1  /*
  2   * Copyright (c) 2017 Apple Inc. All Rights Reserved.
  3   *
  4   * @APPLE_LICENSE_HEADER_START@
  5   *
  6   * This file contains Original Code and/or Modifications of Original Code
  7   * as defined in and that are subject to the Apple Public Source License
  8   * Version 2.0 (the 'License'). You may not use this file except in
  9   * compliance with the License. Please obtain a copy of the License at
 10   * http://www.opensource.apple.com/apsl/ and read it before using this
 11   * file.
 12   *
 13   * The Original Code and all software distributed under the License are
 14   * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 15   * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 16   * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 17   * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 18   * Please see the License for the specific language governing rights and
 19   * limitations under the License.
 20   *
 21   * @APPLE_LICENSE_HEADER_END@
 22   */
 23  #ifndef macos_tapi_hack_h
 24  #define macos_tapi_hack_h
 25  
 26  // This file is to work around TAPI's insistence that every exported symbol is in a header file.
 27  // The Security project just simply rejects such ideas, so this is the pressure valve:
 28  //
 29  // One-offs in header files that shouldn't be exported in the real-live macOS Security framework
 30  // can be added here, and TAPI will accept them.
 31  //
 32  // Please don't add anything here.
 33  
 34  #ifndef SECURITY_PROJECT_TAPI_HACKS
 35  #error This header is not for inclusion; it's a nasty hack to get the macOS Security framework to build with TAPI.
 36  #endif
 37  
 38  #include <sqlite3.h>
 39  #include <xpc/xpc.h>
 40  
 41  #pragma clang diagnostic push
 42  #pragma clang diagnostic ignored "-Wvisibility"
 43  
 44  CFDataRef SecDistinguishedNameCopyNormalizedContent(CFDataRef distinguished_name);
 45  SecKeyRef SecCertificateCopyPublicKey_ios(SecCertificateRef certificate);
 46  CFDataRef _SecItemCreatePersistentRef(CFTypeRef iclass, sqlite_int64 rowid, CFDictionaryRef attributes);
 47  CFDictionaryRef SecTokenItemValueCopy(CFDataRef db_value, CFErrorRef *error);
 48  CFArrayRef SecTrustCopyProperties_ios(SecTrustRef trust);
 49  CFArrayRef SecItemCopyParentCertificates_ios(CFDataRef normalizedIssuer, CFArrayRef accessGroups, CFErrorRef *error);
 50  bool SecItemCertificateExists(CFDataRef normalizedIssuer, CFDataRef serialNumber, CFArrayRef accessGroups, CFErrorRef *error);
 51  bool _SecItemParsePersistentRef(CFDataRef persistent_ref, CFStringRef *return_class,
 52                                  sqlite_int64 *return_rowid, CFDictionaryRef *return_token_attrs);
 53  
 54  // iOS-only SecKey functions
 55  size_t SecKeyGetSize(SecKeyRef key, int whichSize);
 56  CFDataRef SecKeyCopyPublicKeyHash(SecKeyRef key);
 57  
 58  // SecItemPriv.h
 59  extern const CFStringRef kSecUseSystemKeychain;
 60  
 61  // securityd_client.h
 62  
 63  typedef struct SecurityClient {
 64  } SecurityClient;
 65  
 66  extern struct securityd *gSecurityd;
 67  extern struct trustd *gTrustd;
 68  extern SecurityClient * SecSecurityClientGet(void);
 69  bool securityd_send_sync_and_do(enum SecXPCOperation op, CFErrorRef *error,
 70                                  bool (^add_to_message)(xpc_object_t message, CFErrorRef* error),
 71                                  bool (^handle_response)(xpc_object_t response, CFErrorRef* error));
 72  typedef void (^securityd_handler_t)(xpc_object_t reply, CFErrorRef error);
 73  void securityd_send_async_and_do(enum SecXPCOperation op, dispatch_queue_t replyq,
 74  								 bool (^add_to_message)(xpc_object_t message, CFErrorRef* error),
 75  								 securityd_handler_t handler);
 76  XPC_RETURNS_RETAINED xpc_object_t securityd_message_with_reply_sync(xpc_object_t message, CFErrorRef *error);
 77  XPC_RETURNS_RETAINED xpc_object_t securityd_create_message(enum SecXPCOperation op, CFErrorRef *error);
 78  bool securityd_message_no_error(xpc_object_t message, CFErrorRef *error);
 79  
 80  @interface SecuritydXPCClient : NSObject
 81  @end
 82  
 83  void SecAccessGroupsSetCurrent(CFArrayRef accessGroups);
 84  CFArrayRef SecAccessGroupsGetCurrent(void);
 85  void SecSecurityClientRegularToAppClip(void);
 86  void SecSecurityClientAppClipToRegular(void);
 87  void SecSecurityClientSetApplicationIdentifier(CFStringRef identifier);
 88  
 89  void SecServerSetTrustdMachServiceName(const char *name);
 90  
 91  // checkpw.c
 92  int checkpw_internal( const struct passwd* pw, const char* password );
 93  
 94  #ifdef __arm64__
 95  extern SecKeyRef SecCertificateCopyPublicKey_ios(SecCertificateRef certificate) __asm("_SecCertificateCopyPublicKey");
 96  extern CFDataRef SecCertificateCopySerialNumber_ios(SecCertificateRef certificate) __asm("_SecCertificateCopySerialNumber");
 97  #endif
 98  
 99  #pragma clang diagnostic pop
100  
101  #endif /* macos_tapi_hack_h */