Identities

Overview

An identity consists of a private key packaged with the certificate that contains and vouches for the corresponding public key. You use the certificate, key, and trust services API to create an identity from a private key and its certificate, or to import an identity from a password-protected PKCS #12 file. You then use the API to extract the key and certificate from the identity. You can also use the keychain services API to store the identity to or retrieve it from a keychain, much as you would the certificate or key by itself.

Topics

Essentials

• Creating an Identity
• Storing an Identity in the Keychain
• SecIdentityCreateWithCertificate(_:_:_:)
• SecIdentity
• SecIdentityGetTypeID()

Identity Import

• Importing an Identity
• SecPKCS12Import(_:_:_:)
• Keychain Import and Export Options
• PKCS #12 Import Item Keys

Identity Components

• Parsing an Identity
• SecIdentityCopyCertificate(_:_:)
• SecIdentityCopyPrivateKey(_:_:)

System Identities

• SecIdentityCopySystemIdentity(_:_:_:)
• SecIdentitySetSystemIdentity(_:_:)
• System Identity Domains

Identity Naming

• SecIdentitySetPreferred(_:_:_:)
• SecIdentityCopyPreferred(_:_:_:)

Identity Search

• SecIdentitySearch

Creating an Identity for Local Network TLS

• Creating an Identity for Local Network TLS