SecCertificateAddToKeychain and SecTrustSettingsSetTrustSettings

security-framework-sys/src/certificate.rs

@@ -9,6 +9,7 @@ use core_foundation_sys::string::CFStringRef;
 
 use crate::base::SecCertificateRef;
 use crate::base::SecKeyRef;
+use crate::base::SecKeychainRef;
 
 extern "C" {
     #[cfg(target_os = "macos")]
@@ -40,6 +41,10 @@ extern "C" {
         allocator: CFAllocatorRef,
         data: CFDataRef,
     ) -> SecCertificateRef;
+    pub fn SecCertificateAddToKeychain(
+        certificate: SecCertificateRef,
+        keychain: SecKeychainRef,
+    ) -> OSStatus;
     pub fn SecCertificateCopyData(certificate: SecCertificateRef) -> CFDataRef;
     pub fn SecCertificateCopySubjectSummary(certificate: SecCertificateRef) -> CFStringRef;
     pub fn SecCertificateCopyCommonName(

security-framework-sys/src/trust_settings.rs

@@ -1,5 +1,6 @@
 use crate::base::SecCertificateRef;
 use core_foundation_sys::array::CFArrayRef;
+use core_foundation_sys::base::CFTypeRef;
 use core_foundation_sys::base::OSStatus;
 
 pub type SecTrustSettingsDomain = u32;
@@ -26,4 +27,9 @@ extern "C" {
         domain: SecTrustSettingsDomain,
         trustSettings: *mut CFArrayRef,
     ) -> OSStatus;
+    pub fn SecTrustSettingsSetTrustSettings(
+        certificateRef: SecCertificateRef,
+        domain: SecTrustSettingsDomain,
+        trustSettingsDictOrArray: CFTypeRef,
+    ) -> OSStatus;
 }

security-framework/src/trust_settings.rs

@@ -19,13 +19,14 @@ use crate::cvt;
 
 /// Which set of trust settings to query
 #[derive(Debug, Copy, Clone, PartialEq, Eq)]
+#[repr(u32)]
 pub enum Domain {
     /// Per-user trust settings
-    User,
+    User = kSecTrustSettingsDomainUser,
     /// Locally administered, system-wide trust settings
-    Admin,
+    Admin = kSecTrustSettingsDomainAdmin,
     /// System trust settings
-    System,
+    System = kSecTrustSettingsDomainSystem,
 }
 
 impl From<Domain> for SecTrustSettingsDomain {