---

Certificate, Key, and Trust Services Tasks

This chapter describes and illustrates the use of Certificate, Key, and Trust Services functions to evaluate the trust of a certificate, determine the cause of a trust failure, and recover from a trust failure.

The sequence of operations illustrated in this chapter is:

1. Find a certificate in a keychain.

2. Obtain a policy object for the policy used in evaluation of the certificate.

3. Validate the certificate and evaluate whether it can be trusted as specified by the policy.

4. Test for a recoverable trust error.

5. Determine whether the trust error is due to an expired certificate.

6. Change the evaluation criteria to ignore expired certificates.

7. Reevaluate the certificate.

“Chapter 2, Certificate, Key, and Trust Services Concepts,” provides an introduction to the concepts and terminology of Certificate, Key, and Trust Services. For detailed information about all Certificate, Key, and Trust Services functions, see Certificate, Key, and Trust Services Reference.

Contents:

Finding a Certificate on the Keychain
Obtaining a Policy Object
Evaluating Trust
Recovering From a Trust Failure

---