kSecMatchPolicy

Static kSecMatchPolicy 

Source
pub unsafe static kSecMatchPolicy: &'static CFString
Available on crate feature SecItem only.
Expand description

Predefined search constants used to set values in a query dictionary. You can specify a combination of search attributes and item attributes when looking for matching items with the SecItemCopyMatching function.

SecPolicyRef. If provided, returned certificates or identities must verify with this policy.

CFArray of SecKeychainItemRef items. If provided, returned items will be limited to the subset which are contained in this list.

CFArray of SecKeychainRef items. If provided, the search will be limited to the keychains contained in this list.

CFArray of X.500 names (of type CFDataRef). If provided, returned certificates or identities will be limited to those whose certificate chain contains one of the issuers provided in this list.

value is a CFStringRef containing an RFC822 email address. If provided, returned certificates or identities will be limited to those that contain the address in their subject or subject alternative name.

is a CFStringRef. If provided, returned certificates or identities will be limited to those containing this string in the subject.

is a CFStringRef. If provided, returned internet passwords will be limited to those which have a server host that is equal to or a subdomain of this string. This filter only works on the Data Protection Keychain on macOS.

is a CFStringRef. If provided, returned certificates or identities will be limited to those with subject names that start with this string.

is a CFStringRef. If provided, returned certificates or identities will be limited to those with subject names that end with this string.

value is a CFStringRef. If provided, returned certificates or identities will be limited to those matching this string exactly in the subject.

is a CFBooleanRef. If this value is kCFBooleanFalse, or is not provided, then case-sensitive string matching is performed.

value is a CFBooleanRef. If this value is kCFBooleanFalse, or is not provided, then diacritic-sensitive string matching is performed.

value is a CFBooleanRef. If this value is kCFBooleanFalse, or is not provided, then string matching is width-sensitive (e.g. ‘a’ != 0xFF41).

a CFBooleanRef. If provided with a value of kCFBooleanTrue, only certificates which can be verified back to a trusted anchor will be returned. If this value is kCFBooleanFalse, or is not provided, then both trusted and untrusted certificates may be returned.

of type CFDateRef. If provided, returned keys, certificates or identities will be limited to those which are valid for the given date. Pass a value of kCFNull to indicate the current date.

CFNumberRef. If provided, this value specifies the maximum number of results to return. If not provided, results are limited to the first item found. Predefined values are provided for a single item (kSecMatchLimitOne) and all matching items (kSecMatchLimitAll).

item found; used as a value for the kSecMatchLimit dictionary key.

may be returned; used as a value for the kSecMatchLimit dictionary key.

See also Apple’s documentation