Documentation Archive Developer
Search

Security Changes

Security

CSCommon.h
Added errSecCSBadCallbackValue
Added errSecCSBadNestedCode
Added errSecCSHelperFailed
Added errSecCSResourceDirectoryFailed
Added errSecCSUnsignedNestedCode
Added errSecCSVetoed
Added kSecCodeSignatureEnforcement
Added kSecCodeSignatureRestrict
CipherSuite.h
Added TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
Added TLS_DHE_PSK_WITH_AES_128_CBC_SHA
Added TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
Added TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
Added TLS_DHE_PSK_WITH_AES_256_CBC_SHA
Added TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
Added TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
Added TLS_DHE_PSK_WITH_NULL_SHA
Added TLS_DHE_PSK_WITH_NULL_SHA256
Added TLS_DHE_PSK_WITH_NULL_SHA384
Added TLS_DHE_PSK_WITH_RC4_128_SHA
Added TLS_PSK_WITH_3DES_EDE_CBC_SHA
Added TLS_PSK_WITH_AES_128_CBC_SHA
Added TLS_PSK_WITH_AES_128_CBC_SHA256
Added TLS_PSK_WITH_AES_128_GCM_SHA256
Added TLS_PSK_WITH_AES_256_CBC_SHA
Added TLS_PSK_WITH_AES_256_CBC_SHA384
Added TLS_PSK_WITH_AES_256_GCM_SHA384
Added TLS_PSK_WITH_NULL_SHA
Added TLS_PSK_WITH_NULL_SHA256
Added TLS_PSK_WITH_NULL_SHA384
Added TLS_PSK_WITH_RC4_128_SHA
Added TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
Added TLS_RSA_PSK_WITH_AES_128_CBC_SHA
Added TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
Added TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
Added TLS_RSA_PSK_WITH_AES_256_CBC_SHA
Added TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
Added TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
Added TLS_RSA_PSK_WITH_NULL_SHA
Added TLS_RSA_PSK_WITH_NULL_SHA256
Added TLS_RSA_PSK_WITH_NULL_SHA384
Added TLS_RSA_PSK_WITH_RC4_128_SHA
SecBase.h
Added errSecBadReq
Added errSecCoreFoundationUnknown
Added errSecDskFull
Added errSecIO
Added errSecInternalComponent
Added errSecUserCanceled
Added errSecWrPerm
SecCode.h
Removed kSecCodeSignerFlags
Added kSecCSUseAllArchitectures
Added kSecCodeInfoFlags
Added kSecGuestAttributeDynamicCode
Added kSecGuestAttributeDynamicCodeInfoPlist
SecItem.h
Added kSecAttrAccessGroup
Added kSecAttrAccessible
Added kSecAttrAccessibleAfterFirstUnlock
Added kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly
Added kSecAttrAccessibleAlways
Added kSecAttrAccessibleAlwaysThisDeviceOnly
Added kSecAttrAccessibleWhenUnlocked
Added kSecAttrAccessibleWhenUnlockedThisDeviceOnly
Added kSecAttrIsExtractable
Added kSecAttrIsSensitive
Added kSecAttrKeyTypeEC
Added kSecAttrSynchronizable
Added kSecAttrSynchronizableAny
SecKeychainItem.h
Modified kSecAppleSharePasswordItemClass
Deprecation
Fromnone
ToOS X 10.9

SecPolicy.h
Added SecPolicyCreateRevocation()
Added SecPolicyCreateWithProperties()
Added kSecPolicyApplePassbookSigning
Added kSecPolicyAppleRevocation
Added kSecPolicyRevocationFlags
Added kSecPolicyTeamIdentifier
Added kSecRevocationCRLMethod
Added kSecRevocationNetworkAccessDisabled
Added kSecRevocationOCSPMethod
Added kSecRevocationPreferCRL
Added kSecRevocationRequirePositiveResponse
Added kSecRevocationUseAnyAvailableMethod
Modified SecPolicyCreateWithOID()
Deprecation
Fromnone
ToOS X 10.9

Modified SecPolicyGetOID()
Introduction
FromOS X 10.0
ToOS X 10.2

Modified SecPolicyGetTPHandle()
Introduction
FromOS X 10.0
ToOS X 10.2

Modified SecPolicyGetValue()
Introduction
FromOS X 10.0
ToOS X 10.2

Modified SecPolicySetProperties()
Deprecation
Fromnone
ToOS X 10.9

Modified SecPolicySetValue()
Introduction
FromOS X 10.0
ToOS X 10.2

Modified kSecPolicyAppleiChat
Deprecation
Fromnone
ToOS X 10.9

SecStaticCode.h
Added kSecCodeAttributeUniversalFileOffset
SecTrust.h
Added SecTrustCopyExceptions()
Added SecTrustCopyResult()
Added SecTrustGetNetworkFetchAllowed()
Added SecTrustSetExceptions()
Added SecTrustSetNetworkFetchAllowed()
Added SecTrustSetOCSPResponse()
Added kSecTrustEvaluationDate
Added kSecTrustExtendedValidation
Added kSecTrustOrganizationName
Added kSecTrustResultValue
Added kSecTrustRevocationChecked
Added kSecTrustRevocationValidUntilDate
Modified SecTrustCreateWithCertificates()
Declaration
FromOSStatus SecTrustCreateWithCertificates ( CFArrayRef certificates, CFTypeRef policies, SecTrustRef *trustRef);
ToOSStatus SecTrustCreateWithCertificates ( CFTypeRef certificates, CFTypeRef policies, SecTrustRef *trust);

Modified SecTrustGetCssmResult()
Introduction
FromOS X 10.0
ToOS X 10.2

Modified SecTrustGetCssmResultCode()
Introduction
FromOS X 10.0
ToOS X 10.2

Modified SecTrustGetResult()
Introduction
FromOS X 10.0
ToOS X 10.2

Modified SecTrustGetTPHandle()
Introduction
FromOS X 10.0
ToOS X 10.2

Modified SecTrustGetTrustResult()
Declaration
FromOSStatus SecTrustGetTrustResult ( SecTrustRef trustRef, SecTrustResultType *result);
ToOSStatus SecTrustGetTrustResult ( SecTrustRef trust, SecTrustResultType *result);

Modified SecTrustSetParameters()
Introduction
FromOS X 10.0
ToOS X 10.2

Modified SecTrustUserSetting
Deprecation
Fromnone
ToOS X 10.9

Modified kSecTrustResultConfirm
Deprecation
Fromnone
ToOS X 10.9

SecureTransport.h
Removed errSSLLast
Added #def errSSLLast
Added errSSLUnexpectedRecord
Added kSSLSessionOptionFalseStart
Added kSSLSessionOptionSendOneByteRecord
Modified SSLCopyPeerCertificates()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLCopyTrustedRoots()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLDisposeContext()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLGetAllowsAnyRoot()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLGetAllowsExpiredCerts()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLGetAllowsExpiredRoots()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLGetEnableCertVerify()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLGetProtocolVersionEnabled()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLGetRsaBlinding()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLNewContext()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLSetAllowsAnyRoot()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLSetAllowsExpiredCerts()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLSetAllowsExpiredRoots()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLSetEnableCertVerify()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLSetProtocolVersionEnabled()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLSetRsaBlinding()
Deprecation
Fromnone
ToOS X 10.9

Modified SSLSetTrustedRoots()
Deprecation
Fromnone
ToOS X 10.9