Trust

Overview

Before using a certificate, you evaluate its trustworthiness for a particular purpose.

If you know that a certificate comes unaltered from its sender, you can be confident that its embedded public key does as well. You can also take at face value claims made by the certificate about when and for what purpose the public key may be used. You can securely engage in the operations described in Using Keys for Encryption and Signing and Verifying without prior arrangement between sender and receiver.

Topics

Essentials

• Creating a Trust Object
• SecTrustCreateWithCertificates(_:_:_:)
• SecTrust
• SecTrustGetTypeID()

Trust Evaluation

• Evaluating a Trust and Parsing the Result
• SecTrustEvaluateWithError(_:_:)
• SecTrustEvaluateAsyncWithError(_:_:_:)
• SecTrustWithErrorCallback

Trust Evaluation Result

• Discovering Why a Trust Evaluation Failed
• SecTrustGetTrustResult(_:_:)
• SecTrustResultType
• SecTrustCopyResult(_:)
• Trust Result Dictionary Keys

Trust Components

• SecTrustCopyPublicKey(_:)
• SecTrustGetCertificateCount(_:)
• SecTrustGetCertificateAtIndex(_:_:)
• SecTrustGetVerifyTime(_:)
• SecTrustCopyAnchorCertificates(_:)
• SecTrustCopyCustomAnchorCertificates(_:_:)
• SecTrustCopyExceptions(_:)
• SecTrustCopyPolicies(_:_:)
• SecTrustCopyProperties(_:)

Advanced Trust Configuation

• Configuring a Trust
• SecTrustSetVerifyDate(_:_:)
• SecTrustSetAnchorCertificates(_:_:)
• SecTrustSetAnchorCertificatesOnly(_:_:)
• SecTrustSetExceptions(_:_:)
• SecTrustSetPolicies(_:_:)
• SecTrustSetOptions(_:_:)
• SecTrustOptionFlags
• SecTrustGetNetworkFetchAllowed(_:_:)
• SecTrustSetNetworkFetchAllowed(_:_:)
• SecTrustSetOCSPResponse(_:_:)
• SecTrustSetSignedCertificateTimestamps(_:_:)

Trust Settings

• SecTrustSettingsCopyCertificates(_:_:)
• SecTrustSettingsCopyModificationDate(_:_:_:)
• Usage Constraints Dictionary Keys
• SecTrustSettingsCopyTrustSettings(_:_:_:)
• SecTrustSettingsCreateExternalRepresentation(_:_:)
• SecTrustSettingsImportExternalRepresentation(_:_:)
• SecTrustSettingsRemoveTrustSettings(_:_:)
• SecTrustSettingsSetTrustSettings(_:_:_:)
• SecTrustSettingsKeyUsage
• SecTrustSettingsResult
• SecTrustSettingsDomain

Legacy Symbols

• SecTrustEvaluate(_:_:)
• SecTrustEvaluateAsync(_:_:_:)
• SecTrustCallback
• SecTrustSetKeychains(_:_:)