Security-163.tar.gz

[apple/security.git] / AppleX509TP / tpPolicies.h

diff --git a/AppleX509TP/tpPolicies.h b/AppleX509TP/tpPolicies.h
index ee66c51cdce1657719dbbc1f0a5e441c50b05519..4af91492ac6cf62c30056e8e20b1f1916d0840d3 100644 (file)
--- a/AppleX509TP/tpPolicies.h
+++ b/AppleX509TP/tpPolicies.h
@@ -27,25 +27,29 @@
 
 #include <Security/cssmtype.h>
 #include <Security/cssmalloc.h>
+#include <Security/cssmapple.h>
 #include "TPCertInfo.h"
 
 #ifdef __cplusplus
 extern "C" {
 #endif /* __cplusplus */
 
-CSSM_BOOL tp_verifyWithSslRoots(
-       CSSM_CL_HANDLE  clHand, 
-       CSSM_CSP_HANDLE cspHand, 
-       TPCertInfo              *certToVfy);            // last in chain, not root
+/* 
+ * Private CSSM_APPLE_TP_ACTION_FLAGS value to enable implicit 
+ * root certs.
+ */
+#define        CSSM_TP_USE_INTERNAL_ROOT_CERTS         0x80000000
 
 /*
- * Enumerated policies enforced by this module.
+ * Enumerated certificate policies enforced by this module.
  */
 typedef enum {
        kTPDefault,                     /* no extension parsing, just sig and expiration */
        kTPx509Basic,           /* basic X.509/RFC2459 */
        kTPiSign,                       /* Apple code signing */
-       kTP_SSL                         /* SecureTransport/SSL */
+       kTP_SSL,                        /* SecureTransport/SSL */
+       kCrlPolicy,                     /* cert chain verification via CRL */
+       kTP_SMIME                               /* S/MIME */                    
 } TPPolicy;
 
 /*
@@ -53,12 +57,15 @@ typedef enum {
  * Returns CSSM_TRUE on success.
  */
 CSSM_RETURN tp_policyVerify(
-       TPPolicy                                        policy,
-       CssmAllocator                           &alloc,
-       CSSM_CL_HANDLE                          clHand,
-       CSSM_CSP_HANDLE                         cspHand,
-       TPCertGroup                             *certGroup,
-       CSSM_BOOL                                       verifiedToRoot);        // last cert is good root
+       TPPolicy                                                policy,
+       CssmAllocator                                   &alloc,
+       CSSM_CL_HANDLE                                  clHand,
+       CSSM_CSP_HANDLE                                 cspHand,
+       TPCertGroup                                     *certGroup,
+       CSSM_BOOL                                               verifiedToRoot,         // last cert is good root
+       CSSM_APPLE_TP_ACTION_FLAGS              actionFlags,
+       const CSSM_DATA                                 *policyFieldData,       // optional
+    void                                                       *policyControl);        // future use
 
 #ifdef __cplusplus
 }