2 * Copyright (c) 2012-2014 Apple Inc. All Rights Reserved.
4 * @APPLE_LICENSE_HEADER_START@
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
21 * @APPLE_LICENSE_HEADER_END@
25 #include <AssertMacros.h>
27 #include <Security/SecureObjectSync/SOSFullPeerInfo.h>
28 #include <Security/SecureObjectSync/SOSPeerInfoV2.h>
30 #include <Security/SecureObjectSync/SOSCircle.h>
32 #include <Security/SecureObjectSync/SOSInternal.h>
33 #include <Security/SecureObjectSync/SOSAccountPriv.h>
35 #include <Security/SecKeyPriv.h>
36 #include <Security/SecItemPriv.h>
37 #include <Security/SecOTR.h>
38 #include <CoreFoundation/CFArray.h>
39 #include <dispatch/dispatch.h>
40 #include <SOSPeerInfoDER.h>
41 #include <Security/SecFramework.h>
46 #include <utilities/SecCFWrappers.h>
47 #include <utilities/SecCFRelease.h>
49 #include <utilities/der_plist.h>
50 #include <utilities/der_plist_internal.h>
51 #include <corecrypto/ccder.h>
53 #include <CommonCrypto/CommonDigest.h>
54 #include <CommonCrypto/CommonDigestSPI.h>
56 #include <CoreFoundation/CoreFoundation.h>
58 #include "utilities/iOSforOSX.h"
60 #include <AssertMacros.h>
62 #include <utilities/SecCFError.h>
71 extern OSStatus
SecKeyCopyPublicBytes(SecKeyRef key
, CFDataRef
* publicBytes
);
72 extern SecKeyRef
SecKeyCreatePublicFromPrivate(SecKeyRef privateKey
);
77 struct __OpaqueSOSFullPeerInfo
{
80 SOSPeerInfoRef peer_info
;
84 CFGiblisWithHashFor(SOSFullPeerInfo
);
87 static CFStringRef sPublicKeyKey
= CFSTR("PublicSigningKey");
89 CFStringRef kSOSFullPeerInfoDescriptionKey
= CFSTR("SOSFullPeerInfoDescription");
90 CFStringRef kSOSFullPeerInfoSignatureKey
= CFSTR("SOSFullPeerInfoSignature");
91 CFStringRef kSOSFullPeerInfoNameKey
= CFSTR("SOSFullPeerInfoName");
94 static bool SOSFullPeerInfoUpdate(SOSFullPeerInfoRef peer
, CFErrorRef
*error
, SOSPeerInfoRef (^create_modification
)(SOSPeerInfoRef peer
, SecKeyRef key
, CFErrorRef
*error
)) {
97 SOSPeerInfoRef newPeer
= NULL
;
98 SecKeyRef device_key
= SOSFullPeerInfoCopyDeviceKey(peer
, error
);
99 require_quiet(device_key
, fail
);
101 newPeer
= create_modification(peer
->peer_info
, device_key
, error
);
102 require_quiet(newPeer
, fail
);
104 CFTransferRetained(peer
->peer_info
, newPeer
);
109 CFReleaseNull(device_key
);
110 CFReleaseNull(newPeer
);
114 bool SOSFullPeerInfoUpdateToThisPeer(SOSFullPeerInfoRef peer
, SOSPeerInfoRef pi
, CFErrorRef
*error
) {
115 return SOSFullPeerInfoUpdate(peer
, error
, ^SOSPeerInfoRef(SOSPeerInfoRef peer
, SecKeyRef key
, CFErrorRef
*error
) {
116 return SOSPeerInfoSign(key
, pi
, error
) ? pi
: NULL
;
120 SOSFullPeerInfoRef
SOSFullPeerInfoCreate(CFAllocatorRef allocator
, CFDictionaryRef gestalt
,
121 CFDataRef backupKey
, SecKeyRef signingKey
,
123 return SOSFullPeerInfoCreateWithViews(allocator
, gestalt
, backupKey
, NULL
, signingKey
, error
);
126 SOSFullPeerInfoRef
SOSFullPeerInfoCreateWithViews(CFAllocatorRef allocator
,
127 CFDictionaryRef gestalt
, CFDataRef backupKey
, CFSetRef initialViews
,
128 SecKeyRef signingKey
, CFErrorRef
* error
) {
130 SOSFullPeerInfoRef result
= NULL
;
131 SOSFullPeerInfoRef fpi
= CFTypeAllocate(SOSFullPeerInfo
, struct __OpaqueSOSFullPeerInfo
, allocator
);
133 bool useIDS
= whichTransportType
== kSOSTransportIDS
|| whichTransportType
== kSOSTransportFuture
;
135 CFStringRef transportType
= useIDS
? SOSTransportMessageTypeIDS
: SOSTransportMessageTypeKVS
;
136 CFBooleanRef preferIDS
= useIDS
? kCFBooleanTrue
: kCFBooleanFalse
;
137 CFStringRef IDSID
= CFSTR("");
139 fpi
->peer_info
= SOSPeerInfoCreateWithTransportAndViews(allocator
, gestalt
, backupKey
,
140 IDSID
, transportType
, preferIDS
,
143 require_quiet(fpi
->peer_info
, exit
);
145 OSStatus status
= SecKeyCopyPersistentRef(signingKey
, &fpi
->key_ref
);
146 require_quiet(SecError(status
, error
, CFSTR("Inflating persistent ref")), exit
);
148 CFTransferRetained(result
, fpi
);
155 bool SOSFullPeerInfoUpdateTransportType(SOSFullPeerInfoRef peer
, CFStringRef transportType
, CFErrorRef
* error
)
157 return SOSFullPeerInfoUpdate(peer
, error
, ^SOSPeerInfoRef(SOSPeerInfoRef peer
, SecKeyRef key
, CFErrorRef
*error
) {
158 return SOSPeerInfoSetTransportType(kCFAllocatorDefault
, peer
, transportType
, key
, error
);
162 bool SOSFullPeerInfoUpdateDeviceID(SOSFullPeerInfoRef peer
, CFStringRef deviceID
, CFErrorRef
* error
){
163 return SOSFullPeerInfoUpdate(peer
, error
, ^SOSPeerInfoRef(SOSPeerInfoRef peer
, SecKeyRef key
, CFErrorRef
*error
) {
164 return SOSPeerInfoSetDeviceID(kCFAllocatorDefault
, peer
, deviceID
, key
, error
);
168 bool SOSFullPeerInfoUpdateTransportPreference(SOSFullPeerInfoRef peer
, CFBooleanRef preference
, CFErrorRef
* error
){
169 return SOSFullPeerInfoUpdate(peer
, error
, ^SOSPeerInfoRef(SOSPeerInfoRef peer
, SecKeyRef key
, CFErrorRef
*error
) {
170 return SOSPeerInfoSetIDSPreference(kCFAllocatorDefault
, peer
, preference
, key
, error
);
174 SOSFullPeerInfoRef
SOSFullPeerInfoCreateCloudIdentity(CFAllocatorRef allocator
, SOSPeerInfoRef peer
, CFErrorRef
* error
) {
175 SOSFullPeerInfoRef fpi
= CFTypeAllocate(SOSFullPeerInfo
, struct __OpaqueSOSFullPeerInfo
, allocator
);
177 SecKeyRef pubKey
= NULL
;
179 fpi
->peer_info
= peer
;
180 CFRetainSafe(fpi
->peer_info
);
181 if (fpi
->peer_info
== NULL
) {
186 pubKey
= SOSPeerInfoCopyPubKey(peer
);
188 fpi
->key_ref
= SecKeyCreatePersistentRefToMatchingPrivateKey(pubKey
, error
);
190 if (fpi
->key_ref
== NULL
) {
196 CFReleaseNull(pubKey
);
201 SOSFullPeerInfoRef
SOSFullPeerInfoCreateFromDER(CFAllocatorRef allocator
, CFErrorRef
* error
,
202 const uint8_t** der_p
, const uint8_t *der_end
) {
203 SOSFullPeerInfoRef fpi
= CFTypeAllocate(SOSFullPeerInfo
, struct __OpaqueSOSFullPeerInfo
, allocator
);
205 const uint8_t *sequence_end
;
207 *der_p
= ccder_decode_constructed_tl(CCDER_CONSTRUCTED_SEQUENCE
, &sequence_end
, *der_p
, der_end
);
208 CFReleaseNull(fpi
->peer_info
);
209 fpi
->peer_info
= SOSPeerInfoCreateFromDER(allocator
, error
, der_p
, der_end
);
210 require_quiet(fpi
->peer_info
!= NULL
, fail
);
212 *der_p
= der_decode_data(allocator
, kCFPropertyListImmutable
, &fpi
->key_ref
, error
, *der_p
, sequence_end
);
213 require_quiet(*der_p
!= NULL
, fail
);
222 SOSFullPeerInfoRef
SOSFullPeerInfoCreateFromData(CFAllocatorRef allocator
, CFDataRef fullPeerData
, CFErrorRef
*error
)
224 if(!fullPeerData
) return NULL
;
225 size_t size
= CFDataGetLength(fullPeerData
);
226 const uint8_t *der
= CFDataGetBytePtr(fullPeerData
);
227 SOSFullPeerInfoRef inflated
= SOSFullPeerInfoCreateFromDER(allocator
, error
, &der
, der
+ size
);
231 static void SOSFullPeerInfoDestroy(CFTypeRef aObj
) {
232 SOSFullPeerInfoRef fpi
= (SOSFullPeerInfoRef
) aObj
;
234 CFReleaseNull(fpi
->peer_info
);
235 CFReleaseNull(fpi
->key_ref
);
238 static Boolean
SOSFullPeerInfoCompare(CFTypeRef lhs
, CFTypeRef rhs
) {
239 SOSFullPeerInfoRef lpeer
= (SOSFullPeerInfoRef
) lhs
;
240 SOSFullPeerInfoRef rpeer
= (SOSFullPeerInfoRef
) rhs
;
242 if (!CFEqual(lpeer
->peer_info
, rpeer
->peer_info
))
245 if (CFEqual(lpeer
->key_ref
, rpeer
->key_ref
))
248 SecKeyRef lpk
= SOSFullPeerInfoCopyDeviceKey(lpeer
, NULL
);
249 SecKeyRef rpk
= SOSFullPeerInfoCopyDeviceKey(rpeer
, NULL
);
251 bool match
= lpk
&& rpk
&& CFEqual(lpk
, rpk
);
259 static CFHashCode
SOSFullPeerInfoHash(CFTypeRef cf
) {
260 SOSFullPeerInfoRef peer
= (SOSFullPeerInfoRef
) cf
;
262 return CFHash(peer
->peer_info
);
265 static CFStringRef
SOSFullPeerInfoCopyFormatDescription(CFTypeRef aObj
, CFDictionaryRef formatOptions
) {
266 SOSFullPeerInfoRef fpi
= (SOSFullPeerInfoRef
) aObj
;
268 return CFStringCreateWithFormat(NULL
, NULL
, CFSTR("<SOSFullPeerInfo@%p: \"%@\">"), fpi
, fpi
->peer_info
);
271 bool SOSFullPeerInfoUpdateGestalt(SOSFullPeerInfoRef peer
, CFDictionaryRef gestalt
, CFErrorRef
* error
)
273 return SOSFullPeerInfoUpdate(peer
, error
, ^SOSPeerInfoRef(SOSPeerInfoRef peer
, SecKeyRef key
, CFErrorRef
*error
) {
274 return SOSPeerInfoCopyWithGestaltUpdate(kCFAllocatorDefault
, peer
,
275 gestalt
, key
, error
);
279 bool SOSFullPeerInfoUpdateBackupKey(SOSFullPeerInfoRef peer
, CFDataRef backupKey
, CFErrorRef
* error
)
281 return SOSFullPeerInfoUpdate(peer
, error
, ^SOSPeerInfoRef(SOSPeerInfoRef peer
, SecKeyRef key
, CFErrorRef
*error
) {
282 return SOSPeerInfoCopyWithBackupKeyUpdate(kCFAllocatorDefault
, peer
, backupKey
, key
, error
);
286 SOSViewResultCode
SOSFullPeerInfoUpdateViews(SOSFullPeerInfoRef peer
, SOSViewActionCode action
, CFStringRef viewname
, CFErrorRef
* error
)
288 __block SOSViewResultCode retval
= kSOSCCGeneralViewError
;
290 return SOSFullPeerInfoUpdate(peer
, error
, ^SOSPeerInfoRef(SOSPeerInfoRef peer
, SecKeyRef key
, CFErrorRef
*error
) {
291 return SOSPeerInfoCopyWithViewsChange(kCFAllocatorDefault
, peer
, action
, viewname
, &retval
, key
, error
);
292 }) ? retval
: kSOSCCGeneralViewError
;
296 static bool CFSetIsSubset(CFSetRef smaller
, CFSetRef bigger
) {
297 __block
bool isSubset
= true;
298 CFSetForEach(smaller
, ^(const void *value
) {
299 if (!CFSetContainsValue(bigger
, value
)) {
307 static void CFSetUnionSet(CFMutableSetRef target
, CFSetRef source
) {
308 CFSetForEach(source
, ^(const void *value
) {
309 CFSetAddValue(target
, value
);
313 static bool sosFullPeerInfoNeedsViewUpdate(SOSFullPeerInfoRef peer
, CFSetRef minimumViews
) {
314 CFSetRef currentViews
= SOSPeerInfoCopyEnabledViews(peer
->peer_info
);
315 bool success
= isSet(minimumViews
) && (!isSet(currentViews
) || !CFSetIsSubset(minimumViews
, currentViews
));
316 CFReleaseNull(currentViews
);
320 static bool sosFullPeerInfoRequiresUpdate(SOSFullPeerInfoRef peer
, CFSetRef minimumViews
) {
322 if(!SOSPeerInfoVersionIsCurrent(peer
->peer_info
)) return true;
323 if(!SOSPeerInfoSerialNumberIsSet(peer
->peer_info
)) return true;
324 if(!(SOSPeerInfoV2DictionaryHasString(peer
->peer_info
, sDeviceID
)))return true;
325 if(!(SOSPeerInfoV2DictionaryHasString(peer
->peer_info
, sTransportType
))) return true;
326 if(!(SOSPeerInfoV2DictionaryHasBoolean(peer
->peer_info
, sPreferIDS
))) return true;
327 if(sosFullPeerInfoNeedsViewUpdate(peer
, minimumViews
)) return true;
332 // Returning false indicates we don't need to upgrade.
333 bool SOSFullPeerInfoUpdateToCurrent(SOSFullPeerInfoRef peer
, CFSetRef minimumViews
) {
334 CFMutableSetRef newViews
= NULL
;
336 if(!sosFullPeerInfoRequiresUpdate(peer
, minimumViews
)) return false;
338 CFSetRef currentViews
= SOSPeerInfoCopyEnabledViews(peer
->peer_info
);
339 if (sosFullPeerInfoNeedsViewUpdate(peer
, minimumViews
)) {
340 newViews
= isSet(currentViews
) ? CFSetCreateMutableCopy(kCFAllocatorDefault
, 0, currentViews
) : CFSetCreateMutableForCFTypes(kCFAllocatorDefault
);
341 CFSetUnionSet(newViews
, minimumViews
);
344 CFErrorRef copyError
= NULL
;
345 CFErrorRef createError
= NULL
;
346 SecKeyRef device_key
= SOSFullPeerInfoCopyDeviceKey(peer
, ©Error
);
347 require_action_quiet(device_key
, errOut
,
348 secnotice("upgrade", "SOSFullPeerInfoCopyDeviceKey failed: %@", copyError
));
350 SOSPeerInfoRef newPeer
= SOSPeerInfoCreateCurrentCopy(kCFAllocatorDefault
, peer
->peer_info
,
351 NULL
, NULL
, NULL
, newViews
? newViews
: minimumViews
,
352 device_key
, &createError
);
353 require_action_quiet(newPeer
, errOut
,
354 secnotice("upgrade", "Peer info v2 create copy failed: %@", createError
));
356 CFTransferRetained(peer
->peer_info
, newPeer
);
358 CFReleaseNull(currentViews
);
359 CFReleaseSafe(newViews
);
360 CFReleaseNull(device_key
);
364 CFReleaseNull(currentViews
);
365 CFReleaseSafe(newViews
);
366 CFReleaseNull(copyError
);
367 CFReleaseNull(createError
);
368 CFReleaseNull(device_key
);
372 SOSViewResultCode
SOSFullPeerInfoViewStatus(SOSFullPeerInfoRef peer
, CFStringRef viewname
, CFErrorRef
*error
)
374 SOSPeerInfoRef pi
= SOSFullPeerInfoGetPeerInfo(peer
);
375 secnotice("views", "have pi %s", (pi
)? "true": "false");
376 if(!pi
) return kSOSCCGeneralViewError
;
377 return SOSPeerInfoViewStatus(pi
, viewname
, error
);
381 SOSSecurityPropertyResultCode
SOSFullPeerInfoUpdateSecurityProperty(SOSFullPeerInfoRef peer
, SOSViewActionCode action
, CFStringRef property
, CFErrorRef
* error
)
383 SOSSecurityPropertyResultCode retval
= kSOSCCGeneralSecurityPropertyError
;
384 SecKeyRef device_key
= SOSFullPeerInfoCopyDeviceKey(peer
, error
);
385 require_quiet(device_key
, fail
);
387 SOSPeerInfoRef newPeer
= SOSPeerInfoCopyWithSecurityPropertyChange(kCFAllocatorDefault
, peer
->peer_info
, action
, property
, &retval
, device_key
, error
);
389 require_quiet(newPeer
, fail
);
391 CFReleaseNull(peer
->peer_info
);
392 peer
->peer_info
= newPeer
;
396 CFReleaseNull(device_key
);
400 SOSSecurityPropertyResultCode
SOSFullPeerInfoSecurityPropertyStatus(SOSFullPeerInfoRef peer
, CFStringRef property
, CFErrorRef
*error
)
402 SOSPeerInfoRef pi
= SOSFullPeerInfoGetPeerInfo(peer
);
403 secnotice("secprop", "have pi %s", (pi
)? "true": "false");
404 if(!pi
) return kSOSCCGeneralSecurityPropertyError
;
405 return SOSPeerInfoSecurityPropertyStatus(pi
, property
, error
);
409 SOSPeerInfoRef
SOSFullPeerInfoGetPeerInfo(SOSFullPeerInfoRef fullPeer
) {
410 return fullPeer
?fullPeer
->peer_info
:NULL
;
413 // MARK: Private Key Retrieval and Existence
415 static SecKeyRef
SOSFullPeerInfoCopyPubKey(SOSFullPeerInfoRef fpi
) {
416 SecKeyRef retval
= NULL
;
417 require_quiet(fpi
, errOut
);
418 SOSPeerInfoRef pi
= SOSFullPeerInfoGetPeerInfo(fpi
);
419 require_quiet(pi
, errOut
);
420 retval
= SOSPeerInfoCopyPubKey(pi
);
426 static SecKeyRef
SOSFullPeerInfoCopyMatchingPrivateKey(SOSFullPeerInfoRef fpi
, CFErrorRef
*error
) {
427 SecKeyRef pub
= SOSFullPeerInfoCopyPubKey(fpi
);
428 SecKeyRef retval
= SecKeyCopyMatchingPrivateKey(pub
, error
);
433 static OSStatus
SOSFullPeerInfoGetMatchingPrivateKeyStatus(SOSFullPeerInfoRef fpi
, CFErrorRef
*error
) {
434 SecKeyRef pub
= SOSFullPeerInfoCopyPubKey(fpi
);
435 OSStatus retval
= SecKeyGetMatchingPrivateKeyStatus(pub
, error
);
440 bool SOSFullPeerInfoValidate(SOSFullPeerInfoRef peer
, CFErrorRef
* error
) {
441 OSStatus result
= SOSFullPeerInfoGetMatchingPrivateKeyStatus(peer
, error
);
442 if(result
== errSecSuccess
) return true;
446 bool SOSFullPeerInfoPrivKeyExists(SOSFullPeerInfoRef peer
) {
447 OSStatus result
= SOSFullPeerInfoGetMatchingPrivateKeyStatus(peer
, NULL
);
448 if(result
== errSecItemNotFound
|| result
== errSecParam
) return false;
452 bool SOSFullPeerInfoPurgePersistentKey(SOSFullPeerInfoRef fpi
, CFErrorRef
* error
) {
453 SecKeyRef pub
= SOSFullPeerInfoCopyPubKey(fpi
);
454 CFDictionaryRef privQuery
= CreatePrivateKeyMatchingQuery(pub
, false);
455 CFMutableDictionaryRef query
= CFDictionaryCreateMutableCopy(kCFAllocatorDefault
, 0, privQuery
);
456 CFDictionaryAddValue(query
, kSecUseTombstones
, kCFBooleanFalse
);
457 SecItemDelete(query
);
458 CFReleaseNull(privQuery
);
459 CFReleaseNull(query
);
464 SecKeyRef
SOSFullPeerInfoCopyDeviceKey(SOSFullPeerInfoRef fullPeer
, CFErrorRef
* error
) {
465 return SOSFullPeerInfoCopyMatchingPrivateKey(fullPeer
, error
);
469 // MARK: Encode and decode
471 size_t SOSFullPeerInfoGetDEREncodedSize(SOSFullPeerInfoRef peer
, CFErrorRef
*error
)
473 size_t peer_size
= SOSPeerInfoGetDEREncodedSize(peer
->peer_info
, error
);
477 size_t ref_size
= der_sizeof_data(peer
->key_ref
, error
);
481 return ccder_sizeof(CCDER_CONSTRUCTED_SEQUENCE
,
482 peer_size
+ ref_size
);
485 uint8_t* SOSFullPeerInfoEncodeToDER(SOSFullPeerInfoRef peer
, CFErrorRef
* error
, const uint8_t* der
, uint8_t* der_end
)
487 return ccder_encode_constructed_tl(CCDER_CONSTRUCTED_SEQUENCE
, der_end
, der
,
488 SOSPeerInfoEncodeToDER(peer
->peer_info
, error
, der
,
489 der_encode_data(peer
->key_ref
, error
, der
, der_end
)));
492 CFDataRef
SOSFullPeerInfoCopyEncodedData(SOSFullPeerInfoRef peer
, CFAllocatorRef allocator
, CFErrorRef
*error
)
494 size_t size
= SOSFullPeerInfoGetDEREncodedSize(peer
, error
);
497 uint8_t buffer
[size
];
498 uint8_t* start
= SOSFullPeerInfoEncodeToDER(peer
, error
, buffer
, buffer
+ sizeof(buffer
));
499 CFDataRef result
= CFDataCreate(kCFAllocatorDefault
, start
, size
);
503 bool SOSFullPeerInfoPromoteToApplication(SOSFullPeerInfoRef fpi
, SecKeyRef user_key
, CFErrorRef
*error
)
505 bool success
= false;
506 SOSPeerInfoRef old_pi
= NULL
;
508 SecKeyRef device_key
= SOSFullPeerInfoCopyDeviceKey(fpi
, error
);
509 require_quiet(device_key
, exit
);
511 old_pi
= fpi
->peer_info
;
512 fpi
->peer_info
= SOSPeerInfoCopyAsApplication(old_pi
, user_key
, device_key
, error
);
514 require_action_quiet(fpi
->peer_info
, exit
, fpi
->peer_info
= old_pi
; old_pi
= NULL
);
519 CFReleaseSafe(old_pi
);
520 CFReleaseSafe(device_key
);
524 bool SOSFullPeerInfoUpgradeSignatures(SOSFullPeerInfoRef fpi
, SecKeyRef user_key
, CFErrorRef
*error
)
526 bool success
= false;
527 SOSPeerInfoRef old_pi
= NULL
;
529 SecKeyRef device_key
= SOSFullPeerInfoCopyDeviceKey(fpi
, error
);
530 require_quiet(device_key
, exit
);
532 old_pi
= fpi
->peer_info
;
533 fpi
->peer_info
= SOSPeerInfoUpgradeSignatures(NULL
, user_key
, device_key
, old_pi
, error
);
535 require_action_quiet(fpi
->peer_info
, exit
, fpi
->peer_info
= old_pi
; old_pi
= NULL
);
540 CFReleaseSafe(old_pi
);
541 CFReleaseSafe(device_key
);
549 SOSPeerInfoRef
SOSFullPeerInfoPromoteToRetiredAndCopy(SOSFullPeerInfoRef fpi
, CFErrorRef
*error
)
551 SOSPeerInfoRef peer_to_free
= NULL
;
552 SOSPeerInfoRef retired_peer
= NULL
;
553 SecKeyRef key
= SOSFullPeerInfoCopyDeviceKey(fpi
, error
);
554 require_quiet(key
, error_out
);
556 retired_peer
= SOSPeerInfoCreateRetirementTicket(NULL
, key
, fpi
->peer_info
, error
);
558 require_quiet(retired_peer
, error_out
);
560 peer_to_free
= fpi
->peer_info
;
561 fpi
->peer_info
= retired_peer
;
562 CFRetainSafe(fpi
->peer_info
);
566 CFReleaseNull(peer_to_free
);
571 bool SOSFullPeerInfoPing(SOSFullPeerInfoRef peer
, CFErrorRef
* error
) {
573 SecKeyRef device_key
= SOSFullPeerInfoCopyDeviceKey(peer
, error
);
574 require_quiet(device_key
, fail
);
575 SOSPeerInfoRef newPeer
= SOSPeerInfoCopyWithPing(kCFAllocatorDefault
, peer
->peer_info
, device_key
, error
);
576 require_quiet(newPeer
, fail
);
578 CFReleaseNull(peer
->peer_info
);
579 peer
->peer_info
= newPeer
;
583 CFReleaseNull(device_key
);