SecTrustGetResult

Declaration

OSStatus SecTrustGetResult(SecTrustRef trustRef, SecTrustResultType *result, CFArrayRef*certChain, CSSM_TP_APPLE_EVIDENCE_INFO **statusChain);

Parameters

• trustRef:

  A trust management object that has previously been sent to the Sectrustevaluate(_:_:) function for evaluation.

• result:

  A pointer to the result type returned in the result parameter by the SecTrustEvaluate function.

• certChain:

  On return, points to an array of certificates that constitute the certificate chain used to verify the input certificate. In Objective-C, call the Cfrelease function to release this object when you are finished with it.

• statusChain:

  On return, points to an array of CSSM_TP_APPLE_EVIDENCE_INFO structures, one for each certificate in the certificate chain. The first item in the array corresponds to the leaf certificate, and the last item corresponds to the anchor (assuming that verification of the chain did not fail before reaching the anchor certificate). Each structure describes the status of one certificate in the chain. This structure is defined in cssmapple.h. Do not attempt to free this pointer; it remains valid until the trust management object is released or until the next call to the function SecTrustEvaluate that uses this trust management object.

Return Value

A result code. See Security Framework Result Codes.

Discussion

After calling the SecTrustEvaluate(_:_:) function, you can call the SecTrustGetResult function or the SecTrustGetCssmResult function to get detailed information about the results of the evaluation. Whereas the SecTrustGetResult function returns the information in a form that you can interpret without extensive knowledge of CSSM, the SecTrustGetCssmResult function returns information in a form that can be passed directly to CSSM functions.

You can call the SFCertificateTrustPanel class in the Security Interface to display these results to the user.

It is safe to call this function concurrently on two or more threads as long as it is not used to get values from a trust management object that is simultaneously being changed by another function. For example, you can call this function on two threads at the same time, but not if you are simultaneously calling the SecTrustSetVerifyDate(_:_:) function for the same trust management object on another thread.

Special Considerations

Use SecTrustGetTrustResult(_:_:) for new development instead.