NAME
   TP_CertGroupToTupleGroup,
   CSSM_TP_CertGroupToTupleGroup - Create a set of authorization
                                   tuples (CDSA)

 SYNOPSIS
   # include <cssm.h>

    API:
        CSSM_RETURN CSSMAPI CSSM_TP_CertGroupToTupleGroup
        (CSSM_TP_HANDLE TPHandle,
        CSSM_CL_HANDLE  CLHandle,
        const CSSM_CERTGROUP *CertGroup,
        CSSM_TUPLEGROUP_PTR *TupleGroup)
    SPI:
        CSSM_RETURN CSSMTPI TP_CertGroupToTupleGroup
        (CSSM_TP_HANDLE TPHandle,
        CSSM_CL_HANDLE  CLHandle,
        const CSSM_CERTGROUP *CertGroup,
        CSSM_TUPLEGROUP_PTR *TupleGroup)

 LIBRARY
   Common Security Services Manager library (CDSA$INCSSM300_SHR.EXE)

 PARAMETERS
   TPHandle (input)
           The handle that describes the trust policy service module
           used to perform this function.

   CLHandle (input/optional)
           The handle that describes the certificate library module that
           can be used to scan the certificate fields for values. If no
           certificate library module is specified, the TP module uses
           an assumed CL module.

   CertGroup (input)
           A group of certificates in the native certificate format
           supported by the Trust Policy module. The certificates
           carry authorizations for one or more certificate subjects.

   TupleGroup (output)
           A pointer to a structure containing references to one or
           more tuples resulting from the translation process. Storage
           for structure and the tuples is allocated by the service
           provider and must be deallocated by the application.

 DESCRIPTION
   This function creates a set of authorization tuples based on a set of
   input certificates. The certificates must be of the type managed by
   the Trust Policy module. The trust policy module may require that the
   input certificates be successfully verified before being translated to
   tuples.  It is assumed that the certificates carry authorizations. The
   trust policy service provider interprets the certificate authorization
   fields and generates one or more tuples corresponding to those
   authorizations.  The certificates of the type managed by the Trust
   Policy module. The resulting tuples can be input to an authorization
   evaluation function, such as CSSM_AC_AuthCompute() (CSSM API), or
   AC_AuthCompute() (AC SPI), which determines whether a particular
   action is authorized under a basic set of authorization assumptions.

 RETURN VALUE
   A CSSM_RETURN value indicating success or specifying a particular
   error condition. The value CSSM_OK indicates success. All other
   values represent an error condition.

 ERRORS
   Errors are described in the CDSA technical standard.  See CDSA.

        CSSMERR_TP_INVALID_CL_HANDLE
        CSSMERR_TP_INVALID_CERTGROUP_POINTER
        CSSMERR_TP_INVALID_CERTGROUP

 SEE ALSO
   Books

   Intel CDSA Application Developer's Guide (see CDSA)

   Other Help Topics

   Functions for the CSSM API:

       CSSM_TP_TupleGroupToCertGroup
       CSSM_AC_AuthCompute

   Functions for the TP SPI:

       TP_TupleGroupToCertGroup
       AC_AuthCompute