add an adaptor for certificate keychain access on macOS

FIX: build on non-macOS platforms

FIX: move constructor of scoped_CFType

implement Certificate_Store_MacOS::all_subjects()

Refactor: factor out X509 policy creation

FIX: cosmetics

FIX: code cosmetics

* Refactor: use a unique_ptr rather than free()
* Refactor: use a unique_ptr rather than free()
* use std::shared_ptr<> for Pimpl
* double-check opening of cert stores
* add some documentation
* copyright notice dates

shush clang compiler warning -Wcast-qual
See here for details: https://bugs.webkit.org/show_bug.cgi?id=177893

shush -Wmissing-braces on Travis CI (hopefully)

FIX: crash when no certificate matches

FIX: 'normalize' DNs according to Apple's needs

FIX: take early review comments into account

FIX: compiler warning regarding variable shadowing

add timers to the cerstore tests

FIX: catch invalid SHA-1 parameter

FIX: handle ambiguous match in .find_cert_by_pubkey_sha1() according to the super-class's documentation

FIX: API documentation

FIX: cosmetics

make Certificate_Store_MacOS::find_crl_for() return {}

FIX: low-hanging review comments

FIX: more review comments

FIX: compiler warnings

1 files changed, 2 insertions, 0 deletions

diff --git a/src/build-data/os/darwin.txt b/src/build-data/os/darwin.txt
index 3b0147c22..b54dd99f1 100644
--- a/src/build-data/os/darwin.txt
+++ b/src/build-data/os/darwin.txt
@@ -21,6 +21,8 @@ commoncrypto
 sockets
 threads
 filesystem
+
+apple_keychain
 </target_features>
 
 <aliases>