ItemSearchOptions: Allow searching for certificates by serial number

kornelski · Nov 15, 2024 · 55fe4fe · 55fe4fe
1 parent 68fee25
commit 55fe4fe
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/security-framework-sys/src/item.rs b/security-framework-sys/src/item.rs
@@ -28,6 +28,7 @@ extern "C" {
     pub static kSecAttrLabel: CFStringRef;
     pub static kSecAttrIsPermanent: CFStringRef;
     pub static kSecAttrPublicKeyHash: CFStringRef;
+    pub static kSecAttrSerialNumber: CFStringRef;
     pub static kSecPrivateKeyAttrs: CFStringRef;
     pub static kSecPublicKeyAttrs: CFStringRef;
 

diff --git a/security-framework/src/item.rs b/security-framework/src/item.rs
@@ -137,6 +137,7 @@ pub struct ItemSearchOptions {
     account: Option<CFString>,
     access_group: Option<CFString>,
     pub_key_hash: Option<CFData>,
+    serial_number: Option<CFData>,
     app_label: Option<CFData>,
 }
 
@@ -272,6 +273,15 @@ impl ItemSearchOptions {
         self
     }
 
+    /// Search for a certificate with the given serial number.
+    ///
+    /// This is only compatible with [`ItemClass::certificate`].
+    #[inline(always)]
+    pub fn serial_number(&mut self, serial_number: &[u8]) -> &mut Self {
+        self.serial_number = Some(CFData::from_buffer(serial_number));
+        self
+    }
+
     /// Search for a key with the given public key hash.
     ///
     /// This is only compatible with [`ItemClass::key`], to search for a
@@ -399,6 +409,13 @@ impl ItemSearchOptions {
                 );
             }
 
+            if let Some(ref serial_number) = self.serial_number {
+                params.add(
+                    &kSecAttrSerialNumber.to_void(),
+                    &serial_number.to_void(),
+                );
+            }
+
             if let Some(ref app_label) = self.app_label {
                 params.add(
                     &kSecAttrApplicationLabel.to_void(),