Security-59754.80.3.tar.gz

[apple/security.git] / trust / trustd / OTATrustUtilities.h

diff --git a/trust/trustd/OTATrustUtilities.h b/trust/trustd/OTATrustUtilities.h
index 4b770f9d9d758800f82eaa3d3105366dd32a8f89..5d3d1bb719ae19ebde5fae4b1c4af2d408924a0e 100644 (file)
--- a/trust/trustd/OTATrustUtilities.h
+++ b/trust/trustd/OTATrustUtilities.h
@@ -154,16 +154,21 @@ NSNumber *SecOTAPKIGetSamplingRateForEvent(SecOTAPKIRef otapkiRef, NSString *eve
 CFArrayRef SecOTAPKICopyAppleCertificateAuthorities(SecOTAPKIRef otapkiRef);
 
 extern const CFStringRef kOTAPKIKillSwitchCT;
+extern const CFStringRef kOTAPKIKillSwitchNonTLSCT;
 bool SecOTAPKIKillSwitchEnabled(SecOTAPKIRef otapkiRef, CFStringRef switchKey);
 
 // SPI to return the array of currently trusted Escrow certificates
 CF_EXPORT
 CFArrayRef SecOTAPKICopyCurrentEscrowCertificates(uint32_t escrowRootType, CFErrorRef* error);
 
-// SPI to return the array of currently trusted CT logs
+// SPI to return the array of currently (TLS) trusted CT logs
 CF_EXPORT
 CFDictionaryRef SecOTAPKICopyCurrentTrustedCTLogs(CFErrorRef* error);
 
+// SPI to return the array of currently non-TLS trusted CT logs
+CF_EXPORT
+CFDictionaryRef SecOTAPKICopyNonTlsTrustedCTLogs(SecOTAPKIRef otapkiRef);
+
 // SPI to return dictionary of CT log matching specified key id */
 CF_EXPORT
 CFDictionaryRef SecOTAPKICopyCTLogForKeyID(CFDataRef keyID, CFErrorRef* error);