X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/914fc88e61be54aed6b18205ff2775b48793a3b6..866f8763175ff60e4fa455b92b5eb660a12fe6c7:/trust/SecTrust.h?ds=sidebyside

diff --git a/trust/SecTrust.h b/trust/SecTrust.h
index 2bdb7b97..3783409e 100644
--- a/trust/SecTrust.h
+++ b/trust/SecTrust.h
@@ -168,7 +168,7 @@ extern const CFStringRef kSecTrustRevocationValidUntilDate
 extern const CFStringRef kSecTrustCertificateTransparency
     __OSX_AVAILABLE_STARTING(__MAC_10_11, __IPHONE_9_0);
 extern const CFStringRef kSecTrustCertificateTransparencyWhiteList
-    __OSX_AVAILABLE_STARTING(__MAC_10_12, __IPHONE_10_0);
+    __OSX_AVAILABLE_BUT_DEPRECATED(__MAC_10_12, __MAC_10_13, __IPHONE_10_0, __IPHONE_11_0);
 
 #ifdef __BLOCKS__
 /*!
@@ -603,13 +603,16 @@ OSStatus SecTrustSetParameters(SecTrustRef trustRef,
     @param keychainOrArray A reference to an array of keychains to search, a
     single keychain, or NULL to use the default keychain search list.
     @result A result code. See "Security Error Codes" (SecBase.h).
-    @discussion By default, the user's keychain search list and the system
-    anchors keychain are searched for certificates to complete the chain. You
-    can specify a zero-element array if you do not want any keychains searched.
-    Note: this function is not applicable to iOS.
+    @discussion This function is deprecated in macOS 10.13 and later. Beginning in
+    macOS 10.12, this function no longer affected the behavior of the trust
+    evaluation: the user's keychain search list and the system
+    anchors keychain are searched for certificates to complete the chain. To change
+    the keychains that are searched, callers must use SecKeychainSetSearchList to
+    change the user's keychain search list.
+    Note: this function was never applicable to iOS.
  */
 OSStatus SecTrustSetKeychains(SecTrustRef trust, CFTypeRef __nullable keychainOrArray)
-    __OSX_AVAILABLE_STARTING(__MAC_10_3, __IPHONE_NA);
+    __OSX_AVAILABLE_BUT_DEPRECATED(__MAC_10_3, __MAC_10_13, __IPHONE_NA, __IPHONE_NA);
 
 /*!
     @function SecTrustGetResult