diff -r 000000000000 -r 5e4855a592ee TCP/TCPEndpoint+Certs.m
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/TCP/TCPEndpoint+Certs.m	Fri Jul 24 14:06:28 2009 -0700
@@ -0,0 +1,53 @@
+//
+//  TCPEndpoint+Certs.m
+//  MYNetwork-iPhone
+//
+//  Created by Jens Alfke on 5/21/09.
+//  Copyright 2009 Jens Alfke. All rights reserved.
+//
+
+#import "TCPEndpoint.h"
+#import "CollectionUtils.h"
+#import <Security/Security.h>
+
+
+/** These are some optional category methods for TCPEndpoint for dumping info about certificates.
+    They're useful if you're working with SSL connections, but they do link against the Security
+    framework, so they're moved into this extra file that you can choose to compile into your
+    project or not.
+*/
+@implementation TCPEndpoint (Certificates)
+
+
++ (NSString*) describeCert: (SecCertificateRef)cert {
+    if (!cert)
+        return @"(null)";
+    NSString *desc;
+#if TARGET_OS_IPHONE && !defined(__SEC_TYPES__)
+    CFStringRef summary = NULL;
+    SecCertificateCopySubjectSummary(cert);
+    desc = $sprintf(@"Certificate[%@]", summary);
+    if(summary) CFRelease(summary);
+#else
+    CFStringRef name=NULL;
+    CFArrayRef emails=NULL;
+    SecCertificateCopyCommonName(cert, &name);
+    SecCertificateCopyEmailAddresses(cert, &emails);
+    desc = $sprintf(@"Certificate[\"%@\", <%@>]",
+                    name, [(NSArray*)emails componentsJoinedByString: @">, <"]);
+    if(name) CFRelease(name);
+    if(emails) CFRelease(emails);
+#endif
+    return desc;
+}
+
++ (NSString*) describeIdentity: (SecIdentityRef)identity {
+    if (!identity)
+        return @"(null)";
+    SecCertificateRef cert;
+    SecIdentityCopyCertificate(identity, &cert);
+    return $sprintf(@"Identity[%@]", [self describeCert: cert]);
+}
+
+
+@end