Contents

SecTrustGetNetworkFetchAllowed(_:_:)

Indicates whether a trust evaluation is permitted to fetch missing intermediate certificates from the network.

Declaration

func SecTrustGetNetworkFetchAllowed(_ trust: SecTrust, _ allowFetch: UnsafeMutablePointer<DarwinBoolean>) -> OSStatus

Parameters

  • trust:

    The trust evaluation object to query.

  • allowFetch:

    A pointer to a Boolean that the function sets to true to indicate that the trust evaluation process is permitted to download missing certificates from the network, or false otherwise.

Return Value

A result code. See Security Framework Result Codes.

Discussion

By default, network fetch of missing certificates is enabled if the trust evaluation includes the SSL policy. Otherwise it is disabled.