Security/libsecurity_keychain/lib/SecBase.h

   1 /*
   2  * Copyright (c) 2000-2014 Apple Inc. All Rights Reserved.
   3  *
   4  * @APPLE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. Please obtain a copy of the License at
  10  * http://www.opensource.apple.com/apsl/ and read it before using this
  11  * file.
  12  *
  13  * The Original Code and all software distributed under the License are
  14  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  15  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  16  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  17  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  18  * Please see the License for the specific language governing rights and
  19  * limitations under the License.
  20  *
  21  * @APPLE_LICENSE_HEADER_END@
  22  */
  23
  24 /*!
  25         @header SecBase
  26         SecBase contains common declarations for the Security functions.
  27 */
  28
  29 #ifndef _SECURITY_SECBASE_H_
  30 #define _SECURITY_SECBASE_H_
  31
  32 #include <CoreFoundation/CFBase.h>
  33 #include <AvailabilityMacros.h>
  34
  35 #if defined(__clang__)
  36 #define SEC_DEPRECATED_ATTRIBUTE DEPRECATED_ATTRIBUTE
  37 #else
  38 #define SEC_DEPRECATED_ATTRIBUTE
  39 #endif
  40
  41 #if defined(__cplusplus)
  42 extern "C" {
  43 #endif
  44
  45 #ifndef __SEC_TYPES__
  46 #define __SEC_TYPES__
  47
  48 /*!
  49     @typedef SecKeychainRef
  50     @abstract Contains information about a keychain.
  51 */
  52 typedef struct OpaqueSecKeychainRef *SecKeychainRef;
  53
  54 /*!
  55     @typedef SecKeychainItemRef
  56     @abstract Contains information about a keychain item.
  57 */
  58 typedef struct OpaqueSecKeychainItemRef *SecKeychainItemRef;
  59
  60 /*!
  61     @typedef SecKeychainSearchRef
  62     @abstract Contains information about a keychain search.
  63 */
  64 typedef struct OpaqueSecKeychainSearchRef *SecKeychainSearchRef;
  65
  66 /*!
  67     @typedef SecKeychainAttrType
  68     @abstract Represents a keychain attribute type.
  69 */
  70 typedef OSType SecKeychainAttrType;
  71
  72 /*!
  73     @struct SecKeychainAttribute
  74     @abstract Contains keychain attributes.
  75     @field tag A 4-byte attribute tag.
  76     @field length The length of the buffer pointed to by data.
  77     @field data A pointer to the attribute data.
  78 */
  79 struct SecKeychainAttribute
  80 {
  81     SecKeychainAttrType tag;
  82     UInt32 length;
  83     void *data;
  84 };
  85 typedef struct SecKeychainAttribute SecKeychainAttribute;
  86
  87 /*!
  88     @typedef SecKeychainAttributePtr
  89     @abstract Represents a pointer to a keychain attribute structure.
  90 */
  91 typedef SecKeychainAttribute *SecKeychainAttributePtr;
  92
  93 /*!
  94     @typedef SecKeychainAttributeList
  95     @abstract Represents a list of keychain attributes.
  96     @field count An unsigned 32-bit integer that represents the number of keychain attributes in the array.
  97     @field attr A pointer to the first keychain attribute in the array.
  98 */
  99 struct SecKeychainAttributeList
 100 {
 101     UInt32 count;
 102     SecKeychainAttribute *attr;
 103 };
 104 typedef struct SecKeychainAttributeList  SecKeychainAttributeList;
 105
 106 /*!
 107     @typedef SecKeychainStatus
 108     @abstract Represents the status of a keychain.
 109 */
 110 typedef UInt32 SecKeychainStatus;
 111 #endif
 112
 113 /*!
 114     @typedef SecTrustedApplicationRef
 115     @abstract Contains information about a trusted application.
 116 */
 117 typedef struct OpaqueSecTrustedApplicationRef *SecTrustedApplicationRef;
 118
 119 /*!
 120     @typedef SecPolicyRef
 121     @abstract Contains information about a policy.
 122 */
 123 typedef struct OpaqueSecPolicyRef *SecPolicyRef;
 124
 125 /*!
 126     @typedef SecCertificateRef
 127     @abstract Contains information about a certificate.
 128 */
 129 typedef struct OpaqueSecCertificateRef *SecCertificateRef;
 130
 131 /*!
 132     @typedef SecAccessRef
 133     @abstract Contains information about an access.
 134 */
 135 typedef struct OpaqueSecAccessRef *SecAccessRef;
 136
 137 /*!
 138     @typedef SecIdentityRef
 139     @abstract Contains information about an identity.
 140 */
 141 typedef struct OpaqueSecIdentityRef *SecIdentityRef;
 142
 143 /*!
 144     @typedef SecKeyRef
 145     @abstract Contains information about a key.
 146 */
 147 typedef struct OpaqueSecKeyRef *SecKeyRef;
 148
 149 /*!
 150     @typedef SecACLRef
 151     @abstract Contains information about an access control list (ACL) entry.
 152 */
 153 typedef struct OpaqueSecTrustRef *SecACLRef;
 154
 155 /*!
 156     @typedef SecAccessControlRef
 157     @abstract CFType representing access control for an item.
 158 */
 159 typedef struct OpaqueSecAccessControl *SecAccessControlRef;
 160
 161 /*!
 162     @typedef SecPasswordRef
 163     @abstract Contains information about a password.
 164 */
 165 typedef struct OpaqueSecPasswordRef *SecPasswordRef;
 166
 167 /*!
 168     @typedef SecKeychainAttributeInfo
 169     @abstract Represents an attribute.
 170     @field count The number of tag-format pairs in the respective arrays.
 171     @field tag A pointer to the first attribute tag in the array.
 172     @field format A pointer to the first CSSM_DB_ATTRIBUTE_FORMAT in the array.
 173     @discussion Each tag and format item form a pair.
 174 */
 175 struct SecKeychainAttributeInfo
 176 {
 177     UInt32 count;
 178     UInt32 *tag;
 179         UInt32 *format;
 180 };
 181 typedef struct SecKeychainAttributeInfo  SecKeychainAttributeInfo;
 182
 183 /*!
 184     @function SecCopyErrorMessageString
 185     @abstract Returns a string describing the specified error result code.
 186     @param status An error result code of type OSStatus or CSSM_RETURN, as returned by a Security or CSSM function.
 187     @reserved Reserved for future use. Your code should pass NULL in this parameter.
 188     @result A reference to an error string, or NULL if no error string is available for the specified result code. Your code must release this reference by calling the CFRelease function.
 189 */
 190 CFStringRef SecCopyErrorMessageString(OSStatus status, void *reserved)
 191     __OSX_AVAILABLE_STARTING(__MAC_10_3, __IPHONE_NA);
 192 /*!
 193 @enum Security Error Codes
 194 @abstract Result codes returned from Security framework functions.
 195 @constant errSecSuccess No error.
 196 @constant errSecUnimplemented Function or operation not implemented.
 197 @constant errSecDskFull Disk Full error.
 198 @constant errSecIO I/O error.
 199 @constant errSecParam One or more parameters passed to a function were not valid.
 200 @constant errSecWrPerm  Write permissions error.
 201 @constant errSecAllocate Failed to allocate memory.
 202 @constant errSecUserCanceled User canceled the operation.
 203 @constant errSecBadReq Bad parameter or invalid state for operation.
 204 @constant errSecInternalComponent
 205 @constant errSecCoreFoundationUnknown
 206 @constant errSecNotAvailable No keychain is available.
 207 @constant errSecReadOnly Read only error.
 208 @constant errSecAuthFailed Authorization/Authentication failed.
 209 @constant errSecNoSuchKeychain The keychain does not exist.
 210 @constant errSecInvalidKeychain The keychain is not valid.
 211 @constant errSecDuplicateKeychain A keychain with the same name already exists.
 212 @constant errSecDuplicateCallback The specified callback is already installed.
 213 @constant errSecInvalidCallback The specified callback is not valid.
 214 @constant errSecDuplicateItem The item already exists.
 215 @constant errSecItemNotFound The item cannot be found.
 216 @constant errSecBufferTooSmall The buffer is too small.
 217 @constant errSecDataTooLarge The data is too large.
 218 @constant errSecNoSuchAttr The attribute does not exist.
 219 @constant errSecInvalidItemRef The item reference is invalid.
 220 @constant errSecInvalidSearchRef The search reference is invalid.
 221 @constant errSecNoSuchClass The keychain item class does not exist.
 222 @constant errSecNoDefaultKeychain A default keychain does not exist.
 223 @constant errSecInteractionNotAllowed User interaction is not allowed.
 224 @constant errSecReadOnlyAttr The attribute is read only.
 225 @constant errSecWrongSecVersion The version is incorrect.
 226 @constant errSecKeySizeNotAllowed The key size is not allowed.
 227 @constant errSecNoStorageModule There is no storage module available.
 228 @constant errSecNoCertificateModule There is no certificate module available.
 229 @constant errSecNoPolicyModule There is no policy module available.
 230 @constant errSecInteractionRequired User interaction is required.
 231 @constant errSecDataNotAvailable The data is not available.
 232 @constant errSecDataNotModifiable The data is not modifiable.
 233 @constant errSecCreateChainFailed The attempt to create a certificate chain failed.
 234 @constant errSecACLNotSimple The access control list is not in standard simple form.
 235 @constant errSecPolicyNotFound The policy specified cannot be found.
 236 @constant errSecInvalidTrustSetting The specified trust setting is invalid.
 237 @constant errSecNoAccessForItem The specified item has no access control.
 238 @constant errSecInvalidOwnerEdit Invalid attempt to change the owner of this item.
 239 @constant errSecTrustNotAvailable No trust results are available.
 240 @constant errSecUnsupportedFormat Import/Export format unsupported.
 241 @constant errSecUnknownFormat Unknown format in import.
 242 @constant errSecKeyIsSensitive Key material must be wrapped for export.
 243 @constant errSecMultiplePrivKeys An attempt was made to import multiple private keys.
 244 @constant errSecPassphraseRequired Passphrase is required for import/export.
 245 @constant errSecInvalidPasswordRef The password reference was invalid.
 246 @constant errSecInvalidTrustSettings The Trust Settings Record was corrupted.
 247 @constant errSecNoTrustSettings No Trust Settings were found.
 248 @constant errSecPkcs12VerifyFailure MAC verification failed during PKCS12 Import.
 249 @constant errSecDecode Unable to decode the provided data.
 250
 251 @discussion The assigned error space is discontinuous: e.g. -25240..-25279, -25290..-25329, -68608..-67585, and so on.
 252 */
 253
 254 /*
 255     Note: the comments that appear after these errors are used to create SecErrorMessages.strings.
 256     The comments must not be multi-line, and should be in a form meaningful to an end user. If
 257     a different or additional comment is needed, it can be put in the header doc format, or on a
 258     line that does not start with errZZZ.
 259 */
 260
 261 enum
 262 {
 263     errSecSuccess                = 0,       /* No error. */
 264     errSecUnimplemented          = -4,      /* Function or operation not implemented. */
 265     errSecDskFull                = -34,
 266     errSecIO                     = -36,     /*I/O error (bummers)*/
 267
 268     errSecParam                  = -50,     /* One or more parameters passed to a function were not valid. */
 269     errSecWrPerm                 = -61,     /* write permissions error*/
 270     errSecAllocate               = -108,    /* Failed to allocate memory. */
 271     errSecUserCanceled           = -128,    /* User canceled the operation. */
 272     errSecBadReq                 = -909,    /* Bad parameter or invalid state for operation. */
 273
 274     errSecInternalComponent      = -2070,
 275     errSecCoreFoundationUnknown  = -4960,
 276
 277     errSecNotAvailable           = -25291,      /* No keychain is available. You may need to restart your computer. */
 278     errSecReadOnly               = -25292,      /* This keychain cannot be modified. */
 279     errSecAuthFailed             = -25293,      /* The user name or passphrase you entered is not correct. */
 280     errSecNoSuchKeychain         = -25294,      /* The specified keychain could not be found. */
 281     errSecInvalidKeychain        = -25295,      /* The specified keychain is not a valid keychain file. */
 282     errSecDuplicateKeychain      = -25296,      /* A keychain with the same name already exists. */
 283     errSecDuplicateCallback      = -25297,      /* The specified callback function is already installed. */
 284     errSecInvalidCallback        = -25298,      /* The specified callback function is not valid. */
 285     errSecDuplicateItem          = -25299,      /* The specified item already exists in the keychain. */
 286     errSecItemNotFound           = -25300,      /* The specified item could not be found in the keychain. */
 287     errSecBufferTooSmall         = -25301,      /* There is not enough memory available to use the specified item. */
 288     errSecDataTooLarge           = -25302,      /* This item contains information which is too large or in a format that cannot be displayed. */
 289     errSecNoSuchAttr             = -25303,      /* The specified attribute does not exist. */
 290     errSecInvalidItemRef         = -25304,      /* The specified item is no longer valid. It may have been deleted from the keychain. */
 291     errSecInvalidSearchRef       = -25305,      /* Unable to search the current keychain. */
 292     errSecNoSuchClass            = -25306,      /* The specified item does not appear to be a valid keychain item. */
 293     errSecNoDefaultKeychain      = -25307,      /* A default keychain could not be found. */
 294     errSecInteractionNotAllowed  = -25308,      /* User interaction is not allowed. */
 295     errSecReadOnlyAttr           = -25309,      /* The specified attribute could not be modified. */
 296     errSecWrongSecVersion        = -25310,      /* This keychain was created by a different version of the system software and cannot be opened. */
 297     errSecKeySizeNotAllowed      = -25311,      /* This item specifies a key size which is too large. */
 298     errSecNoStorageModule        = -25312,      /* A required component (data storage module) could not be loaded. You may need to restart your computer. */
 299     errSecNoCertificateModule    = -25313,      /* A required component (certificate module) could not be loaded. You may need to restart your computer. */
 300     errSecNoPolicyModule         = -25314,      /* A required component (policy module) could not be loaded. You may need to restart your computer. */
 301     errSecInteractionRequired    = -25315,      /* User interaction is required, but is currently not allowed. */
 302     errSecDataNotAvailable       = -25316,      /* The contents of this item cannot be retrieved. */
 303     errSecDataNotModifiable      = -25317,      /* The contents of this item cannot be modified. */
 304     errSecCreateChainFailed      = -25318,      /* One or more certificates required to validate this certificate cannot be found. */
 305     errSecInvalidPrefsDomain     = -25319,      /* The specified preferences domain is not valid. */
 306     errSecInDarkWake             = -25320,      /* In dark wake, no UI possible */
 307
 308         errSecACLNotSimple           = -25240,  /* The specified access control list is not in standard (simple) form. */
 309         errSecPolicyNotFound         = -25241,  /* The specified policy cannot be found. */
 310         errSecInvalidTrustSetting    = -25242,  /* The specified trust setting is invalid. */
 311         errSecNoAccessForItem        = -25243,  /* The specified item has no access control. */
 312         errSecInvalidOwnerEdit       = -25244,  /* Invalid attempt to change the owner of this item. */
 313         errSecTrustNotAvailable      = -25245,  /* No trust results are available. */
 314         errSecUnsupportedFormat      = -25256,  /* Import/Export format unsupported. */
 315         errSecUnknownFormat          = -25257,  /* Unknown format in import. */
 316         errSecKeyIsSensitive         = -25258,  /* Key material must be wrapped for export. */
 317         errSecMultiplePrivKeys       = -25259,  /* An attempt was made to import multiple private keys. */
 318         errSecPassphraseRequired     = -25260,  /* Passphrase is required for import/export. */
 319         errSecInvalidPasswordRef     = -25261,  /* The password reference was invalid. */
 320         errSecInvalidTrustSettings   = -25262,  /* The Trust Settings Record was corrupted. */
 321         errSecNoTrustSettings        = -25263,  /* No Trust Settings were found. */
 322         errSecPkcs12VerifyFailure    = -25264,  /* MAC verification failed during PKCS12 import (wrong password?) */
 323         errSecNotSigner              = -26267,  /* A certificate was not signed by its proposed parent. */
 324
 325         errSecDecode                 = -26275,  /* Unable to decode the provided data. */
 326
 327         errSecServiceNotAvailable                       = -67585,       /* The required service is not available. */
 328         errSecInsufficientClientID                      = -67586,       /* The client ID is not correct. */
 329         errSecDeviceReset                                               = -67587,       /* A device reset has occurred. */
 330         errSecDeviceFailed                                      = -67588,       /* A device failure has occurred. */
 331         errSecAppleAddAppACLSubject                     = -67589,       /* Adding an application ACL subject failed. */
 332         errSecApplePublicKeyIncomplete          = -67590,       /* The public key is incomplete. */
 333         errSecAppleSignatureMismatch            = -67591,       /* A signature mismatch has occurred. */
 334         errSecAppleInvalidKeyStartDate          = -67592,       /* The specified key has an invalid start date. */
 335         errSecAppleInvalidKeyEndDate            = -67593,       /* The specified key has an invalid end date. */
 336         errSecConversionError                           = -67594,       /* A conversion error has occurred. */
 337         errSecAppleSSLv2Rollback                        = -67595,       /* A SSLv2 rollback error has occurred. */
 338         errSecDiskFull                                          = -34,          /* The disk is full. */
 339         errSecQuotaExceeded                                     = -67596,       /* The quota was exceeded. */
 340         errSecFileTooBig                                                = -67597,       /* The file is too big. */
 341         errSecInvalidDatabaseBlob                       = -67598,       /* The specified database has an invalid blob. */
 342         errSecInvalidKeyBlob                                    = -67599,       /* The specified database has an invalid key blob. */
 343         errSecIncompatibleDatabaseBlob          = -67600,       /* The specified database has an incompatible blob. */
 344         errSecIncompatibleKeyBlob                       = -67601,       /* The specified database has an incompatible key blob. */
 345         errSecHostNameMismatch                          = -67602,       /* A host name mismatch has occurred. */
 346         errSecUnknownCriticalExtensionFlag      = -67603,       /* There is an unknown critical extension flag. */
 347         errSecNoBasicConstraints                        = -67604,       /* No basic constraints were found. */
 348         errSecNoBasicConstraintsCA                      = -67605,       /* No basic CA constraints were found. */
 349         errSecInvalidAuthorityKeyID                     = -67606,       /* The authority key ID is not valid. */
 350         errSecInvalidSubjectKeyID                       = -67607,       /* The subject key ID is not valid. */
 351         errSecInvalidKeyUsageForPolicy          = -67608,       /* The key usage is not valid for the specified policy. */
 352         errSecInvalidExtendedKeyUsage           = -67609,       /* The extended key usage is not valid. */
 353         errSecInvalidIDLinkage                          = -67610,       /* The ID linkage is not valid. */
 354         errSecPathLengthConstraintExceeded      = -67611,       /* The path length constraint was exceeded. */
 355         errSecInvalidRoot                                               = -67612,       /* The root or anchor certificate is not valid. */
 356         errSecCRLExpired                                                = -67613,       /* The CRL has expired. */
 357         errSecCRLNotValidYet                                    = -67614,       /* The CRL is not yet valid. */
 358         errSecCRLNotFound                                               = -67615,       /* The CRL was not found. */
 359         errSecCRLServerDown                                     = -67616,       /* The CRL server is down. */
 360         errSecCRLBadURI                                         = -67617,       /* The CRL has a bad Uniform Resource Identifier. */
 361         errSecUnknownCertExtension                      = -67618,       /* An unknown certificate extension was encountered. */
 362         errSecUnknownCRLExtension                       = -67619,       /* An unknown CRL extension was encountered. */
 363         errSecCRLNotTrusted                                     = -67620,       /* The CRL is not trusted. */
 364         errSecCRLPolicyFailed                           = -67621,       /* The CRL policy failed. */
 365         errSecIDPFailure                                                = -67622,       /* The issuing distribution point was not valid. */
 366         errSecSMIMEEmailAddressesNotFound       = -67623,       /* An email address mismatch was encountered. */
 367         errSecSMIMEBadExtendedKeyUsage          = -67624,       /* The appropriate extended key usage for SMIME was not found. */
 368         errSecSMIMEBadKeyUsage                          = -67625,       /* The key usage is not compatible with SMIME. */
 369         errSecSMIMEKeyUsageNotCritical          = -67626,       /* The key usage extension is not marked as critical. */
 370         errSecSMIMENoEmailAddress                       = -67627,       /* No email address was found in the certificate. */
 371         errSecSMIMESubjAltNameNotCritical       = -67628,       /* The subject alternative name extension is not marked as critical. */
 372         errSecSSLBadExtendedKeyUsage            = -67629,       /* The appropriate extended key usage for SSL was not found. */
 373         errSecOCSPBadResponse                           = -67630,       /* The OCSP response was incorrect or could not be parsed. */
 374         errSecOCSPBadRequest                                    = -67631,       /* The OCSP request was incorrect or could not be parsed. */
 375         errSecOCSPUnavailable                           = -67632,       /* OCSP service is unavailable. */
 376         errSecOCSPStatusUnrecognized            = -67633,       /* The OCSP server did not recognize this certificate. */
 377         errSecEndOfData                                                 = -67634,       /* An end-of-data was detected. */
 378         errSecIncompleteCertRevocationCheck     = -67635,       /* An incomplete certificate revocation check occurred. */
 379         errSecNetworkFailure                                            = -67636,       /* A network failure occurred. */
 380         errSecOCSPNotTrustedToAnchor                    = -67637,       /* The OCSP response was not trusted to a root or anchor certificate. */
 381         errSecRecordModified                                            = -67638,       /* The record was modified. */
 382         errSecOCSPSignatureError                                = -67639,       /* The OCSP response had an invalid signature. */
 383         errSecOCSPNoSigner                                              = -67640,       /* The OCSP response had no signer. */
 384         errSecOCSPResponderMalformedReq         = -67641,       /* The OCSP responder was given a malformed request. */
 385         errSecOCSPResponderInternalError                = -67642,       /* The OCSP responder encountered an internal error. */
 386         errSecOCSPResponderTryLater                             = -67643,       /* The OCSP responder is busy, try again later. */
 387         errSecOCSPResponderSignatureRequired    = -67644,       /* The OCSP responder requires a signature. */
 388         errSecOCSPResponderUnauthorized         = -67645,       /* The OCSP responder rejected this request as unauthorized. */
 389         errSecOCSPResponseNonceMismatch         = -67646,       /* The OCSP response nonce did not match the request. */
 390         errSecCodeSigningBadCertChainLength     = -67647,       /* Code signing encountered an incorrect certificate chain length. */
 391         errSecCodeSigningNoBasicConstraints     = -67648,       /* Code signing found no basic constraints. */
 392         errSecCodeSigningBadPathLengthConstraint= -67649,       /* Code signing encountered an incorrect path length constraint. */
 393         errSecCodeSigningNoExtendedKeyUsage             = -67650,       /* Code signing found no extended key usage. */
 394         errSecCodeSigningDevelopment                    = -67651,       /* Code signing indicated use of a development-only certificate. */
 395         errSecResourceSignBadCertChainLength    = -67652,       /* Resource signing has encountered an incorrect certificate chain length. */
 396         errSecResourceSignBadExtKeyUsage                = -67653,       /* Resource signing has encountered an error in the extended key usage. */
 397         errSecTrustSettingDeny                                  = -67654,       /* The trust setting for this policy was set to Deny. */
 398         errSecInvalidSubjectName                                = -67655,       /* An invalid certificate subject name was encountered. */
 399         errSecUnknownQualifiedCertStatement     = -67656,       /* An unknown qualified certificate statement was encountered. */
 400         errSecMobileMeRequestQueued                             = -67657,       /* The MobileMe request will be sent during the next connection. */
 401         errSecMobileMeRequestRedirected         = -67658,       /* The MobileMe request was redirected. */
 402         errSecMobileMeServerError                               = -67659,       /* A MobileMe server error occurred. */
 403         errSecMobileMeServerNotAvailable                = -67660,       /* The MobileMe server is not available. */
 404         errSecMobileMeServerAlreadyExists               = -67661,       /* The MobileMe server reported that the item already exists. */
 405         errSecMobileMeServerServiceErr                  = -67662,       /* A MobileMe service error has occurred. */
 406         errSecMobileMeRequestAlreadyPending     = -67663,       /* A MobileMe request is already pending. */
 407         errSecMobileMeNoRequestPending                  = -67664,       /* MobileMe has no request pending. */
 408         errSecMobileMeCSRVerifyFailure                  = -67665,       /* A MobileMe CSR verification failure has occurred. */
 409         errSecMobileMeFailedConsistencyCheck    = -67666,       /* MobileMe has found a failed consistency check. */
 410         errSecNotInitialized                                            = -67667,       /* A function was called without initializing CSSM. */
 411         errSecInvalidHandleUsage                                = -67668,       /* The CSSM handle does not match with the service type. */
 412         errSecPVCReferentNotFound                               = -67669,       /* A reference to the calling module was not found in the list of authorized callers. */
 413         errSecFunctionIntegrityFail                             = -67670,       /* A function address was not within the verified module. */
 414         errSecInternalError                                             = -67671,       /* An internal error has occurred. */
 415         errSecMemoryError                                                       = -67672,       /* A memory error has occurred. */
 416         errSecInvalidData                                                       = -67673,       /* Invalid data was encountered. */
 417         errSecMDSError                                                  = -67674,       /* A Module Directory Service error has occurred. */
 418         errSecInvalidPointer                                            = -67675,       /* An invalid pointer was encountered. */
 419         errSecSelfCheckFailed                                   = -67676,       /* Self-check has failed. */
 420         errSecFunctionFailed                                            = -67677,       /* A function has failed. */
 421         errSecModuleManifestVerifyFailed                = -67678,       /* A module manifest verification failure has occurred. */
 422         errSecInvalidGUID                                                       = -67679,       /* An invalid GUID was encountered. */
 423         errSecInvalidHandle                                             = -67680,       /* An invalid handle was encountered. */
 424         errSecInvalidDBList                                             = -67681,       /* An invalid DB list was encountered. */
 425         errSecInvalidPassthroughID                              = -67682,       /* An invalid passthrough ID was encountered. */
 426         errSecInvalidNetworkAddress                             = -67683,       /* An invalid network address was encountered. */
 427         errSecCRLAlreadySigned                                  = -67684,       /* The certificate revocation list is already signed. */
 428         errSecInvalidNumberOfFields                             = -67685,       /* An invalid number of fields were encountered. */
 429         errSecVerificationFailure                               = -67686,       /* A verification failure occurred. */
 430         errSecUnknownTag                                                        = -67687,       /* An unknown tag was encountered. */
 431         errSecInvalidSignature                                  = -67688,       /* An invalid signature was encountered. */
 432         errSecInvalidName                                                       = -67689,       /* An invalid name was encountered. */
 433         errSecInvalidCertificateRef                             = -67690,       /* An invalid certificate reference was encountered. */
 434         errSecInvalidCertificateGroup                   = -67691,       /* An invalid certificate group was encountered. */
 435         errSecTagNotFound                                                       = -67692,       /* The specified tag was not found. */
 436         errSecInvalidQuery                                              = -67693,       /* The specified query was not valid. */
 437         errSecInvalidValue                                              = -67694,       /* An invalid value was detected. */
 438         errSecCallbackFailed                                            = -67695,       /* A callback has failed. */
 439         errSecACLDeleteFailed                                   = -67696,       /* An ACL delete operation has failed. */
 440         errSecACLReplaceFailed                                  = -67697,       /* An ACL replace operation has failed. */
 441         errSecACLAddFailed                                              = -67698,       /* An ACL add operation has failed. */
 442         errSecACLChangeFailed                                   = -67699,       /* An ACL change operation has failed. */
 443         errSecInvalidAccessCredentials                  = -67700,       /* Invalid access credentials were encountered. */
 444         errSecInvalidRecord                                             = -67701,       /* An invalid record was encountered. */
 445         errSecInvalidACL                                                        = -67702,       /* An invalid ACL was encountered. */
 446         errSecInvalidSampleValue                                = -67703,       /* An invalid sample value was encountered. */
 447         errSecIncompatibleVersion                               = -67704,       /* An incompatible version was encountered. */
 448         errSecPrivilegeNotGranted                               = -67705,       /* The privilege was not granted. */
 449         errSecInvalidScope                                              = -67706,       /* An invalid scope was encountered. */
 450         errSecPVCAlreadyConfigured                              = -67707,       /* The PVC is already configured. */
 451         errSecInvalidPVC                                                        = -67708,       /* An invalid PVC was encountered. */
 452         errSecEMMLoadFailed                                             = -67709,       /* The EMM load has failed. */
 453         errSecEMMUnloadFailed                                   = -67710,       /* The EMM unload has failed. */
 454         errSecAddinLoadFailed                                   = -67711,       /* The add-in load operation has failed. */
 455         errSecInvalidKeyRef                                             = -67712,       /* An invalid key was encountered. */
 456         errSecInvalidKeyHierarchy                               = -67713,       /* An invalid key hierarchy was encountered. */
 457         errSecAddinUnloadFailed                                 = -67714,       /* The add-in unload operation has failed. */
 458         errSecLibraryReferenceNotFound                  = -67715,       /* A library reference was not found. */
 459         errSecInvalidAddinFunctionTable         = -67716,       /* An invalid add-in function table was encountered. */
 460         errSecInvalidServiceMask                                = -67717,       /* An invalid service mask was encountered. */
 461         errSecModuleNotLoaded                                   = -67718,       /* A module was not loaded. */
 462         errSecInvalidSubServiceID                               = -67719,       /* An invalid subservice ID was encountered. */
 463         errSecAttributeNotInContext                             = -67720,       /* An attribute was not in the context. */
 464         errSecModuleManagerInitializeFailed     = -67721,       /* A module failed to initialize. */
 465         errSecModuleManagerNotFound                             = -67722,       /* A module was not found. */
 466         errSecEventNotificationCallbackNotFound = -67723,       /* An event notification callback was not found. */
 467         errSecInputLengthError                                  = -67724,       /* An input length error was encountered. */
 468         errSecOutputLengthError                                 = -67725,       /* An output length error was encountered. */
 469         errSecPrivilegeNotSupported                             = -67726,       /* The privilege is not supported. */
 470         errSecDeviceError                                                       = -67727,       /* A device error was encountered. */
 471         errSecAttachHandleBusy                                  = -67728,       /* The CSP handle was busy. */
 472         errSecNotLoggedIn                                                       = -67729,       /* You are not logged in. */
 473         errSecAlgorithmMismatch                                 = -67730,       /* An algorithm mismatch was encountered. */
 474         errSecKeyUsageIncorrect                                 = -67731,       /* The key usage is incorrect. */
 475         errSecKeyBlobTypeIncorrect                              = -67732,       /* The key blob type is incorrect. */
 476         errSecKeyHeaderInconsistent                             = -67733,       /* The key header is inconsistent. */
 477         errSecUnsupportedKeyFormat                              = -67734,       /* The key header format is not supported. */
 478         errSecUnsupportedKeySize                                = -67735,       /* The key size is not supported. */
 479         errSecInvalidKeyUsageMask                               = -67736,       /* The key usage mask is not valid. */
 480         errSecUnsupportedKeyUsageMask                   = -67737,       /* The key usage mask is not supported. */
 481         errSecInvalidKeyAttributeMask                   = -67738,       /* The key attribute mask is not valid. */
 482         errSecUnsupportedKeyAttributeMask               = -67739,       /* The key attribute mask is not supported. */
 483         errSecInvalidKeyLabel                                   = -67740,       /* The key label is not valid. */
 484         errSecUnsupportedKeyLabel                               = -67741,       /* The key label is not supported. */
 485         errSecInvalidKeyFormat                                  = -67742,       /* The key format is not valid. */
 486         errSecUnsupportedVectorOfBuffers                = -67743,       /* The vector of buffers is not supported. */
 487         errSecInvalidInputVector                                = -67744,       /* The input vector is not valid. */
 488         errSecInvalidOutputVector                               = -67745,       /* The output vector is not valid. */
 489         errSecInvalidContext                                            = -67746,       /* An invalid context was encountered. */
 490         errSecInvalidAlgorithm                                  = -67747,       /* An invalid algorithm was encountered. */
 491         errSecInvalidAttributeKey                               = -67748,       /* A key attribute was not valid. */
 492         errSecMissingAttributeKey                               = -67749,       /* A key attribute was missing. */
 493         errSecInvalidAttributeInitVector                = -67750,       /* An init vector attribute was not valid. */
 494         errSecMissingAttributeInitVector                = -67751,       /* An init vector attribute was missing. */
 495         errSecInvalidAttributeSalt                              = -67752,       /* A salt attribute was not valid. */
 496         errSecMissingAttributeSalt                              = -67753,       /* A salt attribute was missing. */
 497         errSecInvalidAttributePadding                   = -67754,       /* A padding attribute was not valid. */
 498         errSecMissingAttributePadding                   = -67755,       /* A padding attribute was missing. */
 499         errSecInvalidAttributeRandom                    = -67756,       /* A random number attribute was not valid. */
 500         errSecMissingAttributeRandom                    = -67757,       /* A random number attribute was missing. */
 501         errSecInvalidAttributeSeed                              = -67758,       /* A seed attribute was not valid. */
 502         errSecMissingAttributeSeed                              = -67759,       /* A seed attribute was missing. */
 503         errSecInvalidAttributePassphrase                = -67760,       /* A passphrase attribute was not valid. */
 504         errSecMissingAttributePassphrase                = -67761,       /* A passphrase attribute was missing. */
 505         errSecInvalidAttributeKeyLength         = -67762,       /* A key length attribute was not valid. */
 506         errSecMissingAttributeKeyLength         = -67763,       /* A key length attribute was missing. */
 507         errSecInvalidAttributeBlockSize         = -67764,       /* A block size attribute was not valid. */
 508         errSecMissingAttributeBlockSize         = -67765,       /* A block size attribute was missing. */
 509         errSecInvalidAttributeOutputSize                = -67766,       /* An output size attribute was not valid. */
 510         errSecMissingAttributeOutputSize                = -67767,       /* An output size attribute was missing. */
 511         errSecInvalidAttributeRounds                    = -67768,       /* The number of rounds attribute was not valid. */
 512         errSecMissingAttributeRounds                    = -67769,       /* The number of rounds attribute was missing. */
 513         errSecInvalidAlgorithmParms                             = -67770,       /* An algorithm parameters attribute was not valid. */
 514         errSecMissingAlgorithmParms                             = -67771,       /* An algorithm parameters attribute was missing. */
 515         errSecInvalidAttributeLabel                             = -67772,       /* A label attribute was not valid. */
 516         errSecMissingAttributeLabel                             = -67773,       /* A label attribute was missing. */
 517         errSecInvalidAttributeKeyType                   = -67774,       /* A key type attribute was not valid. */
 518         errSecMissingAttributeKeyType                   = -67775,       /* A key type attribute was missing. */
 519         errSecInvalidAttributeMode                              = -67776,       /* A mode attribute was not valid. */
 520         errSecMissingAttributeMode                              = -67777,       /* A mode attribute was missing. */
 521         errSecInvalidAttributeEffectiveBits     = -67778,       /* An effective bits attribute was not valid. */
 522         errSecMissingAttributeEffectiveBits     = -67779,       /* An effective bits attribute was missing. */
 523         errSecInvalidAttributeStartDate         = -67780,       /* A start date attribute was not valid. */
 524         errSecMissingAttributeStartDate         = -67781,       /* A start date attribute was missing. */
 525         errSecInvalidAttributeEndDate                   = -67782,       /* An end date attribute was not valid. */
 526         errSecMissingAttributeEndDate                   = -67783,       /* An end date attribute was missing. */
 527         errSecInvalidAttributeVersion                   = -67784,       /* A version attribute was not valid. */
 528         errSecMissingAttributeVersion                   = -67785,       /* A version attribute was missing. */
 529         errSecInvalidAttributePrime                             = -67786,       /* A prime attribute was not valid. */
 530         errSecMissingAttributePrime                             = -67787,       /* A prime attribute was missing. */
 531         errSecInvalidAttributeBase                              = -67788,       /* A base attribute was not valid. */
 532         errSecMissingAttributeBase                              = -67789,       /* A base attribute was missing. */
 533         errSecInvalidAttributeSubprime                  = -67790,       /* A subprime attribute was not valid. */
 534         errSecMissingAttributeSubprime                  = -67791,       /* A subprime attribute was missing. */
 535         errSecInvalidAttributeIterationCount    = -67792,       /* An iteration count attribute was not valid. */
 536         errSecMissingAttributeIterationCount    = -67793,       /* An iteration count attribute was missing. */
 537         errSecInvalidAttributeDLDBHandle                = -67794,       /* A database handle attribute was not valid. */
 538         errSecMissingAttributeDLDBHandle                = -67795,       /* A database handle attribute was missing. */
 539         errSecInvalidAttributeAccessCredentials = -67796,       /* An access credentials attribute was not valid. */
 540         errSecMissingAttributeAccessCredentials = -67797,       /* An access credentials attribute was missing. */
 541         errSecInvalidAttributePublicKeyFormat           = -67798,       /* A public key format attribute was not valid. */
 542         errSecMissingAttributePublicKeyFormat           = -67799,       /* A public key format attribute was missing. */
 543         errSecInvalidAttributePrivateKeyFormat  = -67800,       /* A private key format attribute was not valid. */
 544         errSecMissingAttributePrivateKeyFormat  = -67801,       /* A private key format attribute was missing. */
 545         errSecInvalidAttributeSymmetricKeyFormat        = -67802,       /* A symmetric key format attribute was not valid. */
 546         errSecMissingAttributeSymmetricKeyFormat        = -67803,       /* A symmetric key format attribute was missing. */
 547         errSecInvalidAttributeWrappedKeyFormat  = -67804,       /* A wrapped key format attribute was not valid. */
 548         errSecMissingAttributeWrappedKeyFormat  = -67805,       /* A wrapped key format attribute was missing. */
 549         errSecStagedOperationInProgress                 = -67806,       /* A staged operation is in progress. */
 550         errSecStagedOperationNotStarted                 = -67807,       /* A staged operation was not started. */
 551         errSecVerifyFailed                                                      = -67808,       /* A cryptographic verification failure has occurred. */
 552         errSecQuerySizeUnknown                                          = -67809,       /* The query size is unknown. */
 553         errSecBlockSizeMismatch                                         = -67810,       /* A block size mismatch occurred. */
 554         errSecPublicKeyInconsistent                                     = -67811,       /* The public key was inconsistent. */
 555         errSecDeviceVerifyFailed                                        = -67812,       /* A device verification failure has occurred. */
 556         errSecInvalidLoginName                                          = -67813,       /* An invalid login name was detected. */
 557         errSecAlreadyLoggedIn                                           = -67814,       /* The user is already logged in. */
 558         errSecInvalidDigestAlgorithm                            = -67815,       /* An invalid digest algorithm was detected. */
 559         errSecInvalidCRLGroup                                           = -67816,       /* An invalid CRL group was detected. */
 560         errSecCertificateCannotOperate                          = -67817,       /* The certificate cannot operate. */
 561         errSecCertificateExpired                                        = -67818,       /* An expired certificate was detected. */
 562         errSecCertificateNotValidYet                            = -67819,       /* The certificate is not yet valid. */
 563         errSecCertificateRevoked                                        = -67820,       /* The certificate was revoked. */
 564         errSecCertificateSuspended                                      = -67821,       /* The certificate was suspended. */
 565         errSecInsufficientCredentials                           = -67822,       /* Insufficient credentials were detected. */
 566         errSecInvalidAction                                                     = -67823,       /* The action was not valid. */
 567         errSecInvalidAuthority                                          = -67824,       /* The authority was not valid. */
 568         errSecVerifyActionFailed                                        = -67825,       /* A verify action has failed. */
 569         errSecInvalidCertAuthority                                      = -67826,       /* The certificate authority was not valid. */
 570         errSecInvaldCRLAuthority                                        = -67827,       /* The CRL authority was not valid. */
 571         errSecInvalidCRLEncoding                                        = -67828,       /* The CRL encoding was not valid. */
 572         errSecInvalidCRLType                                                    = -67829,       /* The CRL type was not valid. */
 573         errSecInvalidCRL                                                                = -67830,       /* The CRL was not valid. */
 574         errSecInvalidFormType                                           = -67831,       /* The form type was not valid. */
 575         errSecInvalidID                                                         = -67832,       /* The ID was not valid. */
 576         errSecInvalidIdentifier                                         = -67833,       /* The identifier was not valid. */
 577         errSecInvalidIndex                                                      = -67834,       /* The index was not valid. */
 578         errSecInvalidPolicyIdentifiers                          = -67835,       /* The policy identifiers are not valid. */
 579         errSecInvalidTimeString                                         = -67836,       /* The time specified was not valid. */
 580         errSecInvalidReason                                                     = -67837,       /* The trust policy reason was not valid. */
 581         errSecInvalidRequestInputs                                      = -67838,       /* The request inputs are not valid. */
 582         errSecInvalidResponseVector                                     = -67839,       /* The response vector was not valid. */
 583         errSecInvalidStopOnPolicy                                       = -67840,       /* The stop-on policy was not valid. */
 584         errSecInvalidTuple                                                      = -67841,       /* The tuple was not valid. */
 585         errSecMultipleValuesUnsupported                 = -67842,       /* Multiple values are not supported. */
 586         errSecNotTrusted                                                                = -67843,       /* The trust policy was not trusted. */
 587         errSecNoDefaultAuthority                                        = -67844,       /* No default authority was detected. */
 588         errSecRejectedForm                                                      = -67845,       /* The trust policy had a rejected form. */
 589         errSecRequestLost                                                               = -67846,       /* The request was lost. */
 590         errSecRequestRejected                                           = -67847,       /* The request was rejected. */
 591         errSecUnsupportedAddressType                            = -67848,       /* The address type is not supported. */
 592         errSecUnsupportedService                                        = -67849,       /* The service is not supported. */
 593         errSecInvalidTupleGroup                                         = -67850,       /* The tuple group was not valid. */
 594         errSecInvalidBaseACLs                                           = -67851,       /* The base ACLs are not valid. */
 595         errSecInvalidTupleCredendtials                          = -67852,       /* The tuple credentials are not valid. */
 596         errSecInvalidEncoding                                           = -67853,       /* The encoding was not valid. */
 597         errSecInvalidValidityPeriod                                     = -67854,       /* The validity period was not valid. */
 598         errSecInvalidRequestor                                          = -67855,       /* The requestor was not valid. */
 599         errSecRequestDescriptor                                         = -67856,       /* The request descriptor was not valid. */
 600         errSecInvalidBundleInfo                                         = -67857,       /* The bundle information was not valid. */
 601         errSecInvalidCRLIndex                                           = -67858,       /* The CRL index was not valid. */
 602         errSecNoFieldValues                                                     = -67859,       /* No field values were detected. */
 603         errSecUnsupportedFieldFormat                            = -67860,       /* The field format is not supported. */
 604         errSecUnsupportedIndexInfo                                      = -67861,       /* The index information is not supported. */
 605         errSecUnsupportedLocality                                       = -67862,       /* The locality is not supported. */
 606         errSecUnsupportedNumAttributes                          = -67863,       /* The number of attributes is not supported. */
 607         errSecUnsupportedNumIndexes                                     = -67864,       /* The number of indexes is not supported. */
 608         errSecUnsupportedNumRecordTypes                 = -67865,       /* The number of record types is not supported. */
 609         errSecFieldSpecifiedMultiple                            = -67866,       /* Too many fields were specified. */
 610         errSecIncompatibleFieldFormat                           = -67867,       /* The field format was incompatible. */
 611         errSecInvalidParsingModule                                      = -67868,       /* The parsing module was not valid. */
 612         errSecDatabaseLocked                                                    = -67869,       /* The database is locked. */
 613         errSecDatastoreIsOpen                                           = -67870,       /* The data store is open. */
 614         errSecMissingValue                                                      = -67871,       /* A missing value was detected. */
 615         errSecUnsupportedQueryLimits                            = -67872,       /* The query limits are not supported. */
 616         errSecUnsupportedNumSelectionPreds                      = -67873,       /* The number of selection predicates is not supported. */
 617         errSecUnsupportedOperator                                       = -67874,       /* The operator is not supported. */
 618         errSecInvalidDBLocation                                         = -67875,       /* The database location is not valid. */
 619         errSecInvalidAccessRequest                                      = -67876,       /* The access request is not valid. */
 620         errSecInvalidIndexInfo                                          = -67877,       /* The index information is not valid. */
 621         errSecInvalidNewOwner                                           = -67878,       /* The new owner is not valid. */
 622         errSecInvalidModifyMode                                         = -67879,       /* The modify mode is not valid. */
 623         errSecMissingRequiredExtension                                  = -67880,       /* A required certificate extension is missing. */
 624         errSecExtendedKeyUsageNotCritical                               = -67881,       /* The extended key usage extension was not marked critical. */
 625         errSecTimestampMissing                                          = -67882,       /* A timestamp was expected but was not found. */
 626         errSecTimestampInvalid                                          = -67883,       /* The timestamp was not valid. */
 627         errSecTimestampNotTrusted                                       = -67884,       /* The timestamp was not trusted. */
 628         errSecTimestampServiceNotAvailable                      = -67885,       /* The timestamp service is not available. */
 629         errSecTimestampBadAlg                                           = -67886,       /* An unrecognized or unsupported Algorithm Identifier in timestamp. */
 630         errSecTimestampBadRequest                                       = -67887,       /* The timestamp transaction is not permitted or supported. */
 631         errSecTimestampBadDataFormat                            = -67888,       /* The timestamp data submitted has the wrong format. */
 632         errSecTimestampTimeNotAvailable                 = -67889,       /* The time source for the Timestamp Authority is not available. */
 633         errSecTimestampUnacceptedPolicy                 = -67890,       /* The requested policy is not supported by the Timestamp Authority. */
 634         errSecTimestampUnacceptedExtension                      = -67891,       /* The requested extension is not supported by the Timestamp Authority. */
 635         errSecTimestampAddInfoNotAvailable                      = -67892,       /* The additional information requested is not available. */
 636         errSecTimestampSystemFailure                            = -67893,       /* The timestamp request cannot be handled due to system failure. */
 637         errSecSigningTimeMissing                                        = -67894,       /* A signing time was expected but was not found. */
 638         errSecTimestampRejection                                        = -67895,       /* A timestamp transaction was rejected. */
 639         errSecTimestampWaiting                      = -67896,   /* A timestamp transaction is waiting. */
 640         errSecTimestampRevocationWarning            = -67897,   /* A timestamp authority revocation warning was issued. */
 641         errSecTimestampRevocationNotification       = -67898,   /* A timestamp authority revocation notification was issued. */
 642 };
 643
 644 #if defined(__cplusplus)
 645 }
 646 #endif
 647
 648 #endif /* !_SECURITY_SECBASE_H_ */