent = 12
)

func (SecKeychainEvent) String

func (e SecKeychainEvent) String() string

type SecKeychainEventMask

type SecKeychainEventMask int64

Bit masks corresponding to the events that can trigger a keychain callback.

const (
	// If the bit specified by this mask is set, your callback function is invoked when a keychain is locked.
	KSecLockEventMask SecKeychainEventMask = 2
	// If the bit specified by this mask is set, your callback function is invoked when a keychain is unlocked.
	KSecUnlockEventMask SecKeychainEventMask = 4
	// If the bit specified by this mask is set, your callback function is invoked when an item is added to a keychain.
	KSecAddEventMask SecKeychainEventMask = 8
	// If the bit specified by this mask is set, your callback function is invoked when an item is deleted from a keychain.
	KSecDeleteEventMask SecKeychainEventMask = 16
	// If the bit specified by this mask is set, your callback function is invoked when a keychain item is updated.
	KSecUpdateEventMask SecKeychainEventMask = 32
	// If the bit specified by this mask is set, your callback function is invoked when the keychain password is changed.
	KSecPasswordChangedEventMask SecKeychainEventMask = 64
	// If the bit specified by this mask is set, your callback function is invoked when a different keychain is specified as the default.
	KSecDefaultChangedEventMask SecKeychainEventMask = 512
	// If the bit specified by this mask is set, your callback function is invoked when a process accesses a keychain item’s data.
	KSecDataAccessEventMask SecKeychainEventMask = 1024
	// If the bit specified by this mask is set, your callback function is invoked when a keychain list is changed.
	KSecKeychainListChangedMask SecKeychainEventMask = 2048
	// If the bit specified by this mask is set, your callback function is invoked when there is a change in certificate trust settings.
	KSecTrustSettingsChangedEventMask SecKeychainEventMask = 4096
	// If all the bits are set, your callback function is invoked whenever any event occurs.
	KSecEveryEventMask SecKeychainEventMask = 4294967295
)

func (SecKeychainEventMask) String

func (e SecKeychainEventMask) String() string

type SecKeychainItem

type SecKeychainItem struct{}

@typedef SecKeychainItemRef @abstract Contains information about a keychain item. C struct: __SecKeychainItem SecKeychainItem is an opaque type.

type SecKeychainPromptSelector

type SecKeychainPromptSelector int64

Bits that define when a keychain should require a passphrase.

const (
	// Indicates that a passphrase should be required for every access.
	KSecKeychainPromptRequirePassphase SecKeychainPromptSelector = 1
	// Indicates that a passphrase should be required when an unsigned application attempts to use the keychain, overriding the system default.
	KSecKeychainPromptUnsigned SecKeychainPromptSelector = 16
	// Indicates that a passphrase should be required when an unsigned application attempts to use the keychain.
	KSecKeychainPromptUnsignedAct SecKeychainPromptSelector = 32
	// Indicates that a passphrase should be required when an application with an invalid signature attempts to use the keychain, overriding the system default.
	KSecKeychainPromptInvalid SecKeychainPromptSelector = 64
	// Indicates that a passphrase should be required when an application with an invalid signature attempts to use the keychain.
	KSecKeychainPromptInvalidAct SecKeychainPromptSelector = 128
)

func (SecKeychainPromptSelector) String

func (e SecKeychainPromptSelector) String() string

type SecKeychainSearch

type SecKeychainSearch struct{}

@typedef SecKeychainSearchRef @abstract Contains information about a keychain search. C struct: __SecKeychainSearch SecKeychainSearch is an opaque type.

type SecKeychainSettings

type SecKeychainSettings struct {
	Version         uint
	LockOnSleep     uint8
	UseLockInterval uint8
	LockInterval    uint
}

A structure that contains information about keychain settings.

type SecPadding

type SecPadding int64

The types of padding to use when you create or verify a digital signature. Deprecated: Replaced with SecKeyAlgorithm

const (
	// No padding.
	KSecPaddingNone SecPadding = 0
	// PKCS1 padding.
	KSecPaddingPKCS1  SecPadding = 1
	KSecPaddingSigRaw SecPadding = 16384
	// Data to be signed is an MD2 hash.
	KSecPaddingPKCS1MD2 SecPadding = 32768
	// Data to be signed is an MD5 hash.
	KSecPaddingPKCS1MD5 SecPadding = 32769
	// Data to be signed is a SHA1 hash.
	KSecPaddingPKCS1SHA1 SecPadding = 32770
)

func (SecPadding) String

func (e SecPadding) String() string

type SecPassword

type SecPassword struct{}

@typedef SecPasswordRef @abstract Contains information about a password. C struct: __SecPassword SecPassword is an opaque type.

type SecPolicy

type SecPolicy struct{}

@typedef SecPolicyRef @abstract CFType representing a X.509 certificate trust policy. See SecPolicy.h for details. C struct: __SecPolicy SecPolicy is an opaque type.

type SecPreferencesDomain

type SecPreferencesDomain int32

The keychain preference domains.

const (
	// Indicates the user preference domain preferences.
	KSecPreferencesDomainUser SecPreferencesDomain = 0
	// Indicates the system or daemon preference domain preferences.
	KSecPreferencesDomainSystem SecPreferencesDomain = 1
	// Indicates the preferences are common to everyone.
	KSecPreferencesDomainCommon SecPreferencesDomain = 2
	// Indicates a dynamic search list (typically provided by removable keychains such as smart cards).
	KSecPreferencesDomainDynamic SecPreferencesDomain = 3
)

func (SecPreferencesDomain) String

func (e SecPreferencesDomain) String() string

type SecProtocolType

type SecProtocolType int64

The protocol type associated with an Internet password.

const (
	// Indicates FTP.
	KSecProtocolTypeFTP SecProtocolType = 1718906912
	// Indicates a client side FTP account. The usage of this constant is deprecated as of macOS 10.3.
	KSecProtocolTypeFTPAccount SecProtocolType = 1718906977
	// Indicates HTTP.
	KSecProtocolTypeHTTP SecProtocolType = 1752462448
	// Indicates IRC.
	KSecProtocolTypeIRC SecProtocolType = 1769104160
	// Indicates NNTP.
	KSecProtocolTypeNNTP SecProtocolType = 1852732528
	// Indicates POP3.
	KSecProtocolTypePOP3 SecProtocolType = 1886351411
	// Indicates SMTP.
	KSecProtocolTypeSMTP SecProtocolType = 1936553072
	// Indicates SOCKS.
	KSecProtocolTypeSOCKS SecProtocolType = 1936685088
	// Indicates IMAP.
	KSecProtocolTypeIMAP SecProtocolType = 1768776048
	// Indicates LDAP.
	KSecProtocolTypeLDAP SecProtocolType = 1818517872
	// Indicates AFP over AppleTalk.
	KSecProtocolTypeAppleTalk SecProtocolType = 1635019883
	// Indicates AFP over TCP.
	KSecProtocolTypeAFP SecProtocolType = 1634103328
	// Indicates Telnet.
	KSecProtocolTypeTelnet SecProtocolType = 1952803950
	// Indicates SSH.
	KSecProtocolTypeSSH SecProtocolType = 1936943136
	// Indicates FTP over TLS/SSL.
	KSecProtocolTypeFTPS SecProtocolType = 1718906995
	// Indicates HTTP over TLS/SSL.
	KSecProtocolTypeHTTPS SecProtocolType = 1752461427
	// Indicates HTTP proxy.
	KSecProtocolTypeHTTPProxy SecProtocolType = 1752461432
	// Indicates HTTPS proxy.
	KSecProtocolTypeHTTPSProxy SecProtocolType = 1752462200
	// Indicates FTP proxy.
	KSecProtocolTypeFTPProxy SecProtocolType = 1718907000
	// Indicates CIFS.
	KSecProtocolTypeCIFS SecProtocolType = 1667851891
	// Indicates SMB.
	KSecProtocolTypeSMB SecProtocolType = 1936548384
	// Indicates RTSP.
	KSecProtocolTypeRTSP SecProtocolType = 1920234352
	// Indicates RTSP proxy.
	KSecProtocolTypeRTSPProxy SecProtocolType = 1920234360
	// Indicates DAAP.
	KSecProtocolTypeDAAP SecProtocolType = 1684103536
	// Indicates Remote Apple Events.
	KSecProtocolTypeEPPC SecProtocolType = 1701867619
	// Indicates IPP.
	KSecProtocolTypeIPP SecProtocolType = 1768976416
	// Indicates NNTP over TLS/SSL.
	KSecProtocolTypeNNTPS SecProtocolType = 1853124723
	// Indicates LDAP over TLS/SSL.
	KSecProtocolTypeLDAPS SecProtocolType = 1818521715
	// Indicates Telnet over TLS/SSL.
	KSecProtocolTypeTelnetS SecProtocolType = 1952803955
	// Indicates IMAP4 over TLS/SSL.
	KSecProtocolTypeIMAPS SecProtocolType = 1768779891
	// Indicates IRC over TLS/SSL.
	KSecProtocolTypeIRCS SecProtocolType = 1769104243
	// Indicates POP3 over TLS/SSL.
	KSecProtocolTypePOP3S SecProtocolType = 1886351475
	// Indicates CVS pserver.
	KSecProtocolTypeCVSpserver SecProtocolType = 1668707184
	// Indicates Subversion.
	KSecProtocolTypeSVN SecProtocolType = 1937141280
	// Indicates that any protocol is acceptable.
	KSecProtocolTypeAny SecProtocolType = 0
)

func (SecProtocolType) String

func (e SecProtocolType) String() string

type SecRandom

type SecRandom struct{}

@typedef SecRandomRef @abstract Reference to a (pseudo) random number generator. C struct: __SecRandom SecRandom is an opaque type.

type SecRequirement

type SecRequirement struct{}

@typedef SecRequirementRef This is the type of a reference to a code requirement. C struct: __SecRequirement SecRequirement is an opaque type.

type SecRequirementType

type SecRequirementType int64

An enumeration indicating different types of internal requirements for code.

const (
	// What hosts may run this code.
	KSecHostRequirementType SecRequirementType = 1
	// What guests this code may run.
	KSecGuestRequirementType SecRequirementType = 2
	// A designated requirement.
	KSecDesignatedRequirementType SecRequirementType = 3
	// What libraries this code may link against.
	KSecLibraryRequirementType SecRequirementType = 4
	// What plug-ins this code may load.
	KSecPluginRequirementType SecRequirementType = 5
	// Invalid type of requirement.
	KSecInvalidRequirementType SecRequirementType = 6
	// The number of valid requirement types.
	KSecRequirementTypeCount SecRequirementType = 6
)

func (SecRequirementType) String

func (e SecRequirementType) String() string

type SecTask

type SecTask struct{}

@typedef SecTaskRef @abstract CFType used for representing a task C struct: __SecTask SecTask is an opaque type.

type SecTransformMetaAttributeType

type SecTransformMetaAttributeType int64

The keys that describe the metadata attributes of transform attributes. Deprecated: SecTransform is no longer supported

const (
	// The actual value of the attribute.
	KSecTransformMetaAttributeValue SecTransformMetaAttributeType = 0
	// The name of the attribute.
	KSecTransformMetaAttributeName SecTransformMetaAttributeType = 1
	// A direct reference to an attribute’s value.
	KSecTransformMetaAttributeRef SecTransformMetaAttributeType = 2
	// Indicates whether the attribute value is optional.
	KSecTransformMetaAttributeRequired SecTransformMetaAttributeType = 3
	// The attribute requires an outbound connection.
	KSecTransformMetaAttributeRequiresOutboundConnection SecTransformMetaAttributeType = 4
	// The attribute defers notifications.
	KSecTransformMetaAttributeDeferred SecTransformMetaAttributeType = 5
	// The attribute expects stream operation.
	KSecTransformMetaAttributeStream SecTransformMetaAttributeType = 6
	// The transform allows cyclic behavior.
	KSecTransformMetaAttributeCanCycle SecTransformMetaAttributeType = 7
	// The attribute is exportable.
	KSecTransformMetaAttributeExternalize SecTransformMetaAttributeType = 8
	// The attribute has an outbound connection.
	KSecTransformMetaAttributeHasOutboundConnections SecTransformMetaAttributeType = 9
	// The attribute has an inbound connection.
	KSecTransformMetaAttributeHasInboundConnection SecTransformMetaAttributeType = 10
)

func (SecTransformMetaAttributeType) String

type SecTrust

type SecTrust struct{}

@typedef SecTrustRef @abstract CFType used for performing X.509 certificate trust evaluations. C struct: __SecTrust SecTrust is an opaque type.

type SecTrustOptionFlags

type SecTrustOptionFlags int64

The option flags used to condition a trust evaluation.

const (
	// Allow expired certificates (except for the root certificate).
	KSecTrustOptionAllowExpired SecTrustOptionFlags = 1
	// Allow CA certificates as leaf certificates.
	KSecTrustOptionLeafIsCA SecTrustOptionFlags = 2
	// Allow network downloads of CA certificates.
	KSecTrustOptionFetchIssuerFromNet SecTrustOptionFlags = 4
	// Allow expired root certificates.
	KSecTrustOptionAllowExpiredRoot SecTrustOptionFlags = 8
	// Require a positive revocation check for each certificate.
	KSecTrustOptionRequireRevPerCert SecTrustOptionFlags = 16
	// Use TrustSettings instead of anchors.
	KSecTrustOptionUseTrustSettings SecTrustOptionFlags = 32
	// Treat properly self-signed certificates as anchors implicitly.
	KSecTrustOptionImplicitAnchors SecTrustOptionFlags = 64
)

func (SecTrustOptionFlags) String

func (e SecTrustOptionFlags) String() string

type SecTrustResultType

type SecTrustResultType int64

Trust evaluation result codes.

const (
	// An indication of an invalid setting or result.
	KSecTrustResultInvalid SecTrustResultType = 0
	// The user granted permission to trust the certificate for the purposes designated in the specified policies.
	KSecTrustResultProceed SecTrustResultType = 1
	// User confirmation is required before proceeding.
	KSecTrustResultConfirm SecTrustResultType = 2
	// The user specified that the certificate should not be trusted.
	KSecTrustResultDeny SecTrustResultType = 3
	// The user did not specify a trust setting.
	KSecTrustResultUnspecified SecTrustResultType = 4
	// Trust is denied, but recovery may be possible.
	KSecTrustResultRecoverableTrustFailure SecTrustResultType = 5
	// Trust is denied and no simple fix is available.
	KSecTrustResultFatalTrustFailure SecTrustResultType = 6
	// A value that indicates a failure other than trust evaluation.
	KSecTrustResultOtherError SecTrustResultType = 7
)

func (SecTrustResultType) String

func (e SecTrustResultType) String() string

type SecTrustSettingsDomain

type SecTrustSettingsDomain int64

The trust settings domains.

const (
	// Per-user trust settings.
	KSecTrustSettingsDomainUser SecTrustSettingsDomain = 0
	// Locally administered, system-wide trust settings.
	KSecTrustSettingsDomainAdmin SecTrustSettingsDomain = 1
	// System trust settings.
	KSecTrustSettingsDomainSystem SecTrustSettingsDomain = 2
)

func (SecTrustSettingsDomain) String

func (e SecTrustSettingsDomain) String() string

type SecTrustSettingsKeyUsage

type SecTrustSettingsKeyUsage int64

Allowed uses for the encryption key in a certificate.

const (
	// The key can be used to sign data or verify a signature.
	KSecTrustSettingsKeyUseSignature SecTrustSettingsKeyUsage = 1
	// The key can be used to encrypt or decrypt data.
	KSecTrustSettingsKeyUseEnDecryptData SecTrustSettingsKeyUsage = 2
	// The key can be used to encrypt or decrypt (wrap or unwrap) a key.
	KSecTrustSettingsKeyUseEnDecryptKey SecTrustSettingsKeyUsage = 4
	// The key can be used to sign a certificate or verify a signature.
	KSecTrustSettingsKeyUseSignCert SecTrustSettingsKeyUsage = 8
	// The key can be used to sign an OCSP (online certificate status protocol) message or CRL (certificate verification list), or to verify a signature.
	KSecTrustSettingsKeyUseSignRevocation SecTrustSettingsKeyUsage = 16
	// The key is a private key that has been shared using a key exchange protocol, such as Diffie-Hellman key exchange.
	KSecTrustSettingsKeyUseKeyExchange SecTrustSettingsKeyUsage = 32
	// The key can be used for any purpose.
	KSecTrustSettingsKeyUseAny SecTrustSettingsKeyUsage = 4294967295
)

func (SecTrustSettingsKeyUsage) String

func (e SecTrustSettingsKeyUsage) String() string

type SecTrustSettingsResult

type SecTrustSettingsResult int64

Trust settings returned in usage constraints dictionaries.

const (
	// Never valid in a trust settings array or in an API call.
	KSecTrustSettingsResultInvalid SecTrustSettingsResult = 0
	// This root certificate is explicitly trusted.
	KSecTrustSettingsResultTrustRoot SecTrustSettingsResult = 1
	// This non-root certificate is explicitly trusted as if it were a trusted root.
	KSecTrustSettingsResultTrustAsRoot SecTrustSettingsResult = 2
	// This certificate is explicitly distrusted.
	KSecTrustSettingsResultDeny SecTrustSettingsResult = 3
	// This certificate is neither trusted nor distrusted. This value can be used to specify an “allowed error” without assigning trust to a specific certificate.
	KSecTrustSettingsResultUnspecified SecTrustSettingsResult = 4
)

func (SecTrustSettingsResult) String

func (e SecTrustSettingsResult) String() string

type SecTrustedApplication

type SecTrustedApplication struct{}

@typedef SecTrustedApplicationRef @abstract Contains information about a trusted application. C struct: __SecTrustedApplication SecTrustedApplication is an opaque type.

type SessionAttributeBits

type SessionAttributeBits int64

The attributes of a security session.

const (
	// A bit that indicates the session is the root session.
	SessionIsRoot SessionAttributeBits = 1
	// A bit that indicates a graphic subsystem is available.
	SessionHasGraphicAccess SessionAttributeBits = 16
	// A bit that indicates /dev/tty is available.
	SessionHasTTY SessionAttributeBits = 32
	// A bit that indicates the session was initiated over the network.
	SessionIsRemote SessionAttributeBits = 4096
)

func (SessionAttributeBits) String

func (e SessionAttributeBits) String() string

type SessionCreationFlags

type SessionCreationFlags int64

The flags that affect the creation of a security session.

const (
	// The caller has allocated sub-bootstrap.
	SessionKeepCurrentBootstrap SessionCreationFlags = 32768
)

func (SessionCreationFlags) String

func (e SessionCreationFlags) String() string

type Tls_ciphersuite_group_t

type Tls_ciphersuite_group_t int64

Groups that collect ciphersuites of comparable security properties.

const (
	Tls_ciphersuite_group_default           Tls_ciphersuite_group_t = 0
	Tls_ciphersuite_group_compatibility     Tls_ciphersuite_group_t = 1
	Tls_ciphersuite_group_legacy            Tls_ciphersuite_group_t = 2
	Tls_ciphersuite_group_ats               Tls_ciphersuite_group_t = 3
	Tls_ciphersuite_group_ats_compatibility Tls_ciphersuite_group_t = 4
	Tls_ciphersuite_group_ats_fcp_v2_1      Tls_ciphersuite_group_t = 5
)

func (Tls_ciphersuite_group_t) String

func (e Tls_ciphersuite_group_t) String() string

type Tls_ciphersuite_t

type Tls_ciphersuite_t int64

The collection of valid ciphersuites.

const (
	Tls_ciphersuite_RSA_WITH_3DES_EDE_CBC_SHA                 Tls_ciphersuite_t = 10
	Tls_ciphersuite_RSA_WITH_AES_128_CBC_SHA                  Tls_ciphersuite_t = 47
	Tls_ciphersuite_RSA_WITH_AES_256_CBC_SHA                  Tls_ciphersuite_t = 53
	Tls_ciphersuite_RSA_WITH_AES_128_GCM_SHA256               Tls_ciphersuite_t = 156
	Tls_ciphersuite_RSA_WITH_AES_256_GCM_SHA384               Tls_ciphersuite_t = 157
	Tls_ciphersuite_RSA_WITH_AES_128_CBC_SHA256               Tls_ciphersuite_t = 60
	Tls_ciphersuite_RSA_WITH_AES_256_CBC_SHA256               Tls_ciphersuite_t = 61
	Tls_ciphersuite_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA         Tls_ciphersuite_t = 49160
	Tls_ciphersuite_ECDHE_ECDSA_WITH_AES_128_CBC_SHA          Tls_ciphersuite_t = 49161
	Tls_ciphersuite_ECDHE_ECDSA_WITH_AES_256_CBC_SHA          Tls_ciphersuite_t = 49162
	Tls_ciphersuite_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA           Tls_ciphersuite_t = 49170
	Tls_ciphersuite_ECDHE_RSA_WITH_AES_128_CBC_SHA            Tls_ciphersuite_t = 49171
	Tls_ciphersuite_ECDHE_RSA_WITH_AES_256_CBC_SHA            Tls_ciphersuite_t = 49172
	Tls_ciphersuite_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256       Tls_ciphersuite_t = 49187
	Tls_ciphersuite_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384       Tls_ciphersuite_t = 49188
	Tls_ciphersuite_ECDHE_RSA_WITH_AES_128_CBC_SHA256         Tls_ciphersuite_t = 49191
	Tls_ciphersuite_ECDHE_RSA_WITH_AES_256_CBC_SHA384         Tls_ciphersuite_t = 49192
	Tls_ciphersuite_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256       Tls_ciphersuite_t = 49195
	Tls_ciphersuite_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384       Tls_ciphersuite_t = 49196
	Tls_ciphersuite_ECDHE_RSA_WITH_AES_128_GCM_SHA256         Tls_ciphersuite_t = 49199
	Tls_ciphersuite_ECDHE_RSA_WITH_AES_256_GCM_SHA384         Tls_ciphersuite_t = 49200
	Tls_ciphersuite_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   Tls_ciphersuite_t = 52392
	Tls_ciphersuite_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 Tls_ciphersuite_t = 52393
	Tls_ciphersuite_AES_128_GCM_SHA256                        Tls_ciphersuite_t = 4865
	Tls_ciphersuite_AES_256_GCM_SHA384                        Tls_ciphersuite_t = 4866
	Tls_ciphersuite_CHACHA20_POLY1305_SHA256                  Tls_ciphersuite_t = 4867
)

func SecProtocolMetadataGetNegotiatedTlsCiphersuite

func SecProtocolMetadataGetNegotiatedTlsCiphersuite(metadata unsafe.Pointer) Tls_ciphersuite_t

C function: sec_protocol_metadata_get_negotiated_tls_ciphersuite

func (Tls_ciphersuite_t) String

func (e Tls_ciphersuite_t) String() string

type Tls_protocol_version_t

type Tls_protocol_version_t int64

The collection of supported TLS and DTLS versions.

const (
	// The TLS 1.0 protocol.
	Tls_protocol_version_TLSv10 Tls_protocol_version_t = 769
	// The TLS 1.1 protocol.
	Tls_protocol_version_TLSv11 Tls_protocol_version_t = 770
	// The TLS 1.2 protocol.
	Tls_protocol_version_TLSv12 Tls_protocol_version_t = 771
	// The TLS 1.3 protocol.
	Tls_protocol_version_TLSv13 Tls_protocol_version_t = 772
	// The DTLS 1.0 protocol.
	Tls_protocol_version_DTLSv10 Tls_protocol_version_t = 65279
	// The DTLS 1.2 protocol.
	Tls_protocol_version_DTLSv12 Tls_protocol_version_t = 65277
)

func SecProtocolMetadataGetNegotiatedTlsProtocolVersion

func SecProtocolMetadataGetNegotiatedTlsProtocolVersion(metadata unsafe.Pointer) Tls_protocol_version_t

C function: sec_protocol_metadata_get_negotiated_tls_protocol_version

func SecProtocolOptionsGetDefaultMaxDtlsProtocolVersion

func SecProtocolOptionsGetDefaultMaxDtlsProtocolVersion() Tls_protocol_version_t

C function: sec_protocol_options_get_default_max_dtls_protocol_version

func SecProtocolOptionsGetDefaultMaxTlsProtocolVersion

func SecProtocolOptionsGetDefaultMaxTlsProtocolVersion() Tls_protocol_version_t

C function: sec_protocol_options_get_default_max_tls_protocol_version

func SecProtocolOptionsGetDefaultMinDtlsProtocolVersion

func SecProtocolOptionsGetDefaultMinDtlsProtocolVersion() Tls_protocol_version_t

C function: sec_protocol_options_get_default_min_dtls_protocol_version

func SecProtocolOptionsGetDefaultMinTlsProtocolVersion

func SecProtocolOptionsGetDefaultMinTlsProtocolVersion() Tls_protocol_version_t

C function: sec_protocol_options_get_default_min_tls_protocol_version

func (Tls_protocol_version_t) String

func (e Tls_protocol_version_t) String() string

type Virtual_memory_guard_exception_code_t

type Virtual_memory_guard_exception_code_t int64
const (
	KGUARD_EXC_DEALLOC_GAP                   Virtual_memory_guard_exception_code_t = 1
	KGUARD_EXC_RECLAIM_COPYIO_FAILURE        Virtual_memory_guard_exception_code_t = 2
	KGUARD_EXC_RECLAIM_INDEX_FAILURE         Virtual_memory_guard_exception_code_t = 4
	KGUARD_EXC_RECLAIM_DEALLOCATE_FAILURE    Virtual_memory_guard_exception_code_t = 8
	KGUARD_EXC_RECLAIM_ACCOUNTING_FAILURE    Virtual_memory_guard_exception_code_t = 9
	KGUARD_EXC_SEC_IOPL_ON_EXEC_PAGE         Virtual_memory_guard_exception_code_t = 10
	KGUARD_EXC_SEC_EXEC_ON_IOPL_PAGE         Virtual_memory_guard_exception_code_t = 11
	KGUARD_EXC_SEC_UPL_WRITE_ON_EXEC_REGION  Virtual_memory_guard_exception_code_t = 12
	KGUARD_EXC_LARGE_ALLOCATION_TELEMETRY    Virtual_memory_guard_exception_code_t = 13
	KGUARD_EXC_SEC_ACCESS_FAULT              Virtual_memory_guard_exception_code_t = 98
	KGUARD_EXC_SEC_ASYNC_ACCESS_FAULT        Virtual_memory_guard_exception_code_t = 99
	KGUARD_EXC_SEC_COPY_DENIED               Virtual_memory_guard_exception_code_t = 100
	KGUARD_EXC_SEC_SHARING_DENIED            Virtual_memory_guard_exception_code_t = 101
	KGUARD_EXC_MTE_SYNC_FAULT                Virtual_memory_guard_exception_code_t = 200
	KGUARD_EXC_MTE_ASYNC_USER_FAULT          Virtual_memory_guard_exception_code_t = 201
	KGUARD_EXC_MTE_ASYNC_KERN_FAULT          Virtual_memory_guard_exception_code_t = 202
	KGUARD_EXC_GUARD_OBJECT_ASYNC_USER_FAULT Virtual_memory_guard_exception_code_t = 203
	KGUARD_EXC_GUARD_OBJECT_ASYNC_KERN_FAULT Virtual_memory_guard_exception_code_t = 204
)

func (Virtual_memory_guard_exception_code_t) String

type X509Validity

type X509Validity struct {
	NotBefore CssmX509Time
	NotAfter  CssmX509Time
}

C struct: x509_validity

type Xpc_listener_create_flags_t

type Xpc_listener_create_flags_t int64
const (
	XPC_LISTENER_CREATE_NONE             Xpc_listener_create_flags_t = 0
	XPC_LISTENER_CREATE_INACTIVE         Xpc_listener_create_flags_t = 1
	XPC_LISTENER_CREATE_FORCE_MACH       Xpc_listener_create_flags_t = 2
	XPC_LISTENER_CREATE_FORCE_XPCSERVICE Xpc_listener_create_flags_t = 4
)

func (Xpc_listener_create_flags_t) String

type Xpc_session_create_flags_t

type Xpc_session_create_flags_t int64
const (
	XPC_SESSION_CREATE_NONE            Xpc_session_create_flags_t = 0
	XPC_SESSION_CREATE_INACTIVE        Xpc_session_create_flags_t = 1
	XPC_SESSION_CREATE_MACH_PRIVILEGED Xpc_session_create_flags_t = 2
)

func (Xpc_session_create_flags_t) String

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL