[quote='876494022, ellinj, /thread/815390?answerId=876494022#876494022, /profile/ellinj'] Is there any Keychain support for non-X.509 certificate formats? [/quote] No. Or, more specifically, the keychain only supports X.509 for kSecClassCertificate items. That doesn’t stop you storing the raw data as kSecClassGenericPassword. As to what you should do, that depends on how you’re using the word “certificate”: Apple uses [1] certificate to refer to the signed wrapper around the public key. We then use digital identity to refer to the combination of a certificate and the private key that matches the public key in that certificate. See TN3161 Inside Code Signing: Certificates for more on this. However, it’s common for folks to use a single term, certificate, to refer to both the certificate and digital identity, with ‘hilarious’ confusion being the result. So, if you’re using certificate ‘correctly’ then the certificate contains just the public key and you can store it wherever you want [2]. OTOH, if your
Topic:
App & System Services
SubTopic:
Networking
Tags: