CBLTLSIdentity


@interface CBLTLSIdentity : NSObject

ENTERPRISE EDITION ONLY.

CBLTLSIdentity provides TLS Identity information including a key pair and X.509 certificate chain used for configuring TLS communication to the listener.

  • The certificate chain as an array of SecCertificateRef object.

    Declaration

    Objective-C

    @property (nonatomic, readonly) NSArray *_Nonnull certs;

  • The identity expiration date which is the expiration date of the first certificate in the chain.

    Declaration

    Objective-C

    @property (nonatomic, readonly) NSDate *_Nonnull expiration;

  • Undocumented

    Declaration

    Objective-C

    - (instancetype) init NS_UNAVAILABLE;

  • Get an identity from the Keychain with the given label.

    Declaration

    Objective-C

    + (nullable CBLTLSIdentity *)identityWithLabel:(nonnull NSString *)label
                                         error:(NSError *_Nullable *_Nullable)
                                                   error;

  • Get an identity with a SecIdentity object. Any intermediate or root certificates required to identify the certificate but not present in the system wide set of trusted anchor certificates need to be specified in the optional certs parameter. In additon, the specified SecIdenetity object is required to be present in the KeyChain, otherwise an exception will be thrown.

    Declaration

    Objective-C

    + (nullable CBLTLSIdentity *)
    identityWithIdentity:(nonnull SecIdentityRef)identity
                   certs:(nullable NSArray *)certs
                   error:(NSError *_Nullable *_Nullable)error;

  • Creates a self-signed identity and persist the identity in the Keychain with the given label. Note that the Common Name (kCBLCertAttrCommonName) attribute is required. If the Common Name attribute is not included, an error will be returned.

    Declaration

    Objective-C

    + (nullable CBLTLSIdentity *)
    createIdentityForServer:(BOOL)server
                 attributes:
                     (nonnull NSDictionary<NSString *, NSString *> *)attributes
                 expiration:(nullable NSDate *)expiration
                      label:(nonnull NSString *)label
                      error:(NSError *_Nullable *_Nullable)error;

  • Imports and creates a identity from the given PKCS12 Data. The imported identity will be stored in the Keychain with the given label.

    Declaration

    Objective-C

    + (nullable CBLTLSIdentity *)
    importIdentityWithData:(nonnull NSData *)data
                  password:(nullable NSString *)password
                     label:(nonnull NSString *)label
                     error:(NSError *_Nullable *_Nullable)error;

  • Delete the identity in the Keychain with the given label.

    Declaration

    Objective-C

    + (BOOL)deleteIdentityWithLabel:(nonnull NSString *)label
                          error:(NSError *_Nullable *_Nullable)error;