SSLContextRef context,
SSLAuthenticate *auth); // RETURNED
+#if !TARGET_OS_IPHONE
/*
* Get/set array of trusted leaf certificates.
*
SSLCopyTrustedLeafCertificates (
SSLContextRef context,
CFArrayRef *certRefs); // RETURNED, caller must release
-
+#endif
/*
* Get/set enable of anonymous ciphers. This is deprecated and now a no-op.
*/
unsigned *numTypes); /* IN/OUT */
/*
- * Obtain the SSLClientAuthenticationType actually performed.
- * Only valid if client certificate state is kSSLClientCertSent
- * or kSSLClientCertRejected; SSLClientAuthNone is returned as
- * the negotiated auth type otherwise.
+ * -- DEPRECATED --
+ * This is not actually useful. Currently return errSecUnimplemented.
+ * The client auth type is fully determined by the type of private key used by
+ * the client.
*/
extern OSStatus SSLGetNegotiatedClientAuthType(
SSLContextRef ctx,
#endif /* TARGET_OS_IPHONE */
+/*
+ * Map the SSLProtocol enum to an enum capturing the wire format (coreTLS) version.
+ */
+#define SECURITY_HAS_TLS_VERSION_TRANSLATOR 1
+tls_protocol_version
+_SSLProtocolVersionToWireFormatValue (SSLProtocol protocol);
+
/*
* Create a new Datagram TLS session context.
// end of ALPN
-OSStatus
-SSLCopyRequestedPeerName (SSLContextRef context,
- char *peerName,
- size_t *peerNameLen);
-
-OSStatus
-SSLCopyRequestedPeerNameLength (SSLContextRef ctx,
- size_t *peerNameLen);
-
-
#ifdef __cplusplus
}
#endif