2 * Copyright (c) 2000-2016 Apple Inc. All Rights Reserved.
4 * @APPLE_LICENSE_HEADER_START@
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
21 * @APPLE_LICENSE_HEADER_END@
24 #ifndef _SECURITY_SECBASE_H_
25 #define _SECURITY_SECBASE_H_
27 #include <TargetConditionals.h>
28 #include <CoreFoundation/CFBase.h>
29 #include <AvailabilityMacros.h>
33 #define SEC_OS_IPHONE 1
34 #define SEC_OS_IPHONE_INCLUDES 0
37 #define SEC_OS_OSX_INCLUDES 1
38 #endif // SEC_IOS_ON_OSX
39 #endif // TARGET_OS_OSX
42 // block above did not fire; set flags to current platform
43 #define SEC_OS_IPHONE TARGET_OS_IPHONE
44 #define SEC_OS_IPHONE_INCLUDES TARGET_OS_IPHONE
46 #define SEC_OS_OSX TARGET_OS_OSX
47 #define SEC_OS_OSX_INCLUDES TARGET_OS_OSX
51 #include <sys/cdefs.h>
54 #if defined(__clang__)
55 #define SEC_DEPRECATED_ATTRIBUTE DEPRECATED_ATTRIBUTE
57 #define SEC_DEPRECATED_ATTRIBUTE
62 CF_ASSUME_NONNULL_BEGIN
63 CF_IMPLICIT_BRIDGING_ENABLED
67 #define SECTYPE(a) __##a
69 #define SECTYPE(a) Opaque##a##Ref
73 @typedef SecCertificateRef
74 @abstract CFType representing a X.509 certificate.
75 See SecCertificate.h for details.
77 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecCertificate
) *SecCertificateRef
;
80 @typedef SecIdentityRef
81 @abstract CFType representing an identity, which contains
82 a SecKeyRef and an associated SecCertificateRef. See
83 SecIdentity.h for details.
85 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecIdentity
) *SecIdentityRef
;
89 @abstract CFType representing a cryptographic key. See
92 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecKey
) *SecKeyRef
;
96 @abstract CFType representing a X.509 certificate trust policy.
97 See SecPolicy.h for details.
99 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecPolicy
) *SecPolicyRef
;
102 @typedef SecAccessControl
103 @abstract CFType representing access control for an item.
104 SecAccessControl.h for details.
106 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecAccessControl
) *SecAccessControlRef
;
108 #if SEC_OS_OSX_INCLUDES
111 @typedef SecKeychainRef
112 @abstract Contains information about a keychain.
114 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecKeychain
) *SecKeychainRef
;
117 @typedef SecKeychainItemRef
118 @abstract Contains information about a keychain item.
120 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecKeychainItem
) *SecKeychainItemRef
;
123 @typedef SecKeychainSearchRef
124 @abstract Contains information about a keychain search.
126 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecKeychainSearch
) *SecKeychainSearchRef
;
129 @typedef SecKeychainAttrType
130 @abstract Represents a keychain attribute type.
132 typedef OSType SecKeychainAttrType
;
135 @struct SecKeychainAttribute
136 @abstract Contains keychain attributes.
137 @field tag A 4-byte attribute tag.
138 @field length The length of the buffer pointed to by data.
139 @field data A pointer to the attribute data.
141 struct SecKeychainAttribute
143 SecKeychainAttrType tag
;
147 typedef struct SecKeychainAttribute SecKeychainAttribute
;
150 @typedef SecKeychainAttributePtr
151 @abstract Represents a pointer to a keychain attribute structure.
153 typedef SecKeychainAttribute
*SecKeychainAttributePtr
;
156 @typedef SecKeychainAttributeList
157 @abstract Represents a list of keychain attributes.
158 @field count An unsigned 32-bit integer that represents the number of keychain attributes in the array.
159 @field attr A pointer to the first keychain attribute in the array.
161 struct SecKeychainAttributeList
164 SecKeychainAttribute
*attr
;
166 typedef struct SecKeychainAttributeList SecKeychainAttributeList
;
169 @typedef SecKeychainStatus
170 @abstract Represents the status of a keychain.
172 typedef UInt32 SecKeychainStatus
;
175 @typedef SecTrustedApplicationRef
176 @abstract Contains information about a trusted application.
178 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecTrustedApplication
) *SecTrustedApplicationRef
;
181 @typedef SecAccessRef
182 @abstract Contains information about an access.
184 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecAccess
) *SecAccessRef
;
188 @abstract Contains information about an access control list (ACL) entry.
190 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecTrust
) *SecACLRef
;
193 @typedef SecPasswordRef
194 @abstract Contains information about a password.
196 typedef struct CF_BRIDGED_TYPE(id
) SECTYPE(SecPassword
) *SecPasswordRef
;
199 @typedef SecKeychainAttributeInfo
200 @abstract Represents an attribute.
201 @field count The number of tag-format pairs in the respective arrays.
202 @field tag A pointer to the first attribute tag in the array.
203 @field format A pointer to the first CSSM_DB_ATTRIBUTE_FORMAT in the array.
204 @discussion Each tag and format item form a pair.
206 struct SecKeychainAttributeInfo
212 typedef struct SecKeychainAttributeInfo SecKeychainAttributeInfo
;
215 @function SecCopyErrorMessageString
216 @abstract Returns a string describing the specified error result code.
217 @param status An error result code of type OSStatus or CSSM_RETURN, as returned by a Security or CSSM function.
218 @reserved Reserved for future use. Your code should pass NULL in this parameter.
219 @result A reference to an error string, or NULL if no error string is available for the specified result code. Your code must release this reference by calling the CFRelease function.
222 CFStringRef
SecCopyErrorMessageString(OSStatus status
, void * __nullable reserved
)
223 __OSX_AVAILABLE_STARTING(__MAC_10_3
, __IPHONE_NA
);
225 #endif // SEC_OS_OSX_INCLUDES
231 @enum Security Error Codes
232 @abstract Result codes returned from Security framework functions.
233 @constant errSecSuccess No error.
234 @constant errSecUnimplemented Function or operation not implemented.
235 @constant errSecDskFull Disk Full error.
236 @constant errSecIO I/O error.
237 @constant errSecParam One or more parameters passed to a function were not valid.
238 @constant errSecWrPerm Write permissions error.
239 @constant errSecAllocate Failed to allocate memory.
240 @constant errSecUserCanceled User canceled the operation.
241 @constant errSecBadReq Bad parameter or invalid state for operation.
242 @constant errSecInternalComponent
243 @constant errSecCoreFoundationUnknown
244 @constant errSecNotAvailable No keychain is available.
245 @constant errSecReadOnly Read only error.
246 @constant errSecAuthFailed Authorization/Authentication failed.
247 @constant errSecNoSuchKeychain The keychain does not exist.
248 @constant errSecInvalidKeychain The keychain is not valid.
249 @constant errSecDuplicateKeychain A keychain with the same name already exists.
250 @constant errSecDuplicateCallback The specified callback is already installed.
251 @constant errSecInvalidCallback The specified callback is not valid.
252 @constant errSecDuplicateItem The item already exists.
253 @constant errSecItemNotFound The item cannot be found.
254 @constant errSecBufferTooSmall The buffer is too small.
255 @constant errSecDataTooLarge The data is too large.
256 @constant errSecNoSuchAttr The attribute does not exist.
257 @constant errSecInvalidItemRef The item reference is invalid.
258 @constant errSecInvalidSearchRef The search reference is invalid.
259 @constant errSecNoSuchClass The keychain item class does not exist.
260 @constant errSecNoDefaultKeychain A default keychain does not exist.
261 @constant errSecInteractionNotAllowed User interaction is not allowed.
262 @constant errSecReadOnlyAttr The attribute is read only.
263 @constant errSecWrongSecVersion The version is incorrect.
264 @constant errSecKeySizeNotAllowed The key size is not allowed.
265 @constant errSecNoStorageModule There is no storage module available.
266 @constant errSecNoCertificateModule There is no certificate module available.
267 @constant errSecNoPolicyModule There is no policy module available.
268 @constant errSecInteractionRequired User interaction is required.
269 @constant errSecDataNotAvailable The data is not available.
270 @constant errSecDataNotModifiable The data is not modifiable.
271 @constant errSecCreateChainFailed The attempt to create a certificate chain failed.
272 @constant errSecACLNotSimple The access control list is not in standard simple form.
273 @constant errSecPolicyNotFound The policy specified cannot be found.
274 @constant errSecInvalidTrustSetting The specified trust setting is invalid.
275 @constant errSecNoAccessForItem The specified item has no access control.
276 @constant errSecInvalidOwnerEdit Invalid attempt to change the owner of this item.
277 @constant errSecTrustNotAvailable No trust results are available.
278 @constant errSecUnsupportedFormat Import/Export format unsupported.
279 @constant errSecUnknownFormat Unknown format in import.
280 @constant errSecKeyIsSensitive Key material must be wrapped for export.
281 @constant errSecMultiplePrivKeys An attempt was made to import multiple private keys.
282 @constant errSecPassphraseRequired Passphrase is required for import/export.
283 @constant errSecInvalidPasswordRef The password reference was invalid.
284 @constant errSecInvalidTrustSettings The Trust Settings Record was corrupted.
285 @constant errSecNoTrustSettings No Trust Settings were found.
286 @constant errSecPkcs12VerifyFailure MAC verification failed during PKCS12 Import.
287 @constant errSecDecode Unable to decode the provided data.
289 @discussion The assigned error space is discontinuous: e.g. -25240..-25279, -25290..-25329, -68608..-67585, and so on.
293 Note: the comments that appear after these errors are used to create SecErrorMessages.strings.
294 The comments must not be multi-line, and should be in a form meaningful to an end user. If
295 a different or additional comment is needed, it can be put in the header doc format, or on a
296 line that does not start with errZZZ.
301 errSecSuccess
= 0, /* No error. */
302 errSecUnimplemented
= -4, /* Function or operation not implemented. */
304 errSecIO
= -36, /*I/O error (bummers)*/
305 errSecOpWr
= -49, /*file already open with with write permission*/
306 errSecParam
= -50, /* One or more parameters passed to a function were not valid. */
307 errSecWrPerm
= -61, /* write permissions error*/
308 errSecAllocate
= -108, /* Failed to allocate memory. */
309 errSecUserCanceled
= -128, /* User canceled the operation. */
310 errSecBadReq
= -909, /* Bad parameter or invalid state for operation. */
312 errSecInternalComponent
= -2070,
313 errSecCoreFoundationUnknown
= -4960,
315 errSecNotAvailable
= -25291, /* No keychain is available. You may need to restart your computer. */
316 errSecReadOnly
= -25292, /* This keychain cannot be modified. */
317 errSecAuthFailed
= -25293, /* The user name or passphrase you entered is not correct. */
318 errSecNoSuchKeychain
= -25294, /* The specified keychain could not be found. */
319 errSecInvalidKeychain
= -25295, /* The specified keychain is not a valid keychain file. */
320 errSecDuplicateKeychain
= -25296, /* A keychain with the same name already exists. */
321 errSecDuplicateCallback
= -25297, /* The specified callback function is already installed. */
322 errSecInvalidCallback
= -25298, /* The specified callback function is not valid. */
323 errSecDuplicateItem
= -25299, /* The specified item already exists in the keychain. */
324 errSecItemNotFound
= -25300, /* The specified item could not be found in the keychain. */
325 errSecBufferTooSmall
= -25301, /* There is not enough memory available to use the specified item. */
326 errSecDataTooLarge
= -25302, /* This item contains information which is too large or in a format that cannot be displayed. */
327 errSecNoSuchAttr
= -25303, /* The specified attribute does not exist. */
328 errSecInvalidItemRef
= -25304, /* The specified item is no longer valid. It may have been deleted from the keychain. */
329 errSecInvalidSearchRef
= -25305, /* Unable to search the current keychain. */
330 errSecNoSuchClass
= -25306, /* The specified item does not appear to be a valid keychain item. */
331 errSecNoDefaultKeychain
= -25307, /* A default keychain could not be found. */
332 errSecInteractionNotAllowed
= -25308, /* User interaction is not allowed. */
333 errSecReadOnlyAttr
= -25309, /* The specified attribute could not be modified. */
334 errSecWrongSecVersion
= -25310, /* This keychain was created by a different version of the system software and cannot be opened. */
335 errSecKeySizeNotAllowed
= -25311, /* This item specifies a key size which is too large. */
336 errSecNoStorageModule
= -25312, /* A required component (data storage module) could not be loaded. You may need to restart your computer. */
337 errSecNoCertificateModule
= -25313, /* A required component (certificate module) could not be loaded. You may need to restart your computer. */
338 errSecNoPolicyModule
= -25314, /* A required component (policy module) could not be loaded. You may need to restart your computer. */
339 errSecInteractionRequired
= -25315, /* User interaction is required, but is currently not allowed. */
340 errSecDataNotAvailable
= -25316, /* The contents of this item cannot be retrieved. */
341 errSecDataNotModifiable
= -25317, /* The contents of this item cannot be modified. */
342 errSecCreateChainFailed
= -25318, /* One or more certificates required to validate this certificate cannot be found. */
343 errSecInvalidPrefsDomain
= -25319, /* The specified preferences domain is not valid. */
344 errSecInDarkWake
= -25320, /* In dark wake, no UI possible */
346 errSecACLNotSimple
= -25240, /* The specified access control list is not in standard (simple) form. */
347 errSecPolicyNotFound
= -25241, /* The specified policy cannot be found. */
348 errSecInvalidTrustSetting
= -25242, /* The specified trust setting is invalid. */
349 errSecNoAccessForItem
= -25243, /* The specified item has no access control. */
350 errSecInvalidOwnerEdit
= -25244, /* Invalid attempt to change the owner of this item. */
351 errSecTrustNotAvailable
= -25245, /* No trust results are available. */
352 errSecUnsupportedFormat
= -25256, /* Import/Export format unsupported. */
353 errSecUnknownFormat
= -25257, /* Unknown format in import. */
354 errSecKeyIsSensitive
= -25258, /* Key material must be wrapped for export. */
355 errSecMultiplePrivKeys
= -25259, /* An attempt was made to import multiple private keys. */
356 errSecPassphraseRequired
= -25260, /* Passphrase is required for import/export. */
357 errSecInvalidPasswordRef
= -25261, /* The password reference was invalid. */
358 errSecInvalidTrustSettings
= -25262, /* The Trust Settings Record was corrupted. */
359 errSecNoTrustSettings
= -25263, /* No Trust Settings were found. */
360 errSecPkcs12VerifyFailure
= -25264, /* MAC verification failed during PKCS12 import (wrong password?) */
361 errSecNotSigner
= -26267, /* A certificate was not signed by its proposed parent. */
363 errSecDecode
= -26275, /* Unable to decode the provided data. */
365 errSecServiceNotAvailable
= -67585, /* The required service is not available. */
366 errSecInsufficientClientID
= -67586, /* The client ID is not correct. */
367 errSecDeviceReset
= -67587, /* A device reset has occurred. */
368 errSecDeviceFailed
= -67588, /* A device failure has occurred. */
369 errSecAppleAddAppACLSubject
= -67589, /* Adding an application ACL subject failed. */
370 errSecApplePublicKeyIncomplete
= -67590, /* The public key is incomplete. */
371 errSecAppleSignatureMismatch
= -67591, /* A signature mismatch has occurred. */
372 errSecAppleInvalidKeyStartDate
= -67592, /* The specified key has an invalid start date. */
373 errSecAppleInvalidKeyEndDate
= -67593, /* The specified key has an invalid end date. */
374 errSecConversionError
= -67594, /* A conversion error has occurred. */
375 errSecAppleSSLv2Rollback
= -67595, /* A SSLv2 rollback error has occurred. */
376 errSecDiskFull
= -34, /* The disk is full. */
377 errSecQuotaExceeded
= -67596, /* The quota was exceeded. */
378 errSecFileTooBig
= -67597, /* The file is too big. */
379 errSecInvalidDatabaseBlob
= -67598, /* The specified database has an invalid blob. */
380 errSecInvalidKeyBlob
= -67599, /* The specified database has an invalid key blob. */
381 errSecIncompatibleDatabaseBlob
= -67600, /* The specified database has an incompatible blob. */
382 errSecIncompatibleKeyBlob
= -67601, /* The specified database has an incompatible key blob. */
383 errSecHostNameMismatch
= -67602, /* A host name mismatch has occurred. */
384 errSecUnknownCriticalExtensionFlag
= -67603, /* There is an unknown critical extension flag. */
385 errSecNoBasicConstraints
= -67604, /* No basic constraints were found. */
386 errSecNoBasicConstraintsCA
= -67605, /* No basic CA constraints were found. */
387 errSecInvalidAuthorityKeyID
= -67606, /* The authority key ID is not valid. */
388 errSecInvalidSubjectKeyID
= -67607, /* The subject key ID is not valid. */
389 errSecInvalidKeyUsageForPolicy
= -67608, /* The key usage is not valid for the specified policy. */
390 errSecInvalidExtendedKeyUsage
= -67609, /* The extended key usage is not valid. */
391 errSecInvalidIDLinkage
= -67610, /* The ID linkage is not valid. */
392 errSecPathLengthConstraintExceeded
= -67611, /* The path length constraint was exceeded. */
393 errSecInvalidRoot
= -67612, /* The root or anchor certificate is not valid. */
394 errSecCRLExpired
= -67613, /* The CRL has expired. */
395 errSecCRLNotValidYet
= -67614, /* The CRL is not yet valid. */
396 errSecCRLNotFound
= -67615, /* The CRL was not found. */
397 errSecCRLServerDown
= -67616, /* The CRL server is down. */
398 errSecCRLBadURI
= -67617, /* The CRL has a bad Uniform Resource Identifier. */
399 errSecUnknownCertExtension
= -67618, /* An unknown certificate extension was encountered. */
400 errSecUnknownCRLExtension
= -67619, /* An unknown CRL extension was encountered. */
401 errSecCRLNotTrusted
= -67620, /* The CRL is not trusted. */
402 errSecCRLPolicyFailed
= -67621, /* The CRL policy failed. */
403 errSecIDPFailure
= -67622, /* The issuing distribution point was not valid. */
404 errSecSMIMEEmailAddressesNotFound
= -67623, /* An email address mismatch was encountered. */
405 errSecSMIMEBadExtendedKeyUsage
= -67624, /* The appropriate extended key usage for SMIME was not found. */
406 errSecSMIMEBadKeyUsage
= -67625, /* The key usage is not compatible with SMIME. */
407 errSecSMIMEKeyUsageNotCritical
= -67626, /* The key usage extension is not marked as critical. */
408 errSecSMIMENoEmailAddress
= -67627, /* No email address was found in the certificate. */
409 errSecSMIMESubjAltNameNotCritical
= -67628, /* The subject alternative name extension is not marked as critical. */
410 errSecSSLBadExtendedKeyUsage
= -67629, /* The appropriate extended key usage for SSL was not found. */
411 errSecOCSPBadResponse
= -67630, /* The OCSP response was incorrect or could not be parsed. */
412 errSecOCSPBadRequest
= -67631, /* The OCSP request was incorrect or could not be parsed. */
413 errSecOCSPUnavailable
= -67632, /* OCSP service is unavailable. */
414 errSecOCSPStatusUnrecognized
= -67633, /* The OCSP server did not recognize this certificate. */
415 errSecEndOfData
= -67634, /* An end-of-data was detected. */
416 errSecIncompleteCertRevocationCheck
= -67635, /* An incomplete certificate revocation check occurred. */
417 errSecNetworkFailure
= -67636, /* A network failure occurred. */
418 errSecOCSPNotTrustedToAnchor
= -67637, /* The OCSP response was not trusted to a root or anchor certificate. */
419 errSecRecordModified
= -67638, /* The record was modified. */
420 errSecOCSPSignatureError
= -67639, /* The OCSP response had an invalid signature. */
421 errSecOCSPNoSigner
= -67640, /* The OCSP response had no signer. */
422 errSecOCSPResponderMalformedReq
= -67641, /* The OCSP responder was given a malformed request. */
423 errSecOCSPResponderInternalError
= -67642, /* The OCSP responder encountered an internal error. */
424 errSecOCSPResponderTryLater
= -67643, /* The OCSP responder is busy, try again later. */
425 errSecOCSPResponderSignatureRequired
= -67644, /* The OCSP responder requires a signature. */
426 errSecOCSPResponderUnauthorized
= -67645, /* The OCSP responder rejected this request as unauthorized. */
427 errSecOCSPResponseNonceMismatch
= -67646, /* The OCSP response nonce did not match the request. */
428 errSecCodeSigningBadCertChainLength
= -67647, /* Code signing encountered an incorrect certificate chain length. */
429 errSecCodeSigningNoBasicConstraints
= -67648, /* Code signing found no basic constraints. */
430 errSecCodeSigningBadPathLengthConstraint
= -67649, /* Code signing encountered an incorrect path length constraint. */
431 errSecCodeSigningNoExtendedKeyUsage
= -67650, /* Code signing found no extended key usage. */
432 errSecCodeSigningDevelopment
= -67651, /* Code signing indicated use of a development-only certificate. */
433 errSecResourceSignBadCertChainLength
= -67652, /* Resource signing has encountered an incorrect certificate chain length. */
434 errSecResourceSignBadExtKeyUsage
= -67653, /* Resource signing has encountered an error in the extended key usage. */
435 errSecTrustSettingDeny
= -67654, /* The trust setting for this policy was set to Deny. */
436 errSecInvalidSubjectName
= -67655, /* An invalid certificate subject name was encountered. */
437 errSecUnknownQualifiedCertStatement
= -67656, /* An unknown qualified certificate statement was encountered. */
438 errSecMobileMeRequestQueued
= -67657, /* The MobileMe request will be sent during the next connection. */
439 errSecMobileMeRequestRedirected
= -67658, /* The MobileMe request was redirected. */
440 errSecMobileMeServerError
= -67659, /* A MobileMe server error occurred. */
441 errSecMobileMeServerNotAvailable
= -67660, /* The MobileMe server is not available. */
442 errSecMobileMeServerAlreadyExists
= -67661, /* The MobileMe server reported that the item already exists. */
443 errSecMobileMeServerServiceErr
= -67662, /* A MobileMe service error has occurred. */
444 errSecMobileMeRequestAlreadyPending
= -67663, /* A MobileMe request is already pending. */
445 errSecMobileMeNoRequestPending
= -67664, /* MobileMe has no request pending. */
446 errSecMobileMeCSRVerifyFailure
= -67665, /* A MobileMe CSR verification failure has occurred. */
447 errSecMobileMeFailedConsistencyCheck
= -67666, /* MobileMe has found a failed consistency check. */
448 errSecNotInitialized
= -67667, /* A function was called without initializing CSSM. */
449 errSecInvalidHandleUsage
= -67668, /* The CSSM handle does not match with the service type. */
450 errSecPVCReferentNotFound
= -67669, /* A reference to the calling module was not found in the list of authorized callers. */
451 errSecFunctionIntegrityFail
= -67670, /* A function address was not within the verified module. */
452 errSecInternalError
= -67671, /* An internal error has occurred. */
453 errSecMemoryError
= -67672, /* A memory error has occurred. */
454 errSecInvalidData
= -67673, /* Invalid data was encountered. */
455 errSecMDSError
= -67674, /* A Module Directory Service error has occurred. */
456 errSecInvalidPointer
= -67675, /* An invalid pointer was encountered. */
457 errSecSelfCheckFailed
= -67676, /* Self-check has failed. */
458 errSecFunctionFailed
= -67677, /* A function has failed. */
459 errSecModuleManifestVerifyFailed
= -67678, /* A module manifest verification failure has occurred. */
460 errSecInvalidGUID
= -67679, /* An invalid GUID was encountered. */
461 errSecInvalidHandle
= -67680, /* An invalid handle was encountered. */
462 errSecInvalidDBList
= -67681, /* An invalid DB list was encountered. */
463 errSecInvalidPassthroughID
= -67682, /* An invalid passthrough ID was encountered. */
464 errSecInvalidNetworkAddress
= -67683, /* An invalid network address was encountered. */
465 errSecCRLAlreadySigned
= -67684, /* The certificate revocation list is already signed. */
466 errSecInvalidNumberOfFields
= -67685, /* An invalid number of fields were encountered. */
467 errSecVerificationFailure
= -67686, /* A verification failure occurred. */
468 errSecUnknownTag
= -67687, /* An unknown tag was encountered. */
469 errSecInvalidSignature
= -67688, /* An invalid signature was encountered. */
470 errSecInvalidName
= -67689, /* An invalid name was encountered. */
471 errSecInvalidCertificateRef
= -67690, /* An invalid certificate reference was encountered. */
472 errSecInvalidCertificateGroup
= -67691, /* An invalid certificate group was encountered. */
473 errSecTagNotFound
= -67692, /* The specified tag was not found. */
474 errSecInvalidQuery
= -67693, /* The specified query was not valid. */
475 errSecInvalidValue
= -67694, /* An invalid value was detected. */
476 errSecCallbackFailed
= -67695, /* A callback has failed. */
477 errSecACLDeleteFailed
= -67696, /* An ACL delete operation has failed. */
478 errSecACLReplaceFailed
= -67697, /* An ACL replace operation has failed. */
479 errSecACLAddFailed
= -67698, /* An ACL add operation has failed. */
480 errSecACLChangeFailed
= -67699, /* An ACL change operation has failed. */
481 errSecInvalidAccessCredentials
= -67700, /* Invalid access credentials were encountered. */
482 errSecInvalidRecord
= -67701, /* An invalid record was encountered. */
483 errSecInvalidACL
= -67702, /* An invalid ACL was encountered. */
484 errSecInvalidSampleValue
= -67703, /* An invalid sample value was encountered. */
485 errSecIncompatibleVersion
= -67704, /* An incompatible version was encountered. */
486 errSecPrivilegeNotGranted
= -67705, /* The privilege was not granted. */
487 errSecInvalidScope
= -67706, /* An invalid scope was encountered. */
488 errSecPVCAlreadyConfigured
= -67707, /* The PVC is already configured. */
489 errSecInvalidPVC
= -67708, /* An invalid PVC was encountered. */
490 errSecEMMLoadFailed
= -67709, /* The EMM load has failed. */
491 errSecEMMUnloadFailed
= -67710, /* The EMM unload has failed. */
492 errSecAddinLoadFailed
= -67711, /* The add-in load operation has failed. */
493 errSecInvalidKeyRef
= -67712, /* An invalid key was encountered. */
494 errSecInvalidKeyHierarchy
= -67713, /* An invalid key hierarchy was encountered. */
495 errSecAddinUnloadFailed
= -67714, /* The add-in unload operation has failed. */
496 errSecLibraryReferenceNotFound
= -67715, /* A library reference was not found. */
497 errSecInvalidAddinFunctionTable
= -67716, /* An invalid add-in function table was encountered. */
498 errSecInvalidServiceMask
= -67717, /* An invalid service mask was encountered. */
499 errSecModuleNotLoaded
= -67718, /* A module was not loaded. */
500 errSecInvalidSubServiceID
= -67719, /* An invalid subservice ID was encountered. */
501 errSecAttributeNotInContext
= -67720, /* An attribute was not in the context. */
502 errSecModuleManagerInitializeFailed
= -67721, /* A module failed to initialize. */
503 errSecModuleManagerNotFound
= -67722, /* A module was not found. */
504 errSecEventNotificationCallbackNotFound
= -67723, /* An event notification callback was not found. */
505 errSecInputLengthError
= -67724, /* An input length error was encountered. */
506 errSecOutputLengthError
= -67725, /* An output length error was encountered. */
507 errSecPrivilegeNotSupported
= -67726, /* The privilege is not supported. */
508 errSecDeviceError
= -67727, /* A device error was encountered. */
509 errSecAttachHandleBusy
= -67728, /* The CSP handle was busy. */
510 errSecNotLoggedIn
= -67729, /* You are not logged in. */
511 errSecAlgorithmMismatch
= -67730, /* An algorithm mismatch was encountered. */
512 errSecKeyUsageIncorrect
= -67731, /* The key usage is incorrect. */
513 errSecKeyBlobTypeIncorrect
= -67732, /* The key blob type is incorrect. */
514 errSecKeyHeaderInconsistent
= -67733, /* The key header is inconsistent. */
515 errSecUnsupportedKeyFormat
= -67734, /* The key header format is not supported. */
516 errSecUnsupportedKeySize
= -67735, /* The key size is not supported. */
517 errSecInvalidKeyUsageMask
= -67736, /* The key usage mask is not valid. */
518 errSecUnsupportedKeyUsageMask
= -67737, /* The key usage mask is not supported. */
519 errSecInvalidKeyAttributeMask
= -67738, /* The key attribute mask is not valid. */
520 errSecUnsupportedKeyAttributeMask
= -67739, /* The key attribute mask is not supported. */
521 errSecInvalidKeyLabel
= -67740, /* The key label is not valid. */
522 errSecUnsupportedKeyLabel
= -67741, /* The key label is not supported. */
523 errSecInvalidKeyFormat
= -67742, /* The key format is not valid. */
524 errSecUnsupportedVectorOfBuffers
= -67743, /* The vector of buffers is not supported. */
525 errSecInvalidInputVector
= -67744, /* The input vector is not valid. */
526 errSecInvalidOutputVector
= -67745, /* The output vector is not valid. */
527 errSecInvalidContext
= -67746, /* An invalid context was encountered. */
528 errSecInvalidAlgorithm
= -67747, /* An invalid algorithm was encountered. */
529 errSecInvalidAttributeKey
= -67748, /* A key attribute was not valid. */
530 errSecMissingAttributeKey
= -67749, /* A key attribute was missing. */
531 errSecInvalidAttributeInitVector
= -67750, /* An init vector attribute was not valid. */
532 errSecMissingAttributeInitVector
= -67751, /* An init vector attribute was missing. */
533 errSecInvalidAttributeSalt
= -67752, /* A salt attribute was not valid. */
534 errSecMissingAttributeSalt
= -67753, /* A salt attribute was missing. */
535 errSecInvalidAttributePadding
= -67754, /* A padding attribute was not valid. */
536 errSecMissingAttributePadding
= -67755, /* A padding attribute was missing. */
537 errSecInvalidAttributeRandom
= -67756, /* A random number attribute was not valid. */
538 errSecMissingAttributeRandom
= -67757, /* A random number attribute was missing. */
539 errSecInvalidAttributeSeed
= -67758, /* A seed attribute was not valid. */
540 errSecMissingAttributeSeed
= -67759, /* A seed attribute was missing. */
541 errSecInvalidAttributePassphrase
= -67760, /* A passphrase attribute was not valid. */
542 errSecMissingAttributePassphrase
= -67761, /* A passphrase attribute was missing. */
543 errSecInvalidAttributeKeyLength
= -67762, /* A key length attribute was not valid. */
544 errSecMissingAttributeKeyLength
= -67763, /* A key length attribute was missing. */
545 errSecInvalidAttributeBlockSize
= -67764, /* A block size attribute was not valid. */
546 errSecMissingAttributeBlockSize
= -67765, /* A block size attribute was missing. */
547 errSecInvalidAttributeOutputSize
= -67766, /* An output size attribute was not valid. */
548 errSecMissingAttributeOutputSize
= -67767, /* An output size attribute was missing. */
549 errSecInvalidAttributeRounds
= -67768, /* The number of rounds attribute was not valid. */
550 errSecMissingAttributeRounds
= -67769, /* The number of rounds attribute was missing. */
551 errSecInvalidAlgorithmParms
= -67770, /* An algorithm parameters attribute was not valid. */
552 errSecMissingAlgorithmParms
= -67771, /* An algorithm parameters attribute was missing. */
553 errSecInvalidAttributeLabel
= -67772, /* A label attribute was not valid. */
554 errSecMissingAttributeLabel
= -67773, /* A label attribute was missing. */
555 errSecInvalidAttributeKeyType
= -67774, /* A key type attribute was not valid. */
556 errSecMissingAttributeKeyType
= -67775, /* A key type attribute was missing. */
557 errSecInvalidAttributeMode
= -67776, /* A mode attribute was not valid. */
558 errSecMissingAttributeMode
= -67777, /* A mode attribute was missing. */
559 errSecInvalidAttributeEffectiveBits
= -67778, /* An effective bits attribute was not valid. */
560 errSecMissingAttributeEffectiveBits
= -67779, /* An effective bits attribute was missing. */
561 errSecInvalidAttributeStartDate
= -67780, /* A start date attribute was not valid. */
562 errSecMissingAttributeStartDate
= -67781, /* A start date attribute was missing. */
563 errSecInvalidAttributeEndDate
= -67782, /* An end date attribute was not valid. */
564 errSecMissingAttributeEndDate
= -67783, /* An end date attribute was missing. */
565 errSecInvalidAttributeVersion
= -67784, /* A version attribute was not valid. */
566 errSecMissingAttributeVersion
= -67785, /* A version attribute was missing. */
567 errSecInvalidAttributePrime
= -67786, /* A prime attribute was not valid. */
568 errSecMissingAttributePrime
= -67787, /* A prime attribute was missing. */
569 errSecInvalidAttributeBase
= -67788, /* A base attribute was not valid. */
570 errSecMissingAttributeBase
= -67789, /* A base attribute was missing. */
571 errSecInvalidAttributeSubprime
= -67790, /* A subprime attribute was not valid. */
572 errSecMissingAttributeSubprime
= -67791, /* A subprime attribute was missing. */
573 errSecInvalidAttributeIterationCount
= -67792, /* An iteration count attribute was not valid. */
574 errSecMissingAttributeIterationCount
= -67793, /* An iteration count attribute was missing. */
575 errSecInvalidAttributeDLDBHandle
= -67794, /* A database handle attribute was not valid. */
576 errSecMissingAttributeDLDBHandle
= -67795, /* A database handle attribute was missing. */
577 errSecInvalidAttributeAccessCredentials
= -67796, /* An access credentials attribute was not valid. */
578 errSecMissingAttributeAccessCredentials
= -67797, /* An access credentials attribute was missing. */
579 errSecInvalidAttributePublicKeyFormat
= -67798, /* A public key format attribute was not valid. */
580 errSecMissingAttributePublicKeyFormat
= -67799, /* A public key format attribute was missing. */
581 errSecInvalidAttributePrivateKeyFormat
= -67800, /* A private key format attribute was not valid. */
582 errSecMissingAttributePrivateKeyFormat
= -67801, /* A private key format attribute was missing. */
583 errSecInvalidAttributeSymmetricKeyFormat
= -67802, /* A symmetric key format attribute was not valid. */
584 errSecMissingAttributeSymmetricKeyFormat
= -67803, /* A symmetric key format attribute was missing. */
585 errSecInvalidAttributeWrappedKeyFormat
= -67804, /* A wrapped key format attribute was not valid. */
586 errSecMissingAttributeWrappedKeyFormat
= -67805, /* A wrapped key format attribute was missing. */
587 errSecStagedOperationInProgress
= -67806, /* A staged operation is in progress. */
588 errSecStagedOperationNotStarted
= -67807, /* A staged operation was not started. */
589 errSecVerifyFailed
= -67808, /* A cryptographic verification failure has occurred. */
590 errSecQuerySizeUnknown
= -67809, /* The query size is unknown. */
591 errSecBlockSizeMismatch
= -67810, /* A block size mismatch occurred. */
592 errSecPublicKeyInconsistent
= -67811, /* The public key was inconsistent. */
593 errSecDeviceVerifyFailed
= -67812, /* A device verification failure has occurred. */
594 errSecInvalidLoginName
= -67813, /* An invalid login name was detected. */
595 errSecAlreadyLoggedIn
= -67814, /* The user is already logged in. */
596 errSecInvalidDigestAlgorithm
= -67815, /* An invalid digest algorithm was detected. */
597 errSecInvalidCRLGroup
= -67816, /* An invalid CRL group was detected. */
598 errSecCertificateCannotOperate
= -67817, /* The certificate cannot operate. */
599 errSecCertificateExpired
= -67818, /* An expired certificate was detected. */
600 errSecCertificateNotValidYet
= -67819, /* The certificate is not yet valid. */
601 errSecCertificateRevoked
= -67820, /* The certificate was revoked. */
602 errSecCertificateSuspended
= -67821, /* The certificate was suspended. */
603 errSecInsufficientCredentials
= -67822, /* Insufficient credentials were detected. */
604 errSecInvalidAction
= -67823, /* The action was not valid. */
605 errSecInvalidAuthority
= -67824, /* The authority was not valid. */
606 errSecVerifyActionFailed
= -67825, /* A verify action has failed. */
607 errSecInvalidCertAuthority
= -67826, /* The certificate authority was not valid. */
608 errSecInvaldCRLAuthority
= -67827, /* The CRL authority was not valid. */
609 errSecInvalidCRLEncoding
= -67828, /* The CRL encoding was not valid. */
610 errSecInvalidCRLType
= -67829, /* The CRL type was not valid. */
611 errSecInvalidCRL
= -67830, /* The CRL was not valid. */
612 errSecInvalidFormType
= -67831, /* The form type was not valid. */
613 errSecInvalidID
= -67832, /* The ID was not valid. */
614 errSecInvalidIdentifier
= -67833, /* The identifier was not valid. */
615 errSecInvalidIndex
= -67834, /* The index was not valid. */
616 errSecInvalidPolicyIdentifiers
= -67835, /* The policy identifiers are not valid. */
617 errSecInvalidTimeString
= -67836, /* The time specified was not valid. */
618 errSecInvalidReason
= -67837, /* The trust policy reason was not valid. */
619 errSecInvalidRequestInputs
= -67838, /* The request inputs are not valid. */
620 errSecInvalidResponseVector
= -67839, /* The response vector was not valid. */
621 errSecInvalidStopOnPolicy
= -67840, /* The stop-on policy was not valid. */
622 errSecInvalidTuple
= -67841, /* The tuple was not valid. */
623 errSecMultipleValuesUnsupported
= -67842, /* Multiple values are not supported. */
624 errSecNotTrusted
= -67843, /* The trust policy was not trusted. */
625 errSecNoDefaultAuthority
= -67844, /* No default authority was detected. */
626 errSecRejectedForm
= -67845, /* The trust policy had a rejected form. */
627 errSecRequestLost
= -67846, /* The request was lost. */
628 errSecRequestRejected
= -67847, /* The request was rejected. */
629 errSecUnsupportedAddressType
= -67848, /* The address type is not supported. */
630 errSecUnsupportedService
= -67849, /* The service is not supported. */
631 errSecInvalidTupleGroup
= -67850, /* The tuple group was not valid. */
632 errSecInvalidBaseACLs
= -67851, /* The base ACLs are not valid. */
633 errSecInvalidTupleCredendtials
= -67852, /* The tuple credentials are not valid. */
634 errSecInvalidEncoding
= -67853, /* The encoding was not valid. */
635 errSecInvalidValidityPeriod
= -67854, /* The validity period was not valid. */
636 errSecInvalidRequestor
= -67855, /* The requestor was not valid. */
637 errSecRequestDescriptor
= -67856, /* The request descriptor was not valid. */
638 errSecInvalidBundleInfo
= -67857, /* The bundle information was not valid. */
639 errSecInvalidCRLIndex
= -67858, /* The CRL index was not valid. */
640 errSecNoFieldValues
= -67859, /* No field values were detected. */
641 errSecUnsupportedFieldFormat
= -67860, /* The field format is not supported. */
642 errSecUnsupportedIndexInfo
= -67861, /* The index information is not supported. */
643 errSecUnsupportedLocality
= -67862, /* The locality is not supported. */
644 errSecUnsupportedNumAttributes
= -67863, /* The number of attributes is not supported. */
645 errSecUnsupportedNumIndexes
= -67864, /* The number of indexes is not supported. */
646 errSecUnsupportedNumRecordTypes
= -67865, /* The number of record types is not supported. */
647 errSecFieldSpecifiedMultiple
= -67866, /* Too many fields were specified. */
648 errSecIncompatibleFieldFormat
= -67867, /* The field format was incompatible. */
649 errSecInvalidParsingModule
= -67868, /* The parsing module was not valid. */
650 errSecDatabaseLocked
= -67869, /* The database is locked. */
651 errSecDatastoreIsOpen
= -67870, /* The data store is open. */
652 errSecMissingValue
= -67871, /* A missing value was detected. */
653 errSecUnsupportedQueryLimits
= -67872, /* The query limits are not supported. */
654 errSecUnsupportedNumSelectionPreds
= -67873, /* The number of selection predicates is not supported. */
655 errSecUnsupportedOperator
= -67874, /* The operator is not supported. */
656 errSecInvalidDBLocation
= -67875, /* The database location is not valid. */
657 errSecInvalidAccessRequest
= -67876, /* The access request is not valid. */
658 errSecInvalidIndexInfo
= -67877, /* The index information is not valid. */
659 errSecInvalidNewOwner
= -67878, /* The new owner is not valid. */
660 errSecInvalidModifyMode
= -67879, /* The modify mode is not valid. */
661 errSecMissingRequiredExtension
= -67880, /* A required certificate extension is missing. */
662 errSecExtendedKeyUsageNotCritical
= -67881, /* The extended key usage extension was not marked critical. */
663 errSecTimestampMissing
= -67882, /* A timestamp was expected but was not found. */
664 errSecTimestampInvalid
= -67883, /* The timestamp was not valid. */
665 errSecTimestampNotTrusted
= -67884, /* The timestamp was not trusted. */
666 errSecTimestampServiceNotAvailable
= -67885, /* The timestamp service is not available. */
667 errSecTimestampBadAlg
= -67886, /* An unrecognized or unsupported Algorithm Identifier in timestamp. */
668 errSecTimestampBadRequest
= -67887, /* The timestamp transaction is not permitted or supported. */
669 errSecTimestampBadDataFormat
= -67888, /* The timestamp data submitted has the wrong format. */
670 errSecTimestampTimeNotAvailable
= -67889, /* The time source for the Timestamp Authority is not available. */
671 errSecTimestampUnacceptedPolicy
= -67890, /* The requested policy is not supported by the Timestamp Authority. */
672 errSecTimestampUnacceptedExtension
= -67891, /* The requested extension is not supported by the Timestamp Authority. */
673 errSecTimestampAddInfoNotAvailable
= -67892, /* The additional information requested is not available. */
674 errSecTimestampSystemFailure
= -67893, /* The timestamp request cannot be handled due to system failure. */
675 errSecSigningTimeMissing
= -67894, /* A signing time was expected but was not found. */
676 errSecTimestampRejection
= -67895, /* A timestamp transaction was rejected. */
677 errSecTimestampWaiting
= -67896, /* A timestamp transaction is waiting. */
678 errSecTimestampRevocationWarning
= -67897, /* A timestamp authority revocation warning was issued. */
679 errSecTimestampRevocationNotification
= -67898, /* A timestamp authority revocation notification was issued. */
683 CF_IMPLICIT_BRIDGING_DISABLED
684 CF_ASSUME_NONNULL_END
688 #endif /* _SECURITY_SECBASE_H_ */
projects / apple / security.git / blob