Security-58286.1.32.tar.gz

[apple/security.git] / trust / SecTrust.h

diff --git a/trust/SecTrust.h b/trust/SecTrust.h
index 2bdb7b9771c6a6881a721740914c62feba4fa357..3783409e8c628acdbd851b0793709b0b83ddecae 100644 (file)
--- a/trust/SecTrust.h
+++ b/trust/SecTrust.h
@@ -168,7 +168,7 @@ extern const CFStringRef kSecTrustRevocationValidUntilDate
 extern const CFStringRef kSecTrustCertificateTransparency
     __OSX_AVAILABLE_STARTING(__MAC_10_11, __IPHONE_9_0);
 extern const CFStringRef kSecTrustCertificateTransparencyWhiteList
 extern const CFStringRef kSecTrustCertificateTransparency
     __OSX_AVAILABLE_STARTING(__MAC_10_11, __IPHONE_9_0);
 extern const CFStringRef kSecTrustCertificateTransparencyWhiteList

-    __OSX_AVAILABLE_STARTING(__MAC_10_12, __IPHONE_10_0);
+    __OSX_AVAILABLE_BUT_DEPRECATED(__MAC_10_12, __MAC_10_13, __IPHONE_10_0, __IPHONE_11_0);

 
 #ifdef __BLOCKS__
 /*!
 
 #ifdef __BLOCKS__
 /*!


@@ -603,13 +603,16 @@ OSStatus SecTrustSetParameters(SecTrustRef trustRef,
     @param keychainOrArray A reference to an array of keychains to search, a
     single keychain, or NULL to use the default keychain search list.
     @result A result code. See "Security Error Codes" (SecBase.h).
     @param keychainOrArray A reference to an array of keychains to search, a
     single keychain, or NULL to use the default keychain search list.
     @result A result code. See "Security Error Codes" (SecBase.h).

-    @discussion By default, the user's keychain search list and the system
-    anchors keychain are searched for certificates to complete the chain. You
-    can specify a zero-element array if you do not want any keychains searched.
-    Note: this function is not applicable to iOS.
+    @discussion This function is deprecated in macOS 10.13 and later. Beginning in
+    macOS 10.12, this function no longer affected the behavior of the trust
+    evaluation: the user's keychain search list and the system
+    anchors keychain are searched for certificates to complete the chain. To change
+    the keychains that are searched, callers must use SecKeychainSetSearchList to
+    change the user's keychain search list.
+    Note: this function was never applicable to iOS.

  */
 OSStatus SecTrustSetKeychains(SecTrustRef trust, CFTypeRef __nullable keychainOrArray)
  */
 OSStatus SecTrustSetKeychains(SecTrustRef trust, CFTypeRef __nullable keychainOrArray)

-    __OSX_AVAILABLE_STARTING(__MAC_10_3, __IPHONE_NA);
+    __OSX_AVAILABLE_BUT_DEPRECATED(__MAC_10_3, __MAC_10_13, __IPHONE_NA, __IPHONE_NA);

 
 /*!
     @function SecTrustGetResult
 
 /*!
     @function SecTrustGetResult