2 * Copyright (c) 2000-2004 Apple Computer, Inc. All Rights Reserved.
4 * @APPLE_LICENSE_HEADER_START@
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
21 * @APPLE_LICENSE_HEADER_END@
23 * cssmapplePriv.h -- Private CSSM features specific to Apple's Implementation
26 #ifndef _CSSMAPPLE_PRIV_H_
27 #define _CSSMAPPLE_PRIV_H_ 1
29 #include <Security/cssmtype.h>
30 #include <Security/cssmapple.h>
37 * Options for X509TP's CSSM_TP_CertGroupVerify for policy
38 * CSSMOID_APPLE_TP_REVOCATION_OCSP. A pointer to, and length of, one
39 * of these is optionally placed in
40 * CSSM_TP_VERIFY_CONTEXT.Cred->Policy.PolicyIds[n].FieldValue.
43 #define CSSM_APPLE_TP_OCSP_OPTS_VERSION 0
45 typedef uint32 CSSM_APPLE_TP_OCSP_OPT_FLAGS
;
47 // require OCSP verification for each cert; default is "try"
48 CSSM_TP_ACTION_OCSP_REQUIRE_PER_CERT
= 0x00000001,
49 // require OCSP verification for certs which claim an OCSP responder
50 CSSM_TP_ACTION_OCSP_REQUIRE_IF_RESP_PRESENT
= 0x00000002,
51 // disable network OCSP transactions
52 CSSM_TP_ACTION_OCSP_DISABLE_NET
= 0x00000004,
53 // disable reads from local OCSP cache
54 CSSM_TP_ACTION_OCSP_CACHE_READ_DISABLE
= 0x00000008,
55 // disable reads from local OCSP cache
56 CSSM_TP_ACTION_OCSP_CACHE_WRITE_DISABLE
= 0x00000010,
57 // if set and positive OCSP verify for given cert, no further revocation
58 // checking need be done on that cert
59 CSSM_TP_ACTION_OCSP_SUFFICIENT
= 0x00000020,
60 // generate nonce in OCSP request
61 CSSM_TP_OCSP_GEN_NONCE
= 0x00000040,
62 // when generating nonce, require matching nonce in response
63 CSSM_TP_OCSP_REQUIRE_RESP_NONCE
= 0x00000080
68 CSSM_APPLE_TP_OCSP_OPT_FLAGS Flags
;
69 CSSM_DATA_PTR LocalResponder
; /* URI */
70 CSSM_DATA_PTR LocalResponderCert
; /* X509 DER encoded cert */
71 } CSSM_APPLE_TP_OCSP_OPTIONS
;
77 #endif /* _CSSMAPPLE_PRIV_H_ */