I'm developing an iOS application which needs access to the system certificates and keys for digitally signing data.
I've done some research and I've found that theoretically it's not possible from a third party app to get access to the system keychain since it only has access to its own keychain. Here is a stackoverflow post explaining that.
However, some applications like the Cisco AnyConnect show a list with all the system certificates for VPN configuration. That might mean that THERE ACTUALLY IS a way to get that system certificates list.
This image shows how the certificates are displayed in the cisco app.
I'd be really grateful if somebody could shed some light on this issue.
Because it's just a matter of signing your binary using a proper entitlements.xml file. Keychain-dumper does exactly what you're looking for.
来源：https://stackoverflow.com/questions/13121983/listing-system-keychain-certificates