ios - 如何在 Swift 中验证 X509Certificate？

Question

有谁知道如何在 swift 中验证 x509certificate？或者也许有人有它的示例链接？

我从钥匙串(keychain)中获得了证书，现在我需要验证它。

let keychainQuery: [String: Any] = [kSecClass as String: kSecClassCertificate,
                                    kSecAttrLabel as String: "cert",
                                    kSecReturnRef as String: kCFBooleanTrue]

var result: CFTypeRef?
let status = SecItemCopyMatching(keychainQuery as CFDictionary, &result)

guard status == errSecSuccess else { return }

entry = result as! SecCertificate

Answer 1

我找到了解决这些问题的解决方案，但仍然没有检查它。

我们需要从我们的证书创建 SecTrust 类。

让策略:SecPolicy = SecPolicyCreateBasicX509()

let trust: SecTrust?
let status = SecTrustCreateWithCertificates(entry as CFTypeRef, policy, &trust)

然后我们可以检查这个，例如日期

let trustCertStatus = SecTrustSetVerifyDate(trust!, CFDateCreate(kCFAllocatorDefault, CFAbsoluteTimeGetCurrent()))