Security-58286.60.28.tar.gz

[apple/security.git] / OSX / sec / securityd / SecTrustServer.c

diff --git a/OSX/sec/securityd/SecTrustServer.c b/OSX/sec/securityd/SecTrustServer.c
index 481a1246ae2f0ea7c179cc2929fca1727346a79e..3f376e165a337546e66cf1d6e4631d0fddd11190 100644 (file)
--- a/OSX/sec/securityd/SecTrustServer.c
+++ b/OSX/sec/securityd/SecTrustServer.c
@@ -133,6 +133,7 @@ struct SecPathBuilder {
     SecCertificatePathVCRef path;
     unsigned int            asyncJobCount;
     bool                    online_revocation;
+    bool                    trusted_revocation;
     CFStringRef             revocation_check_method;
 
     SecCertificatePathVCRef bestPath;
@@ -529,6 +530,15 @@ void SecPathBuilderSetCheckRevocationOnline(SecPathBuilderRef builder) {
     secdebug("rvc", "revocation force online check");
 }
 
+bool SecPathBuilderGetCheckRevocationIfTrusted(SecPathBuilderRef builder) {
+    return builder->trusted_revocation;
+}
+
+void SecPathBuilderSetCheckRevocationIfTrusted(SecPathBuilderRef builder) {
+    builder->trusted_revocation = true;
+    secdebug("rvc", "revocation check only if trusted");
+}
+
 CFArrayRef SecPathBuilderGetExceptions(SecPathBuilderRef builder) {
     return builder->exceptions;
 }
@@ -1316,7 +1326,7 @@ SecTrustServerEvaluateCompleted(const void *userData,
                                 CFArrayRef chain, CFArrayRef details, CFDictionaryRef info,
                                 SecTrustResultType result) {
     SecTrustServerEvaluationCompleted evaluated = (SecTrustServerEvaluationCompleted)userData;
-    TrustdHealthAnalyticsLogSuccess(TAEventEvaluationCompleted);
+    TrustdHealthAnalyticsLogEvaluationCompleted();
     evaluated(result, details, info, chain, NULL);
     Block_release(evaluated);
 }